Trojan.Generic.16487673 (B) (Emsisoft), Trojan.Generic.16487673 (AdAware), Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.FlyStudio.FD, Trojan.Win32.Swrort.3.FD, GenericEmailWorm.YR, GenericPhysicalDrive0.YR, TrojanFlyStudio.YR (Lavasoft MAS)Behaviour: Trojan-PSW, Trojan, Worm, EmailWorm
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: d475c9143d33f4c1a081c2d95d88ab1d
SHA1: 2bc4973e4e913daae2f0c89b23bf7784a50321d9
SHA256: 14230bab3d229fea68bf6c61664914b21c5d63a53bddbfd37ec63b36c2a5cb7a
SSDeep: 98304:1iPhCHEh99zL2OM5SbWf YFCEMt4PXK2Iu3 YpAXAN:8gHwLYQaf H74PlIOWY
Size: 6492160 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MicrosoftVisualC50, MicrosoftVisualC, MicrosoftVisualCv50v60MFC, Armadillov171, UPolyXv05_v6
Company: no certificate found
Created at: 2014-10-06 20:55:11
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
| Behaviour | Description |
|---|---|
| EmailWorm | Worm can send e-mails. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):
%original file name%.exe:224
Mutexes
The following mutexes were created/opened:
__DDrawCheckExclMode____DDrawExclMode__DDrawDriverObjectListMutexDDrawWindowListMutexc:!documents and settings!adm!userdata!CTF.TMD.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003CTF.Layouts.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003CTF.Asm.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003CTF.Compart.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003CTF.LBES.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003ZonesLockedCacheCounterMutexZonesCounterMutexZonesCacheCounterMutexWininetProxyRegistryMutexWininetConnectionMutexWininetStartupMutexc:!documents and settings!adm!local settings!history!history.ie5!c:!documents and settings!adm!cookies!{1B655094-FE2A-433c-A877-FF9793445069}c:!documents and settings!adm!local settings!temporary internet files!content.ie5!_!MSFTHISTORY!_RasPbFileShimCacheMutex
File activity
The process %original file name%.exe:224 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CA0TE7WD.com/?kqq876038563&r=&number=12&callback=jsonp1io24atk1 (671 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2TFmdmVXXXXaXXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1204 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2R4aCaVXXXXXmXpXXXXXXXXXX_!!28659897-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\lazyloading[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\cnxh_spr_150722[1].png (351 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CAMJS9Q3.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\20160505092249[1].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2X9PghVXXXXXLXXXXXXXXXXXX_!!110856330-0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\getDeviceInfo[2] (71 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\baidu_web[1].gif (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[1].txt (1630 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\mz53_160307[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[2].txt (1386 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2IugjnXXXXXaFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (295 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\CATGCB15.html (3630 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[2].txt (333 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2K.kmlXXXXXbkXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2UOHvlpXXXXa8XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\UserData\KTOR0Z81\stopXPTime[1].xml (162 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\i_tmall[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\getDeviceInfo[1] (72 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2D0RdlVXXXXaLXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\/t/acookie/[1].xml (222 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mz_76_160419[1].jpg (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB27kNMfFXXXXbHXXXXXXXXXXXX_!!13406419-0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\acbeacon2[1].htm (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2TTdcepXXXXbFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2276 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\tanxclick[2].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\tanxssp[1].js (3733 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mod-dot[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2aUepkFXXXXaRXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (4664 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (5820 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\mystyle_wait[1].gif (381 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2zW4GeXXXXXcrXpXXXXXXXXXX_!!17159682-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\wea_0829[1].png (2 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\__indifference__[1].xml (510 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\banner_20160510[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB29oNvipXXXXXmXXXXXXXXXXXX_!!95758821-0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2YgAwkVXXXXaVXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB263C9cpXXXXXBXXXXXXXXXXXX_!!30796562-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\blank[1].png (953 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\2345_160108[1].eot (6496 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\um[1].js (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\tanxclick[1].js (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (170 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\tanx_ssp_fp[1].xml (194 bytes)
C:\superec.ProcessMemory.sys (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\fp[1].swf (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2VcJYmVXXXXaFXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\img[1].png (68 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\mod-search-bg[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\20160505092233[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\20160505092311[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2dlWPopXXXXXIXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\UserData\KTOR0Z81\tanx_ssp_pvid[1].xml (310 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cdn.tanx[2].txt (395 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\data-userdata[1].xml (576 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB24aEXlVXXXXcfXXXXXXXXXXXX_!!2-saturn_solar.png_190x190[1].png (4697 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\tipSet_ie6[1].png (746 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cdn.tanx[1].txt (395 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2mWKbopXXXXaJXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2iBsPkXXXXXcTXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (3308 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2wKl8lpXXXXX1XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\w_day40[1].png (104 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\mz_suning_150529[1].png (1 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\data-userdata[1].xml (186 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2bgHEopXXXXbHXXXXXXXXXXXX_!!0-saturn_solar.jpg_220x220[1].jpg (4123 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB241poeXXXXXbBXpXXXXXXXXXX_!!11442339-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2DbJfmXXXXXX3XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2m7lteXXXXXbIXXXXXXXXXXXX_!!26097738-0-saturn_solar.jpg_190x190[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2rvNBjVXXXXX4XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\tanxssp_acookie_expires[1].xml (214 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\ico_amazon[1].png (536 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CAX03MRZ.json (222 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@acookie[1].txt (534 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2UPnKlFXXXXXAXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\kz_tmall_20160504[1].gif (3489 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\wc[1].xml (126 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2L7nanXXXXXcpXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (4 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\data-userdata[1].xml (720 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\index-sprite-160224[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2jCwGnFXXXXc_XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mz_movie_3[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\CAEJGBN0.com/?kqq876038563&r=&count=41&p4p=jsonp0io24atk1 (376 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CA8QYO6B.htm (2416 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2spqnlpXXXXalXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mz_toggle[1].png (986 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2LvGmgFXXXXaCXpXXXXXXXXXX_!!23282677-0-saturn_solar.jpg_190x190[1].jpg (4313 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\logo_normal[1].png (1867 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2CFOIopXXXXXaXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2LWI9lVXXXXcwXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2uOV7bXXXXXb1XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2cbj2iVXXXXaAXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\mz42_160510[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\acbeacon2[1].html (419 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2gG_OkVXXXXXnXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1332 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@ynuf.alipay[1].txt (519 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\CAGDUZGZ.htm (1121 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\lc[1].xml (126 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\20160505092220[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\y2x5_150626[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2iv6OnVXXXXagXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2696 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[1].txt (623 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\ico_taobao[1].png (958 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\mz_ic_tmall2[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\w_night40[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2VCyIkXXXXXblXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2Sx0akVXXXXX2XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\yun-skin-151015[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2ezzLopXXXXcMXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2379 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\tip_stopXP_2[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\icon_mz62_160329[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2nd8.gVXXXXcBXpXXXXXXXXXX_!!100183773-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\/t/acookie/[1].xml (134 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2wm.EmpXXXXaSXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\UserData\2Z89WTQV\data-userdata[1].xml (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\acbeacon2[1].html (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[2].txt (0 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\data-userdata[1].xml (0 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\data-userdata[1].xml (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\tanxclick[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\CAEJGBN0.com/?kqq876038563&r=&count=41&p4p=jsonp0io24atk1 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CA0TE7WD.com/?kqq876038563&r=&number=12&callback=jsonp1io24atk1 (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.aaa[1].xml (0 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\/t/acookie/[1].xml (0 bytes)
C:\superec.ProcessMemory.sys (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cdn.tanx[1].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[1].txt (0 bytes)
Registry activity
The process %original file name%.exe:224 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "%original file name%.exe"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"
[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1412618111"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "AB 35 E8 20 C9 B1 28 6B CD 9F C9 32 44 81 E0 1F"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
- Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CA0TE7WD.com/?kqq876038563&r=&number=12&callback=jsonp1io24atk1 (671 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2TFmdmVXXXXaXXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1204 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2R4aCaVXXXXXmXpXXXXXXXXXX_!!28659897-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\lazyloading[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\cnxh_spr_150722[1].png (351 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CAMJS9Q3.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\20160505092249[1].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2X9PghVXXXXXLXXXXXXXXXXXX_!!110856330-0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\getDeviceInfo[2] (71 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\baidu_web[1].gif (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[1].txt (1630 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\mz53_160307[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[2].txt (1386 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2IugjnXXXXXaFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (295 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\CATGCB15.html (3630 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[2].txt (333 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2K.kmlXXXXXbkXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2UOHvlpXXXXa8XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\UserData\KTOR0Z81\stopXPTime[1].xml (162 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\i_tmall[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\getDeviceInfo[1] (72 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2D0RdlVXXXXaLXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\/t/acookie/[1].xml (222 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mz_76_160419[1].jpg (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB27kNMfFXXXXbHXXXXXXXXXXXX_!!13406419-0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\acbeacon2[1].htm (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2TTdcepXXXXbFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2276 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\tanxclick[2].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\tanxssp[1].js (3733 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mod-dot[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2aUepkFXXXXaRXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (4664 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (5820 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\mystyle_wait[1].gif (381 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2zW4GeXXXXXcrXpXXXXXXXXXX_!!17159682-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\wea_0829[1].png (2 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\__indifference__[1].xml (510 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\banner_20160510[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB29oNvipXXXXXmXXXXXXXXXXXX_!!95758821-0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2YgAwkVXXXXaVXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB263C9cpXXXXXBXXXXXXXXXXXX_!!30796562-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\blank[1].png (953 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\2345_160108[1].eot (6496 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\um[1].js (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\tanxclick[1].js (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (170 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\tanx_ssp_fp[1].xml (194 bytes)
C:\superec.ProcessMemory.sys (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\fp[1].swf (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2VcJYmVXXXXaFXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\img[1].png (68 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\mod-search-bg[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\20160505092233[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\20160505092311[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2dlWPopXXXXXIXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\UserData\KTOR0Z81\tanx_ssp_pvid[1].xml (310 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cdn.tanx[2].txt (395 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\data-userdata[1].xml (576 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB24aEXlVXXXXcfXXXXXXXXXXXX_!!2-saturn_solar.png_190x190[1].png (4697 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\tipSet_ie6[1].png (746 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cdn.tanx[1].txt (395 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2mWKbopXXXXaJXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2iBsPkXXXXXcTXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (3308 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2wKl8lpXXXXX1XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\w_day40[1].png (104 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\mz_suning_150529[1].png (1 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\data-userdata[1].xml (186 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2bgHEopXXXXbHXXXXXXXXXXXX_!!0-saturn_solar.jpg_220x220[1].jpg (4123 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB241poeXXXXXbBXpXXXXXXXXXX_!!11442339-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2DbJfmXXXXXX3XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2m7lteXXXXXbIXXXXXXXXXXXX_!!26097738-0-saturn_solar.jpg_190x190[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2rvNBjVXXXXX4XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\tanxssp_acookie_expires[1].xml (214 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\ico_amazon[1].png (536 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CAX03MRZ.json (222 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@acookie[1].txt (534 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2UPnKlFXXXXXAXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\kz_tmall_20160504[1].gif (3489 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\wc[1].xml (126 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2L7nanXXXXXcpXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (4 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\data-userdata[1].xml (720 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\index-sprite-160224[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2jCwGnFXXXXc_XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mz_movie_3[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\CAEJGBN0.com/?kqq876038563&r=&count=41&p4p=jsonp0io24atk1 (376 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CA8QYO6B.htm (2416 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2spqnlpXXXXalXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mz_toggle[1].png (986 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2LvGmgFXXXXaCXpXXXXXXXXXX_!!23282677-0-saturn_solar.jpg_190x190[1].jpg (4313 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\logo_normal[1].png (1867 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2CFOIopXXXXXaXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2LWI9lVXXXXcwXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2uOV7bXXXXXb1XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2cbj2iVXXXXaAXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\mz42_160510[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\acbeacon2[1].html (419 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2gG_OkVXXXXXnXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1332 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@ynuf.alipay[1].txt (519 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\CAGDUZGZ.htm (1121 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\lc[1].xml (126 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\20160505092220[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\y2x5_150626[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2iv6OnVXXXXagXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2696 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[1].txt (623 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\ico_taobao[1].png (958 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\mz_ic_tmall2[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\w_night40[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2VCyIkXXXXXblXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2Sx0akVXXXXX2XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\yun-skin-151015[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2ezzLopXXXXcMXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2379 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\tip_stopXP_2[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\icon_mz62_160329[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2nd8.gVXXXXcBXpXXXXXXXXXX_!!100183773-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\/t/acookie/[1].xml (134 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2wm.EmpXXXXaSXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes) - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
Company Name: ???
Product Name: ??1?
Product Version: 1.5.2012.8
Legal Copyright: ??? ????
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.5.2012.8
File Description: QQ??????1?
Comments: QQ??????1?
Language: English (United States)
Company Name: ???Product Name: ??1?Product Version: 1.5.2012.8Legal Copyright: ??? ????Legal Trademarks: Original Filename: Internal Name: File Version: 1.5.2012.8File Description: QQ??????1?Comments: QQ??????1?Language: English (United States)
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 1777130 | 1777664 | 4.44874 | a087ef985bb630b123f445430849517d |
| .rdata | 1781760 | 4499614 | 4501504 | 4.85658 | b8a96c13c4a3eb81384f0bf30ae6bc7c |
| .data | 6283264 | 510865 | 106496 | 3.79888 | 351684516dc19b0bb4341d60c03f6712 |
| .rsrc | 6795264 | 99468 | 102400 | 4.28819 | fc8b4830e456e314b5f0d144c410003c |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
| URL | IP |
|---|---|
| hxxp://www.2345.com/?kqq876038563 | 42.62.30.180 |
| hxxp://www.2345.com/css/common_20160406.js?v=2.28.1 | 42.62.30.180 |
| hxxp://www.2345.com/time.txt?t=24382097 | 42.62.30.180 |
| hxxp://www.2345.com/css/index_build3_20160503_01.css?v=5.28.1 | 42.62.30.180 |
| hxxp://www.2345.com/fonts/2345_160108.eot? | 42.62.30.180 |
| hxxp://www.2345.com/images/index/index-sprite-160224.png | 42.62.30.180 |
| hxxp://www.2345.com/i/blank.png | 42.62.30.180 |
| hxxp://www.2345.com/images/logo/logo_normal.png | 42.62.30.180 |
| hxxp://www.2345.com/images/index/lazyloading.gif | 42.62.30.180 |
| hxxp://www.2345.com/images/tipSet_ie6.png | 42.62.30.180 |
| hxxp://www.2345.com/i/search0320/baidu_web.gif | 42.62.30.180 |
| hxxp://www.2345.com/images/index/mod-search-bg.png | 42.62.30.180 |
| hxxp://www.2345.com/right/homepage/zjsVersion.js?t=24382097 | 42.62.30.180 |
| hxxp://www.2345.com/css/func_20160510.js?ver=1.0 | 42.62.30.180 |
| hxxp://www.2345.com/css/input_20160503.js?ver=1.0 | 42.62.30.180 |
| hxxp://area.wagbridge.tanx.com.gds.alibabadns.com/ex?i=mm_26632324_6858394_36942102 | |
| hxxp://www.2345.com/images/kz_tmall_20160504.gif | 42.62.30.180 |
| hxxp://www.2345.com/i/banner_20160510.jpg | 42.62.30.180 |
| hxxp://www.2345.com/right/homepage/newsChannel_20150831.js?t=1462925413&ver=4.11.3.0 | 42.62.30.180 |
| hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/tanxssp.js?_v=11 | 195.59.70.240 |
| hxxp://www.2345.com/right/homepage/entertainChannel_20150903.js?t=1462862755&ver=1.0 | 42.62.30.180 |
| hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/tanxssp/privacy.js | 195.59.70.240 |
| hxxp://tianqi.2345.com/t/detect2009v2.php?ver=1.0 | 42.62.30.188 |
| hxxp://www.2345.com/images/ico_taobao.png | 42.62.30.180 |
| hxxp://www.2345.com/images/mz_movie_3.png | 42.62.30.180 |
| hxxp://www.2345.com/images/mz_ic_tmall2.png | 42.62.30.180 |
| hxxp://ope.gds.tanx.com/ex?i=mm_26632324_6858394_36942102&cb=jsonp_callback_78067&callback=&userid=&o=&f=&n=&r=&cg=a57a6325ca34a933f3776754c945dab5&pvid=ad323fe342d763752550759c4a9f2a29&u=http://www.2345.com/?kqq876038563&fp=1.FgMJdD7CxD-Yty~PpL6IrOJ8hiT2w9R3b24B9pQOmj_oMbwcF7WiW3.gb2312.EwZgLArIiv6ALqg_2oKiDCw_4AH1DYSoWjlC_aoPzdAueoIMqgMk6AQ_4E-6agX3oCMADHoG9pAHIFRygEOaCQ_0A.Q.uci4sw | |
| hxxp://www.2345.com/images/lvy/mz42_160510.png | 42.62.30.180 |
| hxxp://www.2345.com/images/lvy/mz53_160307.png | 42.62.30.180 |
| hxxp://www.2345.com/images/mz_toggle.png | 42.62.30.180 |
| hxxp://www.2345.com/images/lvy/icon_mz62_160329.png | 42.62.30.180 |
| hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/acookie/acbeacon2.html | 195.59.70.240 |
| hxxp://www.2345.com/images/lvy/mz_76_160419.jpg | 42.62.30.180 |
| hxxp://www.2345.com/images/ico_amazon.png | 42.62.30.180 |
| hxxp://ad.wagbridge.tanx.com.gds.alibabadns.com/spf?e=Ku2AXxCecLc6sENrlwpRJ+zKwVodlz/4ZK7JCwfzrFGtaHwtoZ3wckkRoQ+RnQwLPkXYN4TNsdm8cr7YtVtoSoUHbzMUW07KMtWeSj3TFxp6x89zN/vaAp1a4w+6Vqh7Br/LNxx3ABX1xsYWtGN2vY2KstHhq/YaXoM5jf8K7sE=&u=&k=173&tanxssp_t=49595 | |
| hxxp://atanx.alicdn.com.danuoyi.tbcache.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102 | 195.59.70.240 |
| hxxp://www.2345.com/images/lvy/mz_suning_150529.png | 42.62.30.180 |
| hxxp://www.2345.com/images/i_tmall.png | 42.62.30.180 |
| hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/tanxclick.js | 195.59.70.240 |
| hxxp://www.2345.com/images/cnxh_spr_150722.png | 42.62.30.180 |
| hxxp://www.2345.com/images/icons/y2x5_150626.png | 42.62.30.180 |
| hxxp://www.2345.com/css/baidu_20160505.js?ver=1.0 | 42.62.30.180 |
| hxxp://www.2345.com/day_data/20160511.js?ver=1.0 | 42.62.30.180 |
| hxxp://ad.wagbridge.taobao.com.gds.alibabadns.com/?name=itemdsp&o=j&pid=mm_26632324_6858394_36942102&st_type=5_8&templetId=10687&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&count=41&p4p=jsonp0io24atk1 | |
| hxxp://log.gds.mmstat.com/t.gif | |
| hxxp://ad.wagbridge.taobao.com.gds.alibabadns.com/lk?url=&pid=mm_26632324_6858394_36942102&templetId=10687&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&number=12&callback=jsonp1io24atk1 | |
| hxxp://www.2345.com/images/index/mod-dot.png | 42.62.30.180 |
| hxxp://www.2345.com/right/homepage/img/block1409031001/tab1/20160505092220.jpg | 42.62.30.180 |
| hxxp://www.2345.com/images/w_day40.png | 42.62.30.180 |
| hxxp://www.2345.com/images/w_night40.png | 42.62.30.180 |
| hxxp://pcookie.gds.taobao.com/app.gif?&cna=OWi5D5caaE8CAcLyYNrLinLK | |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/196820111924680478/TB2zW4GeXXXXXcrXpXXXXXXXXXX_!!17159682-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/171640213312141087/TB2bgHEopXXXXbHXXXXXXXXXXXX_!!0-saturn_solar.jpg_220x220.jpg | 213.244.178.250 |
| hxxp://www.2345.com/images/common/wea_0829.png | 42.62.30.180 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/163900212226022832/TB2mWKbopXXXXaJXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/167250205621602380/TB2jCwGnFXXXXc_XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/103750179980305906/TB2UPnKlFXXXXXAXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/196950176218462707/TB2K.kmlXXXXXbkXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/19897056328747180/TB2R4aCaVXXXXXmXpXXXXXXXXXX_!!28659897-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://www.2345.com/images/mystyle_wait.gif | 42.62.30.180 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/165210189382602147/TB2LWI9lVXXXXcwXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://www.2345.com/images/tip_stopXP_2.png | 42.62.30.180 |
| hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i2/TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40.gif | 188.254.86.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/138420213725124971/TB2ezzLopXXXXcMXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/173890212987521547/TB2CFOIopXXXXXaXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/190240185345146474/TB2cbj2iVXXXXaAXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://www.2345.com/images/index/yun-skin-151015.png | 42.62.30.180 |
| hxxp://www.2345.com/right/site/like/gul_default_b_v3.js?2438209&ver=1.0 | 42.62.30.180 |
| hxxp://www.2345.com/right/homepage/img/block1409031001/tab1/20160505092233.jpg | 42.62.30.180 |
| hxxp://www.2345.com/right/homepage/img/block1409031001/tab1/20160505092249.jpg | 42.62.30.180 |
| hxxp://a.tanx.com.gds.alibabadns.com/tanx/img?type=acookie_id&id=OWi5D5caaE8CAcLyYNrLinLK&_ts=3XkUk&cad=null&cap=null&cna=OWi5D5caaE8CAcLyYNrLinLK&_lastvisited=OWi5D5caaE8CAcLyYNrLinLK,,2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs,io24at7g,ini44vvg,1,66a369b90e3f4299deff187054eb46a59c0b26c5 | 140.205.60.44 |
| hxxp://www.2345.com/right/homepage/img/block1409031001/tab1/20160505092311.jpg | 42.62.30.180 |
| hxxp://jsonp.aid.alibaba.com.gds.alibabadns.com/Umid/getDeviceInfo?_cbFunction=fn_UkNjDH1L&tokenid=2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs&acookie=OWi5D5caaE8CAcLyYNrLinLK&n=first | 140.205.33.195 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/16562077679543870/TB263C9cpXXXXXBXXXXXXXXXXXX_!!30796562-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/123390111690826752/TB241poeXXXXXbBXpXXXXXXXXXX_!!11442339-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/171640196430212344/TB2TFmdmVXXXXaXXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/123460167207656772/TB2iBsPkXXXXXcTXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/177580166231838167/TB2VCyIkXXXXXblXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/178000163688726194/TB2rvNBjVXXXXX4XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/186670170379626011/TB2aUepkFXXXXaRXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/126770134198657702/TB2LvGmgFXXXXaCXpXXXXXXXXXX_!!23282677-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/192730199314517441/TB2L7nanXXXXXcpXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/113190196075680595/TB2VcJYmVXXXXaFXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://jsonp.aid.alibaba.com.gds.alibabadns.com/Umid/getDeviceInfo?_cbFunction=fn_UaZfvibD&tokenid=2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs&acookie=OWi5D5caaE8CAcLyYNrLinLK&n=callback | 140.205.33.195 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/164130173274074824/TB2gG_OkVXXXXXnXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/129270176894498732/TB2wKl8lpXXXXX1XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/115490177260777840/TB2spqnlpXXXXalXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/190240181080113079/TB2D0RdlVXXXXaLXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/171550172087131367/TB2Sx0akVXXXXX2XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/155470185780814024/TB2TTdcepXXXXbFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/164190124733007341/TB27kNMfFXXXXbHXXXXXXXXXXXX_!!13406419-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/137730136379450715/TB2nd8.gVXXXXcBXpXXXXXXXXXX_!!100183773-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/173890213147801832/TB2dlWPopXXXXXIXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/129390207462473993/TB2iv6OnVXXXXagXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/183970182615491456/TB24aEXlVXXXXcfXXXXXXXXXXXX_!!2-saturn_solar.png_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/117530184305494407/TB2uOV7bXXXXXb1XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/134930189550332458/TB2DbJfmXXXXXX3XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/188210149566741470/TB29oNvipXXXXXmXXXXXXXXXXXX_!!95758821-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/162640200136549468/TB2IugjnXXXXXaFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/192730193493502434/TB2wm.EmpXXXXaSXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/163300145892263202/TB2X9PghVXXXXXLXXXXXXXXXXXX_!!110856330-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/177380111609007392/TB2m7lteXXXXXbIXXXXXXXXXXXX_!!26097738-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/138600177706200491/TB2UOHvlpXXXXa8XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/182930173993735555/TB2YgAwkVXXXXaVXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102 | 195.59.70.240 |
| hxxp://asearch.alicdn.com/bao/uploaded/i3/186670170379626011/TB2aUepkFXXXXaRXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i3/196950176218462707/TB2K.kmlXXXXXbkXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i2/171640196430212344/TB2TFmdmVXXXXaXXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/138420213725124971/TB2ezzLopXXXXcMXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/196820111924680478/TB2zW4GeXXXXXcrXpXXXXXXXXXX_!!17159682-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i2/173890212987521547/TB2CFOIopXXXXXaXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/126770134198657702/TB2LvGmgFXXXXaCXpXXXXXXXXXX_!!23282677-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://log.mmstat.com/t.gif | 140.205.174.1 |
| hxxp://ope.tanx.com/ex?i=mm_26632324_6858394_36942102&cb=jsonp_callback_78067&callback=&userid=&o=&f=&n=&r=&cg=a57a6325ca34a933f3776754c945dab5&pvid=ad323fe342d763752550759c4a9f2a29&u=http://www.2345.com/?kqq876038563&fp=1.FgMJdD7CxD-Yty~PpL6IrOJ8hiT2w9R3b24B9pQOmj_oMbwcF7WiW3.gb2312.EwZgLArIiv6ALqg_2oKiDCw_4AH1DYSoWjlC_aoPzdAueoIMqgMk6AQ_4E-6agX3oCMADHoG9pAHIFRygEOaCQ_0A.Q.uci4sw | 140.205.33.81 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/164130173274074824/TB2gG_OkVXXXXXnXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/117530184305494407/TB2uOV7bXXXXXb1XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://jsonp.aid.alibaba.com/Umid/getDeviceInfo?_cbFunction=fn_UkNjDH1L&tokenid=2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs&acookie=OWi5D5caaE8CAcLyYNrLinLK&n=first | 140.205.33.195 |
| hxxp://asearch.alicdn.com/bao/uploaded/i1/165210189382602147/TB2LWI9lVXXXXcwXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/182930173993735555/TB2YgAwkVXXXXaVXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i1/134930189550332458/TB2DbJfmXXXXXX3XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/171550172087131367/TB2Sx0akVXXXXX2XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://textlink.simba.taobao.com/lk?url=&pid=mm_26632324_6858394_36942102&templetId=10687&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&number=12&callback=jsonp1io24atk1 | 110.75.96.105 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/115490177260777840/TB2spqnlpXXXXalXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i3/183970182615491456/TB24aEXlVXXXXcfXXXXXXXXXXXX_!!2-saturn_solar.png_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/16562077679543870/TB263C9cpXXXXXBXXXXXXXXXXXX_!!30796562-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i3/188210149566741470/TB29oNvipXXXXXmXXXXXXXXXXXX_!!95758821-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i3/167250205621602380/TB2jCwGnFXXXXc_XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i2/163900212226022832/TB2mWKbopXXXXaJXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i2/177380111609007392/TB2m7lteXXXXXbIXXXXXXXXXXXX_!!26097738-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://tns.simba.taobao.com/?name=itemdsp&o=j&pid=mm_26632324_6858394_36942102&st_type=5_8&templetId=10687&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&count=41&p4p=jsonp0io24atk1 | 110.75.96.105 |
| hxxp://atanx.alicdn.com/t/tanxclick.js | 195.59.70.240 |
| hxxp://asearch.alicdn.com/bao/uploaded/i1/177580166231838167/TB2VCyIkXXXXXblXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://a.tanx.com/tanx/img?type=acookie_id&id=OWi5D5caaE8CAcLyYNrLinLK&_ts=3XkUk&cad=null&cap=null&cna=OWi5D5caaE8CAcLyYNrLinLK&_lastvisited=OWi5D5caaE8CAcLyYNrLinLK,,2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs,io24at7g,ini44vvg,1,66a369b90e3f4299deff187054eb46a59c0b26c5 | 140.205.60.44 |
| hxxp://asearch.alicdn.com/bao/uploaded/i1/190240181080113079/TB2D0RdlVXXXXaLXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/113190196075680595/TB2VcJYmVXXXXaFXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i3/173890213147801832/TB2dlWPopXXXXXIXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/19897056328747180/TB2R4aCaVXXXXXmXpXXXXXXXXXX_!!28659897-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i1/190240185345146474/TB2cbj2iVXXXXaAXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i2/103750179980305906/TB2UPnKlFXXXXXAXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i3/155470185780814024/TB2TTdcepXXXXbFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i1/123460167207656772/TB2iBsPkXXXXXcTXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://df.tanx.com/spf?e=Ku2AXxCecLc6sENrlwpRJ+zKwVodlz/4ZK7JCwfzrFGtaHwtoZ3wckkRoQ+RnQwLPkXYN4TNsdm8cr7YtVtoSoUHbzMUW07KMtWeSj3TFxp6x89zN/vaAp1a4w+6Vqh7Br/LNxx3ABX1xsYWtGN2vY2KstHhq/YaXoM5jf8K7sE=&u=&k=173&tanxssp_t=49595 | 140.205.243.64 |
| hxxp://asearch.alicdn.com/bao/uploaded/i1/192730199314517441/TB2L7nanXXXXXcpXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i2/192730193493502434/TB2wm.EmpXXXXaSXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i1/171640213312141087/TB2bgHEopXXXXbHXXXXXXXXXXXX_!!0-saturn_solar.jpg_220x220.jpg | 213.244.178.250 |
| hxxp://pcookie.tanx.com/app.gif?&cna=OWi5D5caaE8CAcLyYNrLinLK | 140.205.99.4 |
| hxxp://asearch.alicdn.com/bao/uploaded/i2/129390207462473993/TB2iv6OnVXXXXagXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i3/138600177706200491/TB2UOHvlpXXXXa8XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i1/137730136379450715/TB2nd8.gVXXXXcBXpXXXXXXXXXX_!!100183773-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://atanx.alicdn.com/t/tanxssp/privacy.js | 195.59.70.240 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/162640200136549468/TB2IugjnXXXXXaFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://p.tanx.com/ex?i=mm_26632324_6858394_36942102 | 140.205.34.97 |
| hxxp://atanx.alicdn.com/t/tanxssp.js?_v=11 | 195.59.70.240 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/178000163688726194/TB2rvNBjVXXXXX4XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i2/129270176894498732/TB2wKl8lpXXXXX1XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://gtms02.alicdn.com/tps/i2/TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40.gif | 188.254.86.250 |
| hxxp://jsonp.aid.alibaba.com/Umid/getDeviceInfo?_cbFunction=fn_UaZfvibD&tokenid=2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs&acookie=OWi5D5caaE8CAcLyYNrLinLK&n=callback | 140.205.33.195 |
| hxxp://asearch.alicdn.com/bao/uploaded/i3/163300145892263202/TB2X9PghVXXXXXLXXXXXXXXXXXX_!!110856330-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i4/164190124733007341/TB27kNMfFXXXXbHXXXXXXXXXXXX_!!13406419-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://asearch.alicdn.com/bao/uploaded/i3/123390111690826752/TB241poeXXXXXbBXpXXXXXXXXXX_!!11442339-0-saturn_solar.jpg_190x190.jpg | 213.244.178.250 |
| hxxp://cdn.tanx.com/t/acookie/acbeacon2.html | 195.59.70.240 |
| ynuf.alipay.com | 140.205.142.13 |
| assets.alicdn.com | 2.21.163.168 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /?kqq876038563 HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Last-Modified: Tue, 10 May 2016 06:25:09 GMT
ETag: "1f14e-53276fc997b40"
Cache-Control: max-age=3600
Expires: Wed, 11 May 2016 01:07:09 GMT
Vary: Accept-Encoding
Content-Type: text/html; charset=gb2312
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:17:47 GMT
Age: 638
Connection: keep-alive
x-hits: 15683
008000..<!doctype html>..<html><head>..<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />..<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" />..<meta http-equiv="mobile-agent" content="format=xhtml;url=hXXp://m.2345.com">..<meta name="Description" content="2345.com..............................................NBA.........................................................................................................................................." />..<meta itemprop="name" content="2345..................................10....8......">..<meta itemprop="description" content="2345.com..............................................NBA..........................................................................................................................................">..<meta itemprop="image" content="hXXp://www.2345.com/images/logo/logo_QQ.png">..<meta name="coninfo" content="U2FsdGVkX1" />..<meta http-equiv="Cache-Control" content="no-transform" />..<link rel="apple-touch-icon" sizes="72x72" href="touch-icon-ipad.png" />..<title>2345..................................10....8......</title>..<base target="_blank" />..<script type="text/javascript" src="css/common_20160406.js?v=2.28.1"></script>..<noscript><link href="/css/index_build3_20160503_01.css" rel="stylesheet" type="text/css"/></noscript>..<script type="text/javascript" > ..var $CONFIG = {}; .
<<< skipped >>>
GET /time.txt?t=24382097 HTTP/1.1
Accept: */*
Accept-Language: en-us
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Last-Modified: Thu, 07 Nov 2013 02:56:19 GMT
ETag: "0-4ea8d68f4bac0"
Cache-Control: max-age=1296000
Expires: Wed, 25 May 2016 00:14:04 GMT
Vary: Accept-Encoding
Content-Type: text/plain; charset=gb2312
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:17:50 GMT
Age: 86626
Connection: keep-alive
x-hits: 833
HTTP/1.1 200 OK..Last-Modified: Thu, 07 Nov 2013 02:56:19 GMT..ETag: "0-4ea8d68f4bac0"..Cache-Control: max-age=1296000..Expires: Wed, 25 May 2016 00:14:04 GMT..Vary: Accept-Encoding..Content-Type: text/plain; charset=gb2312..Transfer-Encoding: chunked..Date: Wed, 11 May 2016 00:17:50 GMT..Age: 86626..Connection: keep-alive..x-hits: 833..0..0..t>....
GET /fonts/2345_160108.eot? HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Fri, 08 Jan 2016 06:01:27 GMT
ETag: "33ba-528cc515c5bc0"
Cache-Control: max-age=1296000
Expires: Sun, 22 May 2016 10:56:44 GMT
Content-Type: application/vnd.ms-fontobject
Content-Length: 13242
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:52 GMT
Age: 307268
Connection: keep-alive
x-hits: 566356
.3...2............................LP....J......................[....................2.3.4.5.......R.e.g.u.l.a.r.....Z.V.e.r.s.i.o.n. .1...0.0. .J.a.n.u.a.r.y. .8.,. .2.0.1.6.,. .i.n.i.t.i.a.l. .r.e.l.e.a.s.e.....2.3.4.5.....BSGP..................r..2..2..$..........Dr.....p.2.. ..E.LFM../..~,...R.I*y-.Jj.%..a.V^.D....Y.7dm.....'..........:.3.a.......^.>.5Xn....)....8X0.f..4m....q..YcR.x...D!.P/E...E9..J...f..)......*.........7....1..^./N..:. .g4...[F.?.p>... .Q.".8............F....M....@....$}{K......2..'.'^."Z.*..C.......'p..L..*.qAB.._...pb.........RT..}0.x.%$....].4...o{...iX..C.......A.5!<..Z...!.H....@.M..%....}T..".5.F'.a...c.........g...M..P...y......bB...A..(.;...\M..W%sT.V.....E.`..4..PO....!...t.rS%y.........e0...Q..`m..?..k.a....Yx.)@.....Z.]O...U.P>.w."..[.Yh..........L..e..u..k.rl.f.'Y....9..w....m.......Ny...P`.".x.......,qc..I...Z.... h.h...,(. -...\.V.........0x.xv.....0.......Q.(..8`.......a.....!.C.P...|..8.8k.T....j"!.<.^$i.@Nh}........C.q.l|../..G/.@.X4...e.YUAO..8.,......"....3`'.r.....)....\.......KqE.}g.."O..........w....k....)Au...*..t......&...P..iw...iJ.Tq.........%'v_..N........F.:Z.....}..h...1...iDjv....:......!Xc>.Y.E5..U...G.....x...`Z:..f.KQ;%.-%&.g....g.L.Hr..-..k.a..!l..$.....o.ly.e;..}..A..L.IA.6)s...]C\....\.........?..n.w...dcN....9..P..j..{QeYmD.....q!;8axh.s......5t....._U.y..2.)W..W.#".s.8`...%..`...-..KP.D. .L.6...dU4.6...$.L.;. u...ll....r..M...*Z@.\....m....`T....*.........X.dr.$4...!i..y.....T.{.....:.....r....TE....K..~....&'...V.._.q....3..T..9f.h.
<<< skipped >>>
GET /images/tipSet_ie6.png HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Wed, 04 Sep 2013 09:49:02 GMT
ETag: "a6f-4e58bb71a1f80"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:58 GMT
Content-Type: image/png
Content-Length: 2671
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:53 GMT
Age: 29432456
Connection: keep-alive
x-hits: 3294829
.PNG........IHDR...............V....6IDATh..[}l.W.o....d.....8.Cc...D.S..M..(..c..V'c.%|F>.1...........>.'....-o.@......Bi...o......=9..^..}.~...._......>......{.8".{x....C@.C.0.....0n....'... .._2.d...........-....eLg.g`.c..N...$X.p(~...5F=...b|...p......y..4CxS..Ex.c...b?..:.g.U.=..............R...j..hG._..Z.... .6...u. ie...d.c4.....?...x...._.1y8.4.rLd..(.q.0N2~....`&0...}....HL...YB....W....M..m8..V.$......is ...,.v...l........ ...fi...m.\F2#8/.!J..=m>.,...uJ=.o..?N.-!j.n.....V.i=O.6|@....N..G..X.B (.!...Q&..b ..c.c7.s2.T2....v..?.H]tx..xr......U...A..t^.....Tq...d...N.w v......M.5..|.`..oXX..!.f.r.......p.Q.E.....r..O.N.:w...J.r.%....X..{....U..............5.A.c..2G.M.e..SR.F....),.....ic.::..O.m51.fwO7]......PeS.}.P.......~8Q...;.\Eum....B. .j.U.sm>....?.d.=.....F..81~x....A./yM!O.r.:..j..L.et....G.... H...M..B..=\..;..J_..B..M...a...o...$.h$. .$1.hd.)1.W.....q.[...Ce..7.$..$.VcI.*y..F....'1..O..:..o%.<.z...J.....l... ........W.......=nm*0.-y5...lg_..n..CQ..|.:.9-.....7<..~....'....c..... .......d.p#.bY.O.j[;X.ejwO..@....#l}.WN$ ..`...A.f.>....$..3.c*C.M...b,v.P8H.. ..............Ir.e...}......{{.W6=. *...]... ..lM. ...1..[=vOA.."M_q.0.w...;."........:.V.G=.....C;...MO...E.H^...Q...^/K.u[...p#.9>...az.h............@mm-...RW..F.Dg$D .=.b.W....5..".d.w*g.8....y.e...S..1-...h(.m.PK...L!.~X....AL.....=e)9.i..]"!.....)..PVV..B!*//...L*--.."..1....B...Ge...9[.fL/.Z.%1...... ....c......2.......,......;.i...Qo.K......8.)..6.kf.f{..m.Th....m......455QNN.C........A... G....Y......]v.1}.b
<<< skipped >>>
GET /images/index/mod-search-bg.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Tue, 25 Aug 2015 06:53:41 GMT
ETag: "43e-51e1d31be6740"
Cache-Control: max-age=31536000
Expires: Fri, 26 Aug 2016 14:09:56 GMT
Content-Type: image/png
Content-Length: 1086
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:54 GMT
Age: 22241278
Connection: keep-alive
x-hits: 89954732
.PNG........IHDR...2...b.....%opt....tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:65951bab-2f93-844c-af0e-f21973d795c8" xmpMM:DocumentID="xmp.did:F09CDD544A0911E5B818ADC372A37971" xmpMM:InstanceID="xmp.iid:F09CDD534A0911E5B818ADC372A37971" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:59ae9fcf-fe41-1841-91dc-748116b09902" stRef:documentID="xmp.did:65951bab-2f93-844c-af0e-f21973d795c8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>d..w....PLTE.....................)......=IDATx......0..0..?rfp.........b.X,...b../..^.V..,o.X.r..%.'..p.a.B.l.....IEND.B`.HTTP/1.1 200 OK..Last-Modified: Tue, 25 Aug 2015 06:53:41 GMT..ETag: "43e-51e1d31be6740"..Cache-Control: max-age=31536000..Expires: Fri, 26 Aug 2016 14:09:56 GMT..Content-Type: image/png..Content-Length: 1086..Accept-Ranges: bytes..Date: Wed, 11 May 2016 00:17:54 GMT..Age: 22241278..Connection: keep-alive..x-hits: 89954732...PNG........IHDR...2...b.....%opt....tEXtSoftware.Adobe ImageReadyq
<<< skipped >>>
GET /css/func_20160510.js?ver=1.0 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Tue, 10 May 2016 01:20:10 GMT
ETag: "affe-53272b9e4e680"
Cache-Control: max-age=600
Expires: Wed, 11 May 2016 00:19:30 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:17:55 GMT
Age: 505
Connection: keep-alive
x-hits: 9064
008000..eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('B lc;$1C[\'7t\']=(5N(7u)!==\'5O\'&&!dN(7u))?7u:( 1R 2k);if(!5P){T.34=u(a){T.2l(R,\'7v\',a)}};(u(){B a=58.59.4b(),5Q=$(\'9N\');if(/dO/i.2m(a)){S.1d=\'N\\3j\\9O\\2d\\5R\';if(!$(\'9P\')){C}B b=$(\'9P\');b.1b=\'N\\7w\\7x\\dP\';b.1p=u(){C U};b.O=\'3H://dQ.dR.z/dS/dT/dU-dV-dW/dX?mt=8\';C}if(/(dY|dZ|e0|e1|e2|e3 e4)/i.2m(a)){5Q.1a=\'5a\';5Q.1b=\'<5S 2H="/9Q/e5.9R" F="e6-e7:e8;9S-e9:ea;">\\eb\\ec\\ed\\ee\\ef\';5Q.1p=u(){2n.O=\'E://m.N.z/\'}}}());u 9T(){B a=1r(\'5b\'),1y=\'E://3k.N.z/t/eg.5c\';if( (\'\' a)>0){1y=\'t/eh/\' a \'.js\'}T.3l(1y)}9T();u ei(b){B b=b,5T=7y,9U=5T[1],9V=5T[2],35=1R 2k().ej(),5d=1R 2k().ek();if(5T.1f>1){1S("5b",9U);1S("lc",9V)}1S({3m:"2A"},"5b",b.id);1S({3m:"2A"},"en",eo(b.5U));B c=$1C[\'4c\']?\'<dd><a O="E://3k.N.z/#4d#/#id#.1i" 1d="#9W#" ><1e L="w#i3#5V"></1e>\\ep\\1D<1n>#d3#</1n><br>#9X#</a></dd></dd>\':\'\';B d=\'<1e L="ct eq" id="9Y"><b id="er"><a 1p="q.7z();1g(\\\'es\\\');" H="9Z" et="U" O="E://3k.N.z/#4d#/#id#.1i" 1d="\\1v\\1w\\1x\\1I#3n#\\1D\\1z">#5U#</a></b><1e L="eu" 1p="a0(\\\'7A\\\',\\\'ev\\\');1g(\\\'a2\\\');1g(\\\'a2\\\', \\\'5W\\\');" 1d="\\a3\\7B
<<< skipped >>>
GET /i/banner_20160510.jpg HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Mon, 09 May 2016 10:38:18 GMT
ETag: "2697-532666817da80"
Cache-Control: max-age=31536000
Expires: Wed, 10 May 2017 02:14:50 GMT
Content-Type: image/jpeg
Content-Length: 9879
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:56 GMT
Age: 79386
Connection: keep-alive
x-hits: 485855
......Exif..II*.................Ducky.......<.....mhXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C9C9F7E8DBFAE511945D970A2420C9EA" xmpMM:DocumentID="xmp.did:2E59908FFFBC11E58440F0A90468F202" xmpMM:InstanceID="xmp.iid:2E59908EFFBC11E58440F0A90468F202" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:404A132046FDE5119004AB481E4B7908" stRef:documentID="xmp.did:C9C9F7E8DBFAE511945D970A2420C9EA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................2..........................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..ÄS...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........*:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7....()...........eu........FVfv........GWgw........8HXh
<<< skipped >>>
GET /right/homepage/entertainChannel_20150903.js?t=1462862755&ver=1.0 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Wed, 11 May 2016 00:00:02 GMT
ETag: "36e9-53285b9280480"
Cache-Control: max-age=600
Expires: Wed, 11 May 2016 00:26:31 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:17:57 GMT
Age: 85
Connection: keep-alive
x-hits: 1638
0036e9..T.entertainChannel.init([{"hd":"<a tj=\"yys_1\" name=\"2\" href=\"http:\/\/tv.2345.com\/\">\u7535\u89c6\u5267<span class=\"line\"><\/span><\/a>","bd":"<div class=\"mod-slide\"><div class=\"slide-con\" style=\"width:1000px;\"><div class=\"slide-item\"><ul class=\"mod-imgbox\"><li class=\"item\"><a tj=\"yys_1_1\" href=\"http:\/\/tv.2345.com\/detail\/48074.html\" name=\"2\" title=\"\u6b22\u4e50\u9882\"><img src=\"right\/homepage\/img\/block1409031001\/tab1\/20160505092220.jpg\" width=\"124\" height=\"78\"><span class=\"mod-imgbox-name\">\u6b22\u4e50\u9882<\/span><span class=\"mod-maskbg\"><\/span><span class=\"mask\"><\/span><\/a><\/li><li class=\"item\"><a tj=\"yys_1_2\" href=\"http:\/\/tv.2345.com\/detail\/46829.html\" name=\"2\" title=\"\u5c71\u6d77\u7ecf\u4e4b\u8d64\u5f71\u4f20\u8bf4\"><img src=\"right\/homepage\/img\/block1409031001\/tab1\/20160505092233.jpg\" width=\"124\" height=\"78\"><span class=\"mod-imgbox-name\">\u5c71\u6d77\u7ecf\u4e4b\u8d64\u5f71\u4f20\u8bf4<\/span><span class=\"mod-maskbg\"><\/span><span class=\"mask\"><\/span><\/a><\/li><\/ul><\/div><div class=\"slide-item\"><ul class=\"mod-imgbox\"><li class=\"item\"><a tj=\"yys_1_11\" href=\"http:\/\/tv.2345.com\/detail\/46170.html\" name=\"2\" title=\"\u6b66\u795e\u8d75\u5b50\u9f99\"><img data-src=\"right\/homepage\/img
<<< skipped >>>
GET /images/mz_movie_3.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Mon, 22 Sep 2014 09:46:53 GMT
ETag: "c5f-503a454a25d40"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:54 GMT
Content-Type: image/png
Content-Length: 3167
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:57 GMT
Age: 29432463
Connection: keep-alive
x-hits: 117481500
.PNG........IHDR...............h6....pHYs................MiCCPPhotoshop ICC profile..x..SwX...>..e.VB....l.."#....Y....a...@....V....HU....H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0..>.3.o..~..@...z..q.@......qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N....l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A..............a.D@.$.<.B........A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R...J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6..l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>
GET /images/lvy/mz42_160510.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Tue, 10 May 2016 03:49:22 GMT
ETag: "719-53274cf799480"
Cache-Control: max-age=31536000
Expires: Wed, 10 May 2017 04:02:42 GMT
Content-Type: image/png
Content-Length: 1817
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:58 GMT
Age: 72916
Connection: keep-alive
x-hits: 435505
.PNG........IHDR...z............R....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:91695398A26DE111951AE4839BBBE675" xmpMM:DocumentID="xmp.did:008F9B6D166211E6B714A51EB2CA2A6B" xmpMM:InstanceID="xmp.iid:008F9B6C166211E6B714A51EB2CA2A6B" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f873e59a-f2fd-1845-a762-ddc29c296cfe" stRef:documentID="adobe:docid:photoshop:d236446f-15ce-11e6-8d78-bff444c8349c"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.a.....BPLTE.2..e@.......@.....[3.vU.....p.L .............Y0.?......`.rP.........E....tRNS.............................pIDATx...... ....6`......Ts.....(."-.......a...B?............}Q.u..........VR..RJ"T.A..)...."Z..c..[h....M....a...R:..Y@...\.W...s........>8...G...f........**u]d7...`.uc.q2..s.....{...B....R.Gd...^...x.P..>hg.y.....f.........:J..o..h)=..4.0U$.,G.._.bk....sL[7.TMuA.K..J......]wkd.....}.]....nz.1..q...
<<< skipped >>>
GET /images/mz_toggle.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Fri, 22 Nov 2013 06:18:20 GMT
ETag: "3da-4ebbdfb0b2300"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:54 GMT
Content-Type: image/png
Content-Length: 986
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:58 GMT
Age: 29432464
Connection: keep-alive
x-hits: 116988473
.PNG........IHDR...2..........M}.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:C9B44CDB531F11E38858E4843E3FEE07" xmpMM:DocumentID="xmp.did:C9B44CDC531F11E38858E4843E3FEE07"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C9B44CD9531F11E38858E4843E3FEE07" stRef:documentID="xmp.did:C9B44CDA531F11E38858E4843E3FEE07"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>$b......PLTE......c.p.....tRNS....0J....IDATx.b`$.0.j.Q.@..0!\:..2...n..^'`u.hT.N-.....L.eR)......IEND.B`.HTTP/1.1 200 OK..Last-Modified: Fri, 22 Nov 2013 06:18:20 GMT..ETag: "3da-4ebbdfb0b2300"..Cache-Control: max-age=31536000..Expires: Sat, 04 Jun 2016 08:36:54 GMT..Content-Type: image/png..Content-Length: 986..Accept-Ranges: bytes..Date: Wed, 11 May 2016 00:17:58 GMT..Age: 29432464..Connection: keep-alive..x-hits: 116988473...PNG........IHDR...2..........M}.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <
<<< skipped >>>
GET /images/lvy/mz_76_160419.jpg HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Tue, 19 Apr 2016 01:47:08 GMT
ETag: "7a2-530cca7aabf00"
Cache-Control: max-age=31536000
Expires: Wed, 19 Apr 2017 01:55:51 GMT
Content-Type: image/jpeg
Content-Length: 1954
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:00 GMT
Age: 1894929
Connection: keep-alive
x-hits: 8616129
......Exif..II*.................Ducky.......d......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:78cc6c5e-fff5-5c4b-8271-df98b450f7d2" xmpMM:DocumentID="xmp.did:6E23EF1905CE11E6A744DA3E280BE77A" xmpMM:InstanceID="xmp.iid:6E23EF1805CE11E6A744DA3E280BE77A" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:78cc6c5e-fff5-5c4b-8271-df98b450f7d2" stRef:documentID="xmp.did:78cc6c5e-fff5-5c4b-8271-df98b450f7d2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d....................i...............................................................................................................................................................................................................................................................!."1A2.%..................!...1....A...."3...................!.1AQa...............|./.....7..?................q...=.I.yY.H.d...........$...........p.............$.....o.....0...........?.......6%.{.5:.Z..............=..A..<e.z........?.......6%.{..
<<< skipped >>>
GET /images/lvy/mz_suning_150529.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Fri, 29 May 2015 05:14:37 GMT
ETag: "64d-517318d6b2940"
Cache-Control: max-age=31536000
Expires: Sat, 18 Jun 2016 00:31:01 GMT
Content-Type: image/png
Content-Length: 1613
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:00 GMT
Age: 28252018
Connection: keep-alive
x-hits: 104814281
.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:5776642C77EAE411B27BBD8E623B44CB" xmpMM:DocumentID="xmp.did:7FEA65F005AD11E59F02A99B72EC2948" xmpMM:InstanceID="xmp.iid:7FEA65EF05AD11E59F02A99B72EC2948" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B75C3D03A405E511AD09C340FF0EF36A" stRef:documentID="xmp.did:17389ED168EAE411B27BBD8E623B44CB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..]....}IDATx.tSKhSQ.=....F[jmU0U.k.VT..m.U....DAA.J..q..v#.\(.. Q..@A.J....J.Ep....*.M.D.M..x..4....2....s..U.m.r!....T.45(.&01-.,...SLQ...yK.\....o.|...=.$..>....u.Ij...k.B.5..p.8...~.^.U.....@6....8.X....h..b..m.D.......k...H.7.S...^hXV.....K.....J.Y...o[u..y.P1B.0..,.fF....Y5......a.B.I.c...x:...1.Q'....F.0....8{. ..D.a.B.:.'a.7t...........$..e.1;.x.\.Y.(H...[..a..EAy.;b=..Fe[...&..XW..K..4..2}..Z...b:..L$.........Wy....h.(.[.J.?). #..nq.A.O .;.f...^..>....?H(...e ...q....H.Vn...d..f.f!h......z..={.@fF=.C_.c.w"..`m.
<<< skipped >>>
GET /images/cnxh_spr_150722.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Thu, 23 Jul 2015 01:23:53 GMT
ETag: "15f-51b80bd861c40"
Cache-Control: max-age=31536000
Expires: Fri, 22 Jul 2016 02:26:30 GMT
Content-Type: image/png
Content-Length: 351
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:01 GMT
Age: 25307490
Connection: keep-alive
x-hits: 100462407
.PNG........IHDR...F...Z.......=W...!PLTE....._....a.^^^....Dj-.....a.C..J........tRNS.@..f....IDATx^..-..`.D..S...........GU.j..X...$.d..|.!.3..lvw6.,....`.......... ..B.B.`C....O...?..)....6X7...2D5D........!...8'...*.O..e../..V.>T....0\1\...2......}.]....r.T..`^......... ..B.B.`C....O...?9Sv.....n..Ue.j......!.!C.!.qN.'.U..1...db.X.I\....IEND.B`.....
GET /css/baidu_20160505.js?ver=1.0 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Thu, 05 May 2016 10:05:16 GMT
ETag: "3478-532157a976f00"
Cache-Control: max-age=600
Expires: Wed, 11 May 2016 00:22:50 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:18:01 GMT
Age: 311
Connection: keep-alive
x-hits: 5681
003478..eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('(v(){7 A=12.1j||{4K:"1-1-0"};A.35=12.T.1G.1J;A.2a=A.2a||{};A.2a.1K=v(B,D){1k(7 C 6u D){4(D.6o(C)){B[C]=D[C]}}};A.1K=A.2a.1K;A.16=A.16||{};A.16.g=v(B){4("1s"==1y B||B 4u 2d){z 11.6j(B)}14{4(B&&(B.6i&&(B.3g==1||B.3g==9))){z B}}z 1l};A.g=A.G=A.16.g;A.16.4t=v(B){B=A.16.g(B);z B.3g==9?B:B.6f||B.11};A.16.3e=A.16.3e||{};A.16.24=A.16.24||[];A.16.24.4q=v(C,G,E){1k(7 B=0,D=A.16.24,F;F=D[B];B ){4(F=F[E]){G=F(C,G)}}z G};A.1s=A.1s||{};A.1s.4j=v(B){z 2d(B).1P(/[-4f]\\D/g,v(C){z C.4e(1).5B()})};A.1s.3d=v(a){7 c=0;1k(7 i=0,l=a.17;i<l;i ){(a.5A(i)>5z)?c =2:c }z c};A.16.1n=v(F,G){7 D=A.16;F=D.g(F);G=A.1s.4j(G);7 B=F.15[G];4(B){z B}7 C=D.3e[G],E=F.2T||(A.1p.1z?F.15:37(F,1l));B="2a"==1y C&&C.39?C.39(F,E):E[C||G];4(C=D.24){B=C.4q(G,B,"39")}z B};A.1n=A.16.1n;A.1p=A.1p||{};4(/5y (\\d \\.\\d)/i.21(22.23)){A.1z=A.1p.1z=1O(2C.$1)}4(/2B\\/(\\d \\.\\d)/i.21(22.23)){A.1p.2B=1O(2C.$1)}A.1p.3s=/5x/i.21(22.23);A.1p.4c=/4b/i.21(22.23)&&!/5q 4b/i.21(22.23);A.1p.2R=11.2S=="5o";A.16.3w=v(D){7 B=A.16.4t(D),E=A.1p;D=A.16.g(D);7 I=E.4c>0&&(B.2j&&(A.16.1n(D,"1V")=="2x"&&(D.15.1f===""||D.15.1g===""))),J={1g:0,1f:0},H=E.1z&&!E.2R?B.19:B.1t;4(D==H){z J}7 C=1l,F;4(D.2w){F=D.2w();J.1g=1D.3u(F.1g) 1D.2v(B.1t.1W
<<< skipped >>>
GET /right/homepage/img/block1409031001/tab1/20160505092220.jpg HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Thu, 05 May 2016 01:27:36 GMT
ETag: "161d-5320e3f457200"
Cache-Control: max-age=31536000
Expires: Fri, 05 May 2017 01:28:04 GMT
Content-Type: image/jpeg
Content-Length: 5661
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:02 GMT
Age: 514197
Connection: keep-alive
x-hits: 2793190
......JFIF.....,.,.....)Exif..II*...............n...........t...........................(...........1...........2...........i...............Canon.Canon EOS 5D Mark II.,.......,.......VVV.meitu.com.2016:03:01 18:32:36..........................."...........'....... ...........0230........!...........5...........I...........Q...........Y...........a...................................i...........20..................................E...........q...........y...............................................................1...........2...........4...................d...........2015:11:06 12:36:43.2015:11:06 12:36:43..`e.@B..........................\.........U......!9.....2531501901.........i.......................EF24-105mm f/4L IS USM.......................................(...................B............&......,.......,..........C....................................................................C.......................................................................N.|...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.g....Q....:N.....8........N..........| ..&.kw...?.NP...i..M..k..&..i....w.G.kW....|S.].,.B.@.L.......R
<<< skipped >>>
GET /images/w_night40.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC
HTTP/1.1 200 OK
Last-Modified: Wed, 04 Sep 2013 01:32:02 GMT
ETag: "1489-4e584c5b10880"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:37:02 GMT
Content-Type: image/png
Content-Length: 5257
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:02 GMT
Age: 29432460
Connection: keep-alive
x-hits: 52615115
.PNG........IHDR.....................PLTEooo.......f....).......4..............N..C.......................iX..........3..{......................."........l..3R..........Q..............W.....q..D.................p............................._........J.....:........R.. .....%..............{..S......:..........f..n..4.....}..{.....,.. ..f...........\..z.....D..L..L}}}...........i.............................n........J........v..............X.....5..t..A..............}.....@....................Y.._..9...........]..'........R..n..0..W........v.....9..S.. ........).................Y...........)...........z...................................R..J........:..H.....s..............:..............B..z...........Y.....!..7.....0..Y...........)..l........"..K..U..y..Y.....{..H..A.............r......L../.........P&......tRNS................................................................................................................................................................................................................................................................S..%...8IDATx....t.E...1.5.p.P.....H...K.h-zy...z.i<k#m..........iPQ.@.....$R-.....Z-..)X..IA).J.Z.g}..K..?............{.......gg...{..5o.$.<...O|`..[>E-..0.Gc.A.E.... v...8.......nWy....rb....jNx...Yh.....2...x.R5....#[m...h..e...!Uc..h<.........~_X.@..p0..ug...zd..../..`.........N.#.....#{m...x..... ..M....M...A....64`.............e..C..!.P$...r.y..$...}AT....[-cb.^..M.....xd.......%a.`......G...M...~.y.q..P7...(!.I.q7X..#.....q.,-p.\u.|....
<<< skipped >>>
GET /images/common/wea_0829.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC
HTTP/1.1 200 OK
Last-Modified: Wed, 10 Sep 2014 06:11:48 GMT
ETag: "88d-502afed573100"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:54 GMT
Content-Type: image/png
Content-Length: 2189
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:02 GMT
Age: 29432468
Connection: keep-alive
x-hits: 113967994
.PNG........IHDR..............a......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:59204371319A11E4973ED11BDE3C05F8" xmpMM:DocumentID="xmp.did:59204372319A11E4973ED11BDE3C05F8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5920436F319A11E4973ED11BDE3C05F8" stRef:documentID="xmp.did:59204370319A11E4973ED11BDE3C05F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......ePLTEr.....)..'..0.. ..1..Y........E..-..A.....b..#..... .....(.....*.....(..(..t..O..%..3..?.....@..4........!..8..L.._..1........C..>.....2.....5..w...........6..{..............-.....$.....G..v...../..1..2...........g........E...........(.. .....S..1.....3..u..Z.....u..!..7.....t.....6.....7........`...w.d..............:..,..n..4..(..6..k..*..,..,..?..V.....I.,1...wtRNS..........................................................................................................................e....IDATx....VUQ....N7'l0.A.D..l.EB.lQJE..e_?......g.u.....T.E.[7...ME.J..?......Ra....9"..i
<<< skipped >>>
GET /images/tip_stopXP_2.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC
HTTP/1.1 200 OK
Last-Modified: Thu, 10 Apr 2014 08:46:27 GMT
ETag: "661-4f6ac40b11ec0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:54 GMT
Content-Type: image/png
Content-Length: 1633
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:03 GMT
Age: 29432469
Connection: keep-alive
x-hits: 85759081
.PNG........IHDR...H...C.............tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:819736BFC08A11E39E8CF5CE7DFF4371" xmpMM:DocumentID="xmp.did:819736C0C08A11E39E8CF5CE7DFF4371"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:819736BDC08A11E39E8CF5CE7DFF4371" stRef:documentID="xmp.did:819736BEC08A11E39E8CF5CE7DFF4371"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..8.....PLTE..&.....Sh.....y....Ey....8...j....j......z..s..r..q..t.....|..x..x.....w.......p\..l...........x.....s....n..w..wl..m..o..{..o...........n..}..~.....k..l..p.............@w..o..U.....v..m.....b......@tRNS.................................................................{.D....IDATx...]W.0....*..........Q.J......#.t........?g..1.............c....R..Ne.qSM.\......a1'..(*..Q.j.s.(.z.P..Y../...i.ANeH..RO.Q...2D..(....b.Ne.....gd......P.......r.}.M......>.#.\.qo..&j....<..8...b.T;.i.l..i...(.....1f..,...:..6.N?....l..N.."....d........iK8..7..D@.....p.....4..M.........sH....*......
<<< skipped >>>
GET /right/site/like/gul_default_b_v3.js?2438209&ver=1.0 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC
HTTP/1.1 200 OK
Last-Modified: Wed, 11 May 2016 00:00:01 GMT
ETag: "c058-53285b918c240"
Cache-Control: max-age=600
Expires: Wed, 11 May 2016 00:20:05 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:18:03 GMT
Age: 478
Connection: keep-alive
x-hits: 147
008000..T.gul && T.gul.init([{"category":{"name":"\u6e38\u620f","url":"http:\/\/wan.2345.com\/?frm=wzdh-cnxhyx&referer=wzdh","flid":"f2"},"sites":[{"name":"\u4e00\u5200\u7206\u6a59\u88c5","url":"http:\/\/bdtg.9377a.com\/sousuotg.php?id=12096","type":"2","ggid":67425,"sex":0,"jingzhun":"\u9875\u6e38","province":"","city":"","unitPrice":"3.40","md5":"75c78ba718a0a1b1e6a45151db0eb0ed"},{"name":"\u6b66\u795e\u8d75\u5b50\u9f99","url":"http:\/\/g.wan.2345.com\/s\/1\/1254\/566.html?frm=wzdh-cnxh8","type":"2","ggid":68331,"sex":0,"jingzhun":"\u9875\u6e38","province":"","city":"","unitPrice":"3.59","md5":"1d6a47e436c83f394aed0de798903382"},{"name":"\u4e00\u5200999\u7ea7","url":"http:\/\/g.wan.2345.com\/s\/1\/1254\/118.html?frm=wzdh-cnxh-cqby","type":"2","ggid":68332,"sex":0,"jingzhun":"\u9875\u6e38","province":"","city":"","unitPrice":"3.59","md5":"8c12279a13e9932efce5f20ca7fb8ebb"},{"name":"\u53d8\u6001999\u7ea7","url":"http:\/\/g.s8dj.com\/s\/1\/728\/37629.html?uid=515372","type":"2","ggid":68156,"sex":1,"jingzhun":"\u9875\u6e38","province":"","city":"","unitPrice":"3.10","md5":"40a9a78d50d2596a8a569d3024f487bf"},{"name":"\u53d8\u6001\u5f81\u9014","url":"http:\/\/news.9377ne.com\/6886\/","type":"2","ggid":68637,"sex":0,"jingzhun":"\u9875\u6e38","province":"\u56db\u5ddd,\u5b89\u5fbd,\u7518\u8083,\u5185\u8499\u53e4,\u6cb3\u5317,\u897f\u85cf,\u6e56\u5317,\u8fbd\u5b81,\u5c71\u897f,\u798f\u5efa,\u5b81\u590f,\u6d77\u5357,\u5c71\u4e1c,\u5e7f\u897f,\u6c5f\u897f,\u5409\u6797,\u6cb3\u5357,\u65b0\u7586,\u9ed1\u9f99\u6c5f,\u6d59\
<<< skipped >>>
GET /Umid/getDeviceInfo?_cbFunction=fn_UkNjDH1L&tokenid=2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs&acookie=OWi5D5caaE8CAcLyYNrLinLK&n=first HTTP/1.1
Accept: */*
Referer: hXXp://cdn.tanx.com/t/acookie/acbeacon2.html
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: jsonp.aid.alibaba.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Date: Wed, 11 May 2016 00:18:04 GMT
Content-Type: application/javascript
Content-Length: 72
Connection: close
X-Content-Type-Options: nosniff
/**/ typeof fn_UkNjDH1L === 'function' && fn_UkNjDH1L({"result":false});..
GET /app.gif?&cna=OWi5D5caaE8CAcLyYNrLinLK HTTP/1.1
Accept: */*
Referer: hXXp://cdn.tanx.com/t/acookie/acbeacon2.html
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Connection: Keep-Alive
Host: pcookie.tanx.com
HTTP/1.1 200 OK
Server: Tengine
Date: Wed, 11 May 2016 00:18:02 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=OWi5D5caaE8CAcLyYNrLinLK; expires=Sat, 09-May-26 00:18:02 GMT; path=/; domain=.tanx.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Server: Tengine..Date: Wed, 11 May 2016 00:18:02 GMT..Content-Type: image/gif..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=OWi5D5caaE8CAcLyYNrLinLK; expires=Sat, 09-May-26 00:18:02 GMT; path=/; domain=.tanx.com..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Pragma: no-cache..GIF89a.............!.......,...........L..;..
GET /bao/uploaded/i4/196820111924680478/TB2zW4GeXXXXXcrXpXXXXXXXXXX_!!17159682-0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 12182
Connection: keep-alive
Date: Tue, 11 Aug 2015 13:24:05 GMT
Last-Modified: Wed, 29 Jul 2015 03:58:17 GMT
Expires: Fri, 08 Aug 2025 13:24:05 GMT
Cache-Control: max-age=315360000
Via: cache54.l2de1[0,200-0,H], cache49.l2de1[0,0], cache3.nl1[0,200-0,H], cache8.nl1[0,0]
Age: 23626437
X-Cache: HIT TCP_MEM_HIT dirn:6:632273062
X-Swift-SaveTime: Thu, 18 Feb 2016 06:23:44 GMT
X-Swift-CacheTime: 298882821
Timing-Allow-Origin: *
EagleId: d5f4b28814629258826542112e
......JFIF.....,.,.....C....................................................................C.......................................................................~.......................................................................................a...........`.. .9J.....o.0...P. ....I...'..&....=.$aU......|.R.Z..-....`..f.w.|.5.n.t......t.4.../.....-Qa..... ...2W.q...c:.....X.V...!ty.........Q.].k.ja..r.4.tx. 1j..s^..u..)j#...v.~T.5.>.g.Y..G...b....a.J...=....uxG.......... IKU[.Y;cY5 .7eK..%.9-....C.Y.. .H....../..2F..[.u.c..2...0.....j.tZ...G..K%t.....B.<.$..8M.qh..9.?.z......[.2V.E.1L. .v...J.b...V...=Y..l.p.X..dA.s.....;])...=LE.e..,.....n%o...."....`..}7...$$,....T.....W.H...%~_q{..l.Vi...'.0.A..3a.{qtm....*............Y.7...z.9.).FQZ..?)).:..F.....B...`.....F..J.X.cHC_..f.....">..e.toD.O..:..f...}R...V.E...,iX..A.........u,8A..].-].....G..l..k.|.L@.k...TF.....f"r6........*.Q...`t..E...h'...l.u.u.)2..\Y>h.._H{.v..a.f.Vs&.wM.....g.>........au.L.V.....L.F......86po........#.f@.fbs....z..%v...d.Y]....j...a.@....u'._?......o;lxE$S..SD.F.6Z.7...,(YF........L...^...9...@....)............................!..."..#12C.........."hlMv8Zy.....8..Z..B......V.Y..=O..*..M.-.^..o......T_..Eo..\........Y.k..:~#..`^C...\..!I..g............m. ..Z.0}G).....q.......O.../..-\4W..};.d.`...N.88C;.b.-..|.]..<>...x......-.!G...o..-.hYp.W.....(..H..3v....Xn...-..l\...O/V.{<........D..$.^veo". ..!...i.....\.p...D..&...l^..O.~~...'.`C Y.u..Ue..e..6.)._...!a..6;.C...e.C.(aD...fn^....8.k...%..6D....X.1.Cn\....
<<< skipped >>>
GET /bao/uploaded/i2/163900212226022832/TB2mWKbopXXXXaJXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 13127
Connection: keep-alive
Date: Sat, 07 May 2016 20:06:33 GMT
last-modified: Thu, 05 May 2016 03:58:57 GMT
Expires: Sun, 07 May 2017 20:06:33 GMT
Cache-Control: max-age=31536000
Via: cache32.l2de1[0,200-0,H], cache5.l2de1[1,0], cache10.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 274289
X-Cache: HIT TCP_HIT dirn:10:137942557
X-Swift-SaveTime: Sat, 07 May 2016 20:29:49 GMT
X-Swift-CacheTime: 31534604
Timing-Allow-Origin: *
EagleId: d5f4b28814629258827212115e
......JFIF.............C....................................................................C.......................................................................................................................E...........................!1A.."Q.2a.#Bq.....3CRbr...$&S.....%D..................................2......................!.1.AQa."q.2.........#Br..............?...m.P.(rp.<....E`.2.....,S....&D.Rd..).P..].!...i..*R.....l.h.s...B...!7..e1Q...V..,.JO..~....w.......f}Z....].%.nu..T...........7.6.1 ..ka..`............|j...v2.XM.....R.d.Q...V?...5V.G`i]Y..K....R..{.$.$.d\.....<X...o.2e.OS...v..^G...iL......]........,....."..X....)....\..#..d...$.`M....m-.p...../..."..X..X.1.j.6..g.k3..R.0.....Cl..r...... .'....8j..\..4.c.]4..C.&.z...nW.{...O=4.}L....u....l......T8..|.... .X`.$...!Sj.......G6...u....Nq..{..DF.p7....x.."......V...}M........f....[.x......@....ll....N.d.H.V.I;.]..'k... .G...4..U..LfT........Hst).n.Q.4.l. ....9^....nu...*.\.....)-..UVj#..[..~.......%..:...hNRrT..K...Q...Ck...u>s.r..(#...[....k...M.O.D......h.aKY...C...=..n...&... e..aZOvp.o..H.u..Y.=...:...*....F.'..K.7.Z {.....AD....'..-.\..\..n_.. ...6..A.H%JQ..u$...b.<z..sR.|. ......-..:.e.*.R{[.I"..M......f..Es..^ #h...8......7...D..0._..........3.J.s2fH.l.I.[..V...F[......O...{...c.mk.n...x]3H.../..`t.-.$nR.f.Q`...'...[..J.z4*.]..d.'....W..2CM...uKH..U...-V.-..... "...Sj)a..v.p.Oa...h.~..T..)*...us.....j.W.6.Bj.E....ieu.mY..z....e).s..p..H7..z^..sk.$...3..f|....g,.T.u.....M[....7...l.....)n.Tb...u).....o*..6.$.....l...^..N$G..u.
<<< skipped >>>
GET /bao/uploaded/i3/167250205621602380/TB2jCwGnFXXXXc_XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 12351
Connection: keep-alive
Date: Wed, 27 Apr 2016 03:13:37 GMT
last-modified: Sun, 24 Apr 2016 12:38:57 GMT
Expires: Thu, 27 Apr 2017 03:13:37 GMT
Cache-Control: max-age=31536000
Via: cache24.l2de1[0,200-0,H], cache26.l2de1[0,0], cache5.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 1199065
X-Cache: HIT TCP_HIT dirn:9:652281303
X-Swift-SaveTime: Thu, 05 May 2016 04:11:14 GMT
X-Swift-CacheTime: 30841343
Timing-Allow-Origin: *
EagleId: d5f4b28814629258827832124e
......JFIF.............C....................................................................C.......................................................................................................................C..........................!.1.."AQ.a2q...#B..R.3b....$C.....4S...................................2........................!.1.AQ."2a....BRq.#.$3..............?...g..GL..3..u........Z1.WF7% .......](....}m..z.".....g......o4.#IF>.d.6.1.....................................Y.d..HMK3.h2.)...A....i.Y...h_.- v}M9x.]..nn....J..My.y.4j..rV.A@..@..@..@..@..@..@..@..@..@..@w?R?..Nk.LKKZR\k...>.@Pp.nO......R=u.s....R.iT....@........~...rB5&...QCV.A@..@..@..@..@..@..@..@..@..@..@w....."*.;{..>..a?.q[.H.....z...Ff..c..dH.....Y8J.oE....WN.3.w.*.q.-..-.......B...E'.)J...............................?N-.8.z-R... J~..;..2....8. ....M.........mM..s,@\.2S...0.HI#.;.........d....O..P.@..@..@..@..@..@..@..@..@..@.......SkL._s..#(......X8%*.#>..r.=...dJ....B}.^.a..-)NG... qR..Hp..'..*.:.=....Q....}...}1.. .#...WD..-..U*..@..@..@..@..@..@..@..@..@..@~..:.Mj4$."=....N.P..#$.sU.I.:T'V.o.;..7>...":.R....t.'8..G..Z.e.....x?.:..#R#......3......{.l..fs.......P..P..P..P..P...h......E.- o.i.. ..:..I kb.....y..Y.Z>..,7e._..Z. ....V.............g.........'...3.V......C....%Q.....G...._.:........|#jX...f.u..TS..]J..IW.2I.....J.2jE..Dz$...*...i....e?..c.%..D...i..t...Gb...kY.%\8R9.....I..c....|J.;.Mxh..$)2-.'<.H..J...<...... "._..L....Z....T..=._.5/.D{.....M...C.(...[B@.23.v>O....B.y..RL.i7.1.W7%<.....{....F
<<< skipped >>>
GET /bao/uploaded/i3/196950176218462707/TB2K.kmlXXXXXbkXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 14448
Connection: keep-alive
Date: Sat, 12 Mar 2016 00:17:31 GMT
last-modified: Mon, 07 Mar 2016 09:32:00 GMT
Expires: Sun, 12 Mar 2017 00:17:31 GMT
Cache-Control: max-age=31536000
Via: cache28.l2de1[350,200-0,M], cache17.l2de1[351,0], cache8.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 5184031
X-Cache: HIT TCP_MEM_HIT dirn:11:522079781
X-Swift-SaveTime: Sat, 12 Mar 2016 00:17:31 GMT
X-Swift-CacheTime: 31536000
Timing-Allow-Origin: *
EagleId: d5f4b28814629258828442132e
......JFIF.....H.H.....C....................................................................C......................................................................................................................G...........................!1A.Q.."2aq..BR..#.....$3br..Cs...'Tc.......................................;.........................!1.AQ."a...2q....#...3BCRb...$4.............?..N.!B...P.(B.!....B.!B...P.(B.!....B.(...Zw.:bV...|h.@)RN....q......:.....hax.^.T..'.{v?.......e......U....o}J0n.N...#.V;..W....P?]Zv?.._W.3......{...g...?-..d...J ....Vr.....>.p.GkmR.....C.....>...q V.Zhr....@dV..O..~.._..\.m1.."....#W.....9.y7}/d../...._.sO.c....&*...*.......7.^..`..4...i_.;.n........."..9.79...zX.x..*A....Y.......<..S./m....N0.....c....u.^V..,..pA4p....9kw...1.E\........%.)."N:s.G.#:......@Q8.h.#:..KB.T.q....FtA.'#.FA.SG....}.Q@B...4p..YM.i..m.:..I.I......k..S..ixA/.m..Ka`...Z8A..6.G..6XN....'...S..p...U.*.K.Fu....6T#....8I3.b. .K..G.U.$gF..Y.QP.{...$.....l,....n....lM.J..I...G.#:...^..%.^..6.L..~..._e........9.c.PU.?....YYF....#...0....kw.x..j...i...=.4..*.)Xt...F...<.N.rRac....i.N..._.%..?n%.v.b."9Z/(.....&e.,..p.....4q..M......\[..[Q..mATF.J2.}g(S.........R..c..h.u.....N..z.gPb=.^.Z...N.......-....kB...";...Q....u....X(vY.. ......D.R.MvL........>?..S.._....H.v.....k4.9.Q.....1.....,.d.g.L3i....m)qf@i(...icqlgv...r..$.B.i..(m.N~.?6[T}...f..Ldp..a.....4.v..}..6U........u.......NR._.....s.Z...n.A...=........3V..$.....[*..S.>.c.....E..yGr@..UB.U.)uL.a{.|)...jqqQ.bK......\..8......BH..[.....E....
<<< skipped >>>
GET /bao/uploaded/i1/165210189382602147/TB2LWI9lVXXXXcwXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 31716
Connection: keep-alive
Date: Sun, 03 Apr 2016 03:24:38 GMT
last-modified: Wed, 30 Mar 2016 03:24:03 GMT
Expires: Mon, 03 Apr 2017 03:24:38 GMT
Cache-Control: max-age=31536000
Via: cache18.l2de1[657,200-0,M], cache56.l2de1[659,0], cache9.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 3272004
X-Cache: HIT TCP_MEM_HIT dirn:10:310478492
X-Swift-SaveTime: Sun, 03 Apr 2016 03:24:39 GMT
X-Swift-CacheTime: 31535999
Timing-Allow-Origin: *
EagleId: d5f4b28814629258829472138e
......JFIF.....d.d.....C....................................................................C........................................................................................................................:..............................!."1.A.#2Qa.B..$q.%3R.b.....................................I........................!..1..AQa."q..#2B...R.....$3b.r....S...%Cu.................?...E..q.h...@.T..PDQ..UU.DD..z..N.x..s7J.........v.....l_w.....S.s'i..#(q.....8...........O.....d..2._.R..r..c.XM....F..bG.....YO...z..c.v...F=....h...k..]A....{.}.9GY.JS.F$.@11B.E.NQQyE.>.w.. ...H.e.....,.7/...&S]....2%8.........l.A..R..<...zk....9.........g.@...X..d}..F...hZ<..H..(P.... 1P.N......^..WX]~......"..qz..nZn.]..Z.....}B.E....."....m.V.e.[..LD.......|..<.....;...n...g]J(...v.E.G..J...w....w... ......yx......;.....y...Y..~.....y?".g..(.{l.".*..jV )..9......K..2....i4<...i..../.4O8....1L..J_.H.u...vU#$VK^....^&L...<2.z?....3AYq[RE. !^>.IS.T...[.......z.h....u..iRB.<.I....A.#.......Z.W.c.67u....q.g..r........;I.n._.'..UTDEU.E.....ZZ!i...u$.R. .F.;....H.UTd........wm......X......9K........"..;. ..H...$i.E..Q:.j...:=...-O..........|N..1..4.^..]KV.a...C..nRy~{z...#PJ:(...:(...:(...:(...:(...:(....U..W...^.:T/....wt.w]...&...)..o../.G...x.....*..."..B..."....8i...p.....v..H2\`Igb.. ........(......Q\q.G...i.3vU.#,V.. .E...?~..?....x.......o9w..o.i......S...........$.z09.a.......$*..Z.%./..;...u?.B.....n,.ogT..RVNs)...c@H..A......7.KO.9.V.H..v....h..B...?rm[~..nf<.$../8...................i......-.$
<<< skipped >>>
GET /bao/uploaded/i2/173890212987521547/TB2CFOIopXXXXXaXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16883
Connection: keep-alive
Date: Tue, 10 May 2016 06:37:04 GMT
last-modified: Fri, 06 May 2016 04:52:02 GMT
Expires: Wed, 10 May 2017 06:37:04 GMT
Cache-Control: max-age=31536000
Via: cache36.l2de1[0,200-0,H], cache59.l2de1[0,0], cache9.nl1[0,200-0,H], cache8.nl1[0,0]
Age: 63659
X-Cache: HIT TCP_MEM_HIT dirn:2:654115609
X-Swift-SaveTime: Tue, 10 May 2016 17:29:00 GMT
X-Swift-CacheTime: 31496884
Timing-Allow-Origin: *
EagleId: d5f4b28814629258831062153e
......JFIF.............C....................................................................C......................................................................................................................P..........................!.1."AQ..a.2q..#B...$Rbr..%3.....4Ce.....&67cds......................................@.......................!.1.AQ."aq.2.........#3BRbr..$4%CS.................?.k....kv .$6...Q....N..&.. ...f......2...1..NT5)...#2HU.{.H."Be7A...."R0F;.......R...WY....I.....g.....`...y.........6N/ eyI$.o..m..G..#{..E....(.8.D....)5\{.....N$.7Q.....N.H........!H..4|.L.....\ 8c....e,....ZU..6...N..:J]...!.M.{.bo.......N...........j..Z`.{.Wd.N.......jre.....".....(=.eA.l8 ..-7......4......}qb.....F...3).........i.B....1..7~O>....T.d.q.F.,C\...h..A.IET...X......m.UWa..z ......Y..i...SD.F..e....tL4.4....p...}. .....4.p.....v'k7. .N......il..}.b10.U\..$.3(.!..k.>..U...W....E...DY.........WBF.....du...$a2..D..R.(.)aa.'.<k..!..G....-....(..St.....G{.Yk....9.2./cgRT......IN..8J.Q.I k~x......52...6.8....;..,lR.7...b..%J$.WQ.......o\@...r_E;.1U.P.K.A.j..IR.JS.C.}.....ih%,.H.IL....lH....J..o.7>[.8..N..].,Z.....|....a.K.:...T.9.(-pA.q.m....E...k....c.b.1(5.#".K[.bjd.J.VHD.H..?t.|H....#)k..=.v..|0..|.i,P.EHw,.{a......(..!.k~.......AIX9bx..bYM...^v...1....AP...-..W.r.Q;#H..y.c%..!o..4.D.l!.U..C.IJ0a.OH..:....|1..b....=5V.-..d9.Gt.**#....pO.#c\p...%.E.ZE.G=....f..A.K..g.*^.........$sf..C*..W...;i..'*..z9"k<J....>.[.0...O"."..,..[5. ..tBp. .%..&..@..Ok...#.G...D.>S.Q .Px6..8sXJ...8.J.#u.Q.4
<<< skipped >>>
GET /bao/uploaded/i1/190240185345146474/TB2cbj2iVXXXXaAXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 19296
Connection: keep-alive
Date: Fri, 25 Mar 2016 23:26:56 GMT
last-modified: Wed, 23 Mar 2016 09:07:27 GMT
Expires: Sat, 25 Mar 2017 23:26:56 GMT
Cache-Control: max-age=31536000
Via: cache5.l2de1[0,200-0,H], cache61.l2de1[0,0], cache5.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 3977467
X-Cache: HIT TCP_MEM_HIT dirn:3:285915113
X-Swift-SaveTime: Sat, 26 Mar 2016 07:48:50 GMT
X-Swift-CacheTime: 31505886
Timing-Allow-Origin: *
EagleId: d5f4b28814629258831762157e
......JFIF.............C....................................................................C.......................................................................................................................E..........................!..1A."Qa..2q.#B...3CR...$br....%...&cs....................................I........................!1..AQa."q........#2..BRbr...$34Cc.........5Ss.............?..M>"g0................YX.\.1......G....`%..&.9.}..0M.T......r.....0S.....~.C ..G....b...q.z...`..&..."..|.M...k.OuNCBD..x.*R.&@.Q...y..........F....V....5.....t..<.'...*...WZ...h}...J.Z.Z-.".....| .....z..... .... ...i:...2...H#..X....ap*.s.......CdK..e.:....'.hV.M.1 \.S.*..4.......a.....,..S..r.4.............^.........n........x-.........O....c..q..j....^p{ p..Y...Ki6i..%j8.]{#xZ..>#8(.E...Z..t..[.,!&...RJ.ko.' &.b.....B.H.:..!z.g<\.../?..v..BK".Z....&......`BJi.WN...S)..Z.z`BG*?0....G!.o.. ....)b.....8.n......\].d......#..w.... ....V.........y$P.....T'....m..\...........1Q..8[?G}.o.6>J,G....u.Rr.|.Q.!..9.NI.S.r&A.0.-8.T|.V.S./....S.<.....M.-$..#.3.C.V..]..{8^f...q.er{..3...J.....@.M........*.k2.3V...a..p..{....O....sr..........aU..i..CZ,,r..=..c..1...z.b..."...'.......[...)..bD.[ih%D...:....F.....F.}...BSt...!CY...T.&.T9........,..........u.........3-.F.q.G..XFy..io.[...k'Q..&.)...h.....:g...F_.6..4..-(....@..6.9 "..8..P.3C..*>!...|....V....dt.......9..) B......v...dn.x....qk..(O....{.[.....TP..I.....P......y'Bw....\85!)......7...v......L.h'N...q........1....t...%.2H.7$.M.za..Rr..4Ho.p!7....)W...
<<< skipped >>>
GET /bao/uploaded/i3/123390111690826752/TB241poeXXXXXbBXpXXXXXXXXXX_!!11442339-0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 13617
Connection: keep-alive
Date: Sun, 30 Aug 2015 05:48:45 GMT
Last-Modified: Mon, 27 Jul 2015 16:30:55 GMT
Expires: Wed, 27 Aug 2025 05:48:45 GMT
Cache-Control: max-age=315360000
Via: cache63.l2de1[0,200-0,H], cache16.l2de1[1,0], cache6.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 22012162
X-Cache: HIT TCP_MEM_HIT dirn:3:838613949
X-Swift-SaveTime: Fri, 20 Nov 2015 15:47:23 GMT
X-Swift-CacheTime: 308239282
Timing-Allow-Origin: *
EagleId: d5f4b28814629258876212394e
......JFIF.....H.H.....C....................................................................C......................................................................................................................B..........................!.1.AQa.."q#2...BR..r..Cb...$3S..E...................................3.........................!1..AQ".q2a...#3..BCR...............?....\..<E.,..1....._td....4.)`..}9!.D...?........>$.ZC.2.....VT....u*.xm*f`...R].......R.s......ak.8..F.H].=........4..@............Y..m..v..z...?rh..2].AZ.........$.....I.=.PK@..ZG.MA.!.....$(......7..XyX..$..m..V..Y.........0V....$..^...3N...UM..........8.k#..............1.......JQ..i.......*W'....@.C.w...9..{..........?........q@...c.F.I......?.T......j.N..<@<.R.`XZw.n|M.l....O4..ZZ[.OO\.../.Y.....G..oO..%...,.....A.$.5..R.p..G5.!v....<......O....&.X.....`.....B.@ .6....E.C...*lrR*q`.....ic......V.1..4.~...8...1..'......RB...<VtDC.B.d..p(.$LZu!......-}.......I..)......i.h.{)....?Q.....;.@.(......08$....=...Q.;K..6...S\l.. .z:..Q..K`\....Pi.6..&.<....F....J..l.X.....R`...L_......[O.2.P.4.K1Q....1.M.....$....e..!C..<....6.4n.p$ma.R{...M...\.[Jt '..-....-.{]'...%...l#........U.r..'....&F..X.S..K ..*Oq.i0,kZ.....V&...K....S..3m....%8.......I.z.......D.7...f:O..[....f.q..$!_j6..O.%.@.4.......y..o~.... ...........(.b./........^..".P...H.].&U.JR.$$.:..H......q.<..*[@%..[.......Af..~.....e..BO.Z.J.j6.....5..[cQG....[...5GO~"4..e. qi...jP......kn....$.)9.2........r............`....G.P ..Oj......F....^X....il..%........"5.n;..
<<< skipped >>>
GET /bao/uploaded/i2/171640196430212344/TB2TFmdmVXXXXaXXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 21780
Connection: keep-alive
Date: Sun, 10 Apr 2016 15:41:01 GMT
last-modified: Sun, 10 Apr 2016 15:40:19 GMT
Expires: Mon, 10 Apr 2017 15:41:01 GMT
Cache-Control: max-age=31536000
Via: cache46.l2de1[0,200-0,H], cache33.l2de1[0,0], cache6.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 2623026
X-Cache: HIT TCP_MEM_HIT dirn:9:549913515
X-Swift-SaveTime: Sun, 10 Apr 2016 16:38:02 GMT
X-Swift-CacheTime: 31532579
Timing-Allow-Origin: *
EagleId: d5f4b28814629258876912398e
......JFIF.............C....................................................................C.......................................................................................................................G...........................!.1.AQ.."a.#2Bq...3....$Rbr..S....4Ccs.Dd...................................E........................!1..AQ.."aq..2......#B...3Rr..Cb..$..%5S...............?.....BX...%..`BX...%..`BX...%..`BX...%..`BX...%..`BX...%..`B.zS.y?S.Q..i.~..{..&S...p..%@]&..W......(.'.}.r9.c.Q... ......../....gm.H..3 .f.....R.......i&y....G.....E^..[d.I...C..5...k.{m.....T:n...%.nQ4.Y..w$..9...i.<.HN}5...U.juT:._.....SV>.Op...?..f.K.B..L........<..B].?j.?y..-....2.~V.CG.p......J..>..h...*^`...L...h?}@..G....-v.5[..?..O......e.3..=7l..l.7..........B"o.8.X..V..........F.?U.d.1.5...'.h.Y.c.......hy...........R.....;......$%.&.e..P./*.bl.e%...L.`0..........Q.)JG.!~w.,p!y..`BX...%..`BX...%..`BX...%..`BX.../V6..C...Ns..:....k..t)H.......$.2.hYWL.w.a.<..V..........mbu..f....M$ .......G..................A.6.......*....v.y..5..k.C.....=..qd.{u.:..y...666.m.=U.........1Mx4.I.(.......?......../..........J......?....cD...D4.e...........W&..k..R)...LI..X...-...%.R.......u.$.....0A.1...h...s...... ../.B\..I?zh.C%...^.^.}.u...}5.(Y.6.........I....Dt..S.K.n**J._..r.L...a...5.w.t...L.J.7-2.......o;..(..|.!~K..'........;.B..z..*.U..^....U.*....e...j....]..>... ....t......RZ......=.k....La.$....r...'.TG......"~Q.N...N.....6V..!..h$rU.X....:LR.....O.S.....#z..-....FJ`p..kw..S.Y^.mF.?N..`.9.>.....*Dj
<<< skipped >>>
GET /bao/uploaded/i4/126770134198657702/TB2LvGmgFXXXXaCXpXXXXXXXXXX_!!23282677-0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 18614
Connection: keep-alive
Date: Thu, 05 Nov 2015 23:29:26 GMT
last-modified: Thu, 29 Oct 2015 15:15:19 GMT
Expires: Fri, 04 Nov 2016 23:29:26 GMT
Cache-Control: max-age=31536000
Via: cache26.l2de1[0,200-0,H], cache54.l2de1[0,0], cache9.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 16159721
X-Cache: HIT TCP_MEM_HIT dirn:11:873723086
X-Swift-SaveTime: Tue, 23 Feb 2016 05:27:59 GMT
X-Swift-CacheTime: 22096887
Timing-Allow-Origin: *
EagleId: d5f4b28814629258879572408e
......JFIF.....H.H.....C....................................................................C........................................................................................................................:...............................!."1AQ..#aq...Rb..$26B......................................>........................!1..A..Qaq.."...2....#B..Rb...r.$3..............?..f.j.....n..Z.~4.;....8.....E.p...M#.c...7S..!@L ..l...U.[l......DpS...y.....\.....0..8.......;m.._...[M..j..... ....,.dm.q.n\..CFI.Z.;.RN.S^.f..Q.......l.vKT.I...t....U.lU....r..........w.P>..o...>.....RN.I...d..`.......k..........Gc...V....I..:..,..jq.<Te..x.........hT.NAh.6....-c..M..Ts.;.q.G.U.....5r.@.].)..A.e0....5@.....................,....G..K...=.....0d..bF...5X5...gl....v.c..WIQ.2.u..9f..CW.rI;Z.)."*.4.C!..5..p.kk....T.T.OI..p...<7..*.j....Y...p@.....`d<M...a.`.7.x..S.[......Q.7...GV\..i.......wN!..kyr@[gq....Kh..[.u..7.i.m0.j..<...y.%(c\..x`1r5...IV..H..6*.rCv..0......y~....N).0.R-.. ...| .....T{.......~.jj.(i.".=m..*"e...Begy......F|l.........w..*.}.....-..%4..]...H.....]8d...w)......;ERCtP.......i.Fo..._m6.8.m...V.!..,......fr......._.wp.q.......J..*.3g.S.IK3dtn..l..9........]...7n.g...l.\[-d}. m.Ipu]7t'..v..c-?ty........9U.w..sR..........FN.[] .*..".$..-<......IG....S..C.........IT..]M..t.F.5..9....4':...\........f.{..Ou....>.X...q#..)]..h......f"..|..BSfk.F.R.7.dTd..P....A.c,.kg.$..v....T.E.(.R1.20X...........%Tld..%...........m...(x ..uU.6.........b...Ii.3...M."/...<,..4=....v..._Y\d...b..u.|,
<<< skipped >>>
GET /bao/uploaded/i4/164130173274074824/TB2gG_OkVXXXXXnXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 17409
Connection: keep-alive
Date: Thu, 03 Mar 2016 01:57:04 GMT
last-modified: Wed, 02 Mar 2016 02:42:36 GMT
Expires: Fri, 03 Mar 2017 01:57:04 GMT
Cache-Control: max-age=31536000
Via: cache29.l2de1[0,200-0,H], cache32.l2de1[1,0], cache1.nl1[0,200-0,H], cache8.nl1[0,0]
Age: 5955668
X-Cache: HIT TCP_MEM_HIT dirn:4:400604250
X-Swift-SaveTime: Thu, 03 Mar 2016 07:37:22 GMT
X-Swift-CacheTime: 31515582
Timing-Allow-Origin: *
EagleId: d5f4b28814629258927302675e
......JFIF.............C....................................................................C.......................................................................................................................S............................!1..A."Qaq..2..#BR...b...$SVr.....3C..&56FTUcsu........................................9.......................!..1.A.."Q.aq..2S...B..R....#.b.............?..w.\c.........>.2.Qn...........F...TT.....P.U.'.....%....{."..n...h...*.B.63...q....P...z.]B.0..%2..A.-..*.....SiN.#.... ..d.\\..b..U....D[...8..KD..F{...4..H#.=.....TO......Pn.".l..yb...H.....<.... ...s..5.....'..-.C.A..z....=..7..... ..6? .....'..?.....'..|zm..;=O....~.Y}.)...dH.....)..Ch%jWl...@.H.P4..F....o..]s=H...h.XCN(.rj.R.Hu. ..(ZO.8=..x./,........=......V.\...........)R.T.....=I.<.,#)C.......kym...v|.....>..v..2....kui.J.2.NU..q.3K..5..........dj.....~.......o:..u.R..)..$.........%@.L'.......u[b.I..e...[.B..-*../`&?....b.yI...<.,)....v?.vE&.....N...LJ....1V......HH'.U`..zj........>6..>............Kb...]\..$2....VJ....H.H.@.L).e7f..{[C......n......UD....J.W....=..t:.*..Nu1...L...jkDA..h......Rq.,Js.,....."..:.EN......=..n....*.r\.....J.c.R..!Iq|.( .._.X<.l.$...../..$[........`..Q..i..%'.., CVT....l.g.]c.Y..]..p...W....[..T"N...6......X....<..[X.c.O_.X.Y..s7............z..W....(..T.%Q.'.....O.pz.:..%k.I.U.{.....5...]..D.!.A.n..)....W.....>.O....j....xD.x..xO.^....I.Ub4KxG....J.R..\P..~e-.....C.Q...r.^).;....%l_.t._V..K..6.k......b... e0.....<....(... ..D..T.....i.5z]sg...U.$......
<<< skipped >>>
GET /bao/uploaded/i1/190240181080113079/TB2D0RdlVXXXXaLXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16663
Connection: keep-alive
Date: Fri, 18 Mar 2016 00:16:30 GMT
last-modified: Wed, 16 Mar 2016 09:02:23 GMT
Expires: Sat, 18 Mar 2017 00:16:30 GMT
Cache-Control: max-age=31536000
Via: cache34.l2de1[0,200-0,H], cache47.l2de1[9,0], cache1.nl1[0,200-0,H], cache8.nl1[0,0]
Age: 4665702
X-Cache: HIT TCP_MEM_HIT dirn:0:759366562
X-Swift-SaveTime: Fri, 18 Mar 2016 21:23:03 GMT
X-Swift-CacheTime: 31460007
Timing-Allow-Origin: *
EagleId: d5f4b28814629258928472680e
......JFIF.....`.`.....C....................................................................C............................................................................"..........................................?..........................!..1"A..2Qa.q.#B.R....$3b.....%4T...................................9.......................!.1..AQ"aq..2........BR..#$35b..............?.....fs.2.......vEw..q_<..`.=..`..Pm....%....H(.N.e..,.T...rIe.~q........i....G[.....Re.:..,..x.dEJT.....M.na..H...7.%..".#c....{....@v.aut...-i<......@.......3.B....<..........a....?..%8..<o7@..:....5...(..j...UOM%2.l...........&.w .M. Y..'.......y].e.mngM.)..... ....`..cbl.llok!}rq#.......G.ZQ.Z.Z.I..,.=G.#..#pW1*:;.bI$jH.F.C...X../......^......e. ....&I.=6J.-N^.)X..R.Q..X).p......E.^..cv...W9.#......^m......ZT...6...d.6..........{pO..6...<.$M.....,../.I${~p.&...q.....<.".gQ..k.`|s...O..Qo{_..|5.....#.c.rU.rn.... .....0.)....s....w..7.l!.z.@...I.4.L.....)..#j.Ve$_.<.N..F.|[.2M3.T*..$.?.$.6U....>.....SP.L.4.klkm.z...6C.(.d....!.0G&.6....-..bM..*..Q...'..q..,%.}.......O.bI.....8a.<p98-....)..-..Q.q>..~....{.....g...P.....W.B..o...<.4..c...@l......I...fTf...g....,M;..H.........I.3......Q.%.......]...D..VsoS....(t.......| ....).......N.....P.Q..\....9.r.;.o..6.....o|^.WF.....t.z....1f.-Q.<.L..I,......{2.y...%... .CB....O#H.4..v ........QKS=DR.G5N.......g.....n/....R....4.......}e.....-....H}65.........W.C...W.3L.=P.h.$....U....7<H...U..B..3x........F.L.K.[.....5Yup.tc.C1...].Rlo .....>)3.jd..v.y..I.0...
<<< skipped >>>
GET /bao/uploaded/i3/155470185780814024/TB2TTdcepXXXXbFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 27028
Connection: keep-alive
Date: Sun, 27 Mar 2016 18:32:48 GMT
last-modified: Thu, 24 Mar 2016 03:38:06 GMT
Expires: Mon, 27 Mar 2017 18:32:48 GMT
Cache-Control: max-age=31536000
Via: cache48.l2de1[0,200-0,H], cache58.l2de1[0,0], cache5.nl1[0,200-0,H], cache8.nl1[0,0]
Age: 3822324
X-Cache: HIT TCP_MEM_HIT dirn:3:302345596
X-Swift-SaveTime: Mon, 28 Mar 2016 07:20:13 GMT
X-Swift-CacheTime: 31489955
Timing-Allow-Origin: *
EagleId: d5f4b28814629258929092685e
......JFIF.....`.`.....C....................................................................C............................................................................"...........................................G............................!.1.."A..2Qaq.#...$;R.&C...'(457bgt.......................................F...........................!.1.."A.Qa.2q..3B...#$CSb.....%R45DGTe...............?...GGGC......7....u.I..0Z.,...-X\..O..,.eFmE&k....Y..=&..I.......I..........F.Y.`.<.7'a.'`=....g..... W..17.Y{...?.^K6e...q.`..(...g .1.I .)`..:..?..e.n5.C..". ....F.X......Kl.[.......D'c.~-.$.OC......2..H.7....{....}.............n}.....?...|(.@0V..'v.e.9g4....r.8.....)....L?GP...m...C...... w...6.>..F.G..]....%@.a....Rsj....J.... .?..>O.Pa.......~C..~}..(.@x#.......K~.....x...?a....uKYqM#M".x...|..........z#..L...**V%6.S.J])t%[...5...2.?...U....*|o..U@....?.L'.....j.n.7....@.lnU.y...).U.....0.u..e*4....R...NG.._7...R...V.$.e.d.DU.if}....C^6#.$4.......o........f......5.....0..V)B..~b."MA..&... ..]>...$Q3.....N...c/.}.b.m.?..r.\.}.I..=v'.]&W...}=...r.!>..J.J..y....a.G.].V....b.S...k%..._...g.B...$4..`..........8.Kg.=Mu..._.a.[..}D*.!.G.4,......W..R.o.......PO.......W.v..V'..b........uFrX.l=..x....Tn..N.us5.....\w"K...)....%K.......i.x.......j4.......h..i.J..T.C."#..xS`..}i....!..|...u!...I. .%'`T...R...@o..'..)].....4.k.....W...T....L.'b....*.p..?....R..B.......e..'.....q........f.1....H....s....$s.7">.g.&wK...kK...L.%..0..Ir......k.j.4..........B..#c..2.y....g..=..[..[7$.....<...C* ....m..rv...(.M.
<<< skipped >>>
GET /bao/uploaded/i3/173890213147801832/TB2dlWPopXXXXXIXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 25723
Connection: keep-alive
Date: Tue, 10 May 2016 16:03:46 GMT
last-modified: Fri, 06 May 2016 09:02:14 GMT
Expires: Wed, 10 May 2017 16:03:46 GMT
Cache-Control: max-age=31536000
Via: cache60.l2de1[0,200-0,H], cache53.l2de1[0,0], cache7.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 29667
X-Cache: HIT TCP_MEM_HIT dirn:11:55423338
X-Swift-SaveTime: Tue, 10 May 2016 16:32:18 GMT
X-Swift-CacheTime: 31534288
Timing-Allow-Origin: *
EagleId: d5f4b28814629258930252703e
......JFIF.....,.,.....C....................................................................C.......................................................................................................................A............................!.1.."A2Qaq.#..B...$%3....Rbr.....C.................................=.......................!.1.AQ."aq..2.....B...#Rr..3b...$%.c............?.........Cb.| .W..J.gWm.~.=*......>.*6b....J.'.p6...R.i......J..*D.?^...E......B.5D...=*M;..~>OJ....}.T....{....'.......".G0;...|....}.w.....2..o....B...4'....F...`>.z.f.S........W7....{K......E.F.V..6|'......L.J..V...[M..........Do...3.....).Z.r....~..B....O4...l...VR..}_R3......... -..p.B..........*....Hx......(.$...t...?......*.:3.a....).N...T..#L....R.c......... .O...CyH.....*....{m..*T..N;}.\.RWa..........*j$@.....FG.V..~:\...7."F.!..:.....lG..@.. nQ?n...G.a...q.....^.....?..(9..B.vC...~7,.P.i.Wo%......o>..AQ...a?..Zv.K...#.uUwf.......RS.v.-.T.Xmb:.K........G.u{{E.t..T0........M..m_..$y=.>....[....).......~...K(.o...J.3..w.{....L..s..*Tl. ......*.r....H.../.t.J..U.q....*M4..m..n....s..:T...P..t......N...!Jh(....~..:fj...{~..n..=..,T;!J....(......Q.f?.y..@...S%..$3<3B.....b?q..P;U...6...z!..%....3[...D0i. ....i1..'e.R.cf..@....D.Ve.e.] .kL....7a..>.Y4q*GS..1.....$.W...d.}.....b=...:....S...p..V..)..G..}...'j..y...m...@.@.c.T.Pcv.........U.r.....S.4......4........E.....s....|~}=?*..}...:T..L..t.fk.)..Uw....Tu...^...Y...u........C.,h.7..EKJ}.. . .^._....U.....}..E6...8KT[.o.,..o.........X.-..v.....ZE......%.]5....
<<< skipped >>>
GET /bao/uploaded/i3/183970182615491456/TB24aEXlVXXXXcfXXXXXXXXXXXX_!!2-saturn_solar.png_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 36460
Connection: keep-alive
Date: Fri, 08 Apr 2016 05:49:00 GMT
last-modified: Sat, 19 Mar 2016 01:33:28 GMT
Expires: Sat, 08 Apr 2017 05:49:00 GMT
Cache-Control: max-age=31536000
Via: cache54.l2de1[0,200-0,H], cache60.l2de1[1,0], cache3.nl1[0,200-0,H], cache8.nl1[0,0]
Age: 2831357
X-Cache: HIT TCP_MEM_HIT dirn:1:152698278
X-Swift-SaveTime: Fri, 08 Apr 2016 13:39:33 GMT
X-Swift-CacheTime: 31507767
Timing-Allow-Origin: *
EagleId: d5f4b28814629258978542951e
.PNG........IHDR................!....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx.....eI.&.....s....32r......uz......g..pH.@..$A?...... @.@. Ej.!9Z..........* .* .......w;....~0.s..........E. 2..{.u777........png.....O.>].UU..........1 . ."...... ".h<...p.../<.8"^.r.m....?.......h......,...;w........;...7o_o..C........vY..s;;... ".....(d....)=....D.. =...W..D.....`?.F.....>.O...../...........G1...K.|.._|..'GkkEQX.\Q.n....7.DDDP. ...( ...Zf..$.@".5..........BD.....|.c......s........q..u.6.>#.....g_|........^.o.....1..D.. Y........".C.@..'..A.ED.D..Y].....Q........l6._~..k...s.V.6....Gi.[.....4.....M....|.c..}..c667.....M'..iD.?.<....[....-..;7o.....c..~.9..l2}.........w.8.....]l.frt..mU.\Q0.dr|..{p...[7......!..........?!....{..x.>..{..s.9..!..""..d>...E.....h8.."b]...c.}Q....c...C1..lZ/j.(.b0....^.o.1..0.0s.q>...y....|..............8g'...^.....MQ.....3.p8.......O>..........k......a..[c.w.......P...H.w....{"b.B2.........w.|c:.........M3=>.M...................A....{...w]Q...x8^....>.X..o..".......{.!......ug...P...2d...........=..!6Ms........B.m.9}...>s.w..O~|.....[[_7D..|>_.z.K...}...;7~Y...Ed...P......u...._x|g{........p4.....KA.........7..a....9w.......!JY.UU1..../f.G{Wn......u..a.o.Zg..........u=.BY.....O.c.q..b>G..m.......UOl.B.m.B0..F.K....gN=..3...9g.E.t..TU.s.........o.I.X..~o{............D...{..".....n.4.d.....|........[wo~.].o..."...H.....>Te...._.9.N..\.....Z........^.....{....................on...~1....N.n....&.G
<<< skipped >>>
GET /bao/uploaded/i3/188210149566741470/TB29oNvipXXXXXmXXXXXXXXXXXX_!!95758821-0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 26941
Connection: keep-alive
Date: Wed, 16 Dec 2015 03:12:17 GMT
last-modified: Fri, 11 Dec 2015 11:02:55 GMT
Expires: Thu, 15 Dec 2016 03:12:17 GMT
Cache-Control: max-age=31536000
Via: cache55.l2de1[0,200-0,H], cache3.l2de1[0,0], cache7.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 12690360
X-Cache: HIT TCP_HIT dirn:10:487256994
X-Swift-SaveTime: Wed, 16 Dec 2015 06:14:17 GMT
X-Swift-CacheTime: 31525080
Timing-Allow-Origin: *
EagleId: d5f4b28814629258979732957e
......JFIF.............C....................................................................C........................................................................................................................E.............................!.1."A..2Qa.#Bq.....$3Rr.....%.&Sb......................................G......................!..1A.Q.."aq..2......#BR..3b..r..$C..S.4Tcs................?...=.....bR..... .R........(./.>=......(./..<{..q....R.....'..6%.W..tfP.3.W..../f-ve.6]...!"...mU........kc.4.rUUL..[Z...2..;....D. .M...@........D.x..CP.W...c.....r..8...JQ. .g-......A.:.T....e..>4..N.j.y}.........B^.%Y.....xW...{..$.6.}8LJ..:....c......sW..x8..1...?..G..H......o........5bb..>B..R0.C}..JA7....Q..P.....P...q......5..p.r"..L.4H...Z].D.!........."?M...%...$|.i..Qf..p......0,..../c....M...F.\.("R..p.L."..@4J..)XP."...8.D.0N...~.K#Wm_7E.'(;j.0U.-VM.u.7.Q..1.....Q.......A....F..JQ.(..iJ...@M.= &...<....D.g...2N.........l.&..W.6.8..5v..W 6;.@.v<...J.?m'o....`...;..s N.$.pm...,...3D..L....O.Y.I_o"Qm7.W.7.B..M..6........Vc e..X..q5..,w?.v..;h..'%`#a.....qr..#..r.),{.3..1.6.'1.......*.X...cq. .....9..j.[.....5V&.....6.mZG...V...a....I...:..fQu..v....O..L..S(o"...2.?.&...E..!FM....,&.7$;.Z..u...S..>......Z.g...Be.UT...Y....n/.H.,....{"......Q8|.f..=.;...s.!..'/.?K...L......e.@DY.fx.V..3.}..v..7.lK..e.].....j..B.G...trm!.NB?r.Tp..Rq.XD^........:...M.s.(...1<.O...O.>.7c.}D....7P.m.8m.Fg..Da.i..Xn....@..)...-"I....-.3..0..&....H.u.k.QYH.(@...%.u.!ym:N..Y...........~.....v..Ur.J..zU.h..yv.d.
<<< skipped >>>
GET /bao/uploaded/i2/192730193493502434/TB2wm.EmpXXXXaSXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 13710
Connection: keep-alive
Date: Sat, 09 Apr 2016 06:44:07 GMT
last-modified: Wed, 06 Apr 2016 02:37:51 GMT
Expires: Sun, 09 Apr 2017 06:44:07 GMT
Cache-Control: max-age=31536000
Via: cache50.l2de1[0,200-0,H], cache53.l2de1[0,0], cache1.nl1[0,200-0,H], cache8.nl1[0,0]
Age: 2741651
X-Cache: HIT TCP_MEM_HIT dirn:3:769773665
X-Swift-SaveTime: Mon, 11 Apr 2016 22:01:52 GMT
X-Swift-CacheTime: 31308135
Timing-Allow-Origin: *
EagleId: d5f4b28814629258980352962e
......JFIF.............C....................................................................C.....................................................................................................................................................................................4......3.....(.>3.......>.q&L....G<!.S.1.. .?.s..]:..{*.......3t..D.....5....k....#x...:...q ..Dz....|....,..r.n.....1..1B2.........!..r.t... C....N.-.....`r...(..}.).$.....B......AY...1.LO..S.s.Kq? ......$)..8s....i.g..|............n...D.d~..t.W......#b..l..E..'Q<..YQ...Y.K...@.....y..N.a......-..:.1..}w>..~Y..4.............8./G6._ mO.7 ...)..=.......N.....n...@....D........e....F.EH.Sy=.f<...oO...p.j..__..........3..K..x...'.....^..Fg......[.^...;...................g..<9......?.1...b....![..l...O.P...h...{.L...o..Z....s.i.tSj....-...........<xzf..........."........P.)........3.}.P.....9../..=G[;.....7.I..M......PHK...1.............?@....)........................... 0......"1@P...............>.... ....?d....b.Gm....d...'.h..k.I.gP.:...m...J.>..m...p....5i...^....,.1.... ...3.8.8......:..._....tS.|...Z.jb....nH.{.....G..oYL....&.-..:|'.Q/..#q.w..<u.. ..e...........Lq......5 ...He.4..<.s.......#. ..q..c.8.wX}.9E.k..c... b]....4...Z.?..).....\....:.3..F.|....0..O........X..Z...].(O/.].O.*g..r..Hv.....Md......v.(.}...Sl.....y....2....l.t.?}.d.....!}.L.R..z.T.....L...m~zi.s..(.[5..J..^.....l....LU.lrK2.F6..p....k.H"....f...M..m...I....v.q../....l...R.!.9V........ .......Ilw6...*......O.E4KC..K%.....`.X....c3f.=
<<< skipped >>>
GET /bao/uploaded/i2/177380111609007392/TB2m7lteXXXXXbIXXXXXXXXXXXX_!!26097738-0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 6663
Connection: keep-alive
Date: Thu, 24 Dec 2015 15:37:53 GMT
last-modified: Mon, 27 Jul 2015 08:04:57 GMT
Expires: Fri, 23 Dec 2016 15:37:53 GMT
Cache-Control: max-age=31536000
Via: cache58.l2de1[0,200-0,H], cache27.l2de1[14,0], cache1.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 11954425
X-Cache: HIT TCP_HIT dirn:10:623697461
X-Swift-SaveTime: Tue, 29 Dec 2015 14:52:36 GMT
X-Swift-CacheTime: 31106717
Timing-Allow-Origin: *
EagleId: d5f4b28814629258980962964e
......JFIF.....d.d.....C....................................................................C......................................................................................................................;...........................!1..Aa"Qq..2...#r...$3BRb......................................0........................!1.AQ..."a..2q....#B..............?.......G..$f....J........P.5@.U..J........~.P..........{...P.....[t....z...|.B....(..8.Q.w8..@Cd..j....<"..@.....0y.j..h.#........U...j.l..8.P-....z....PP.....'"_..B.b3....Q.5.?n..j......#.....>......qK<."x..^=.../K...1.q.U.V....6.yP<Ff...3.W.a...Sm.......dex.b....k.......x.@?~/./X....X{.../...............U?..Kq....sK.u...w_.k....~.....#7o ;..0...P..R..z...O0yT..:.[z..P...@-.P...g.......Sv..5....:v....#..iZ'.{..@A.r..'.k.z..U..-;j..._.^.mMN-.........n@...!I..9..0...t.].rI....M ...F.[.5....=6...Kk._V..g(@....c.a.>..Y...v.o.k...$V.^$.Io.-F.N....oev......ZB...I.yp...S&u.....c.R.15.1...Zcn..,.k..:..e}....tr.I..#........:..u_^..J.6....h.l.?.........]7,7k3>\...{.... .t:....$...=..fX1.F..]..z........A..,...... ......irI...X.N...K......F..z....WLo.*].>x|3..K...A.ceWP...8.^?...=...iI..E|)........I=..<........p....{r.t.p..../......M.W.q..z...M....V<.M.... Q..LrM..).I..%.E.I.. .....q@z{P.{..OZ...........~@f......^k...Q..".....!....&.....q.n@`Fv.u(^V..*...>..2.g<n..Q.M)XX...y".&.`.y...;|...]..H..o......~.... ..I!.=.cA..4.E.O.-.......-[o.:M..n.!.q.ij.4..P.L"9....W$..^..\.s...._...>1.....B...{T..;sV.......L..@<..R..6"4..6X...s^n.G
<<< skipped >>>
GET /bao/uploaded/i4/182930173993735555/TB2YgAwkVXXXXaVXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 15155
Connection: keep-alive
Date: Thu, 03 Mar 2016 08:25:23 GMT
last-modified: Thu, 03 Mar 2016 08:24:17 GMT
Expires: Fri, 03 Mar 2017 08:25:23 GMT
Cache-Control: max-age=31536000
Via: cache44.l2de1[0,200-0,H], cache24.l2de1[0,0], cache7.nl1[0,200-0,H], cache8.nl1[1,0]
Age: 5932375
X-Cache: HIT TCP_MEM_HIT dirn:11:355423155
X-Swift-SaveTime: Thu, 03 Mar 2016 09:00:46 GMT
X-Swift-CacheTime: 31533877
Timing-Allow-Origin: *
EagleId: d5f4b28814629258981582967e
......JFIF.............C....................................................................C......................................................................................................................Q..........................!.1.AQ..."a.2q..B....#$3Rb...s....%&C.7ESTru..........................................8.......................!.1..AQ."aq....2B....R...#3..C$............?....E.E.E.Z......_.........O..........n..B....J........h.:..D..^..j...DTi....r...TG..I..f.Q...h.w].~.......ci..q.F\..!J.Ka..6.v..H#.......Y.$.Q1.||.....B....]...A.....L..d..D........h..D.$..F*&...2..d..J..JN...O.k}b.\..z....m.[Z..U..u..."f...r}=."o....N..Wz.w.Y1.-*..> ia....rW.`$s..9..o\."..`.q...z*~..W...6....?..H.Btl..8...{..m..PZn....Yl.n..G...`d/`J.%%*..H.5....s..4...[|?V....z..6.,.2..d..A..._i...1.En..Gd.b%.n0....-...o...m:U.@...g..8."4.X...G.....#Q..|K...]R..,pc.F.u9.@......cU......Y...m*f.....[.V...%;T..s.8.ke.2..M..E..........k4..$m ..&A..uM..1..j.9d..;......[.......YR.y......)!Gv28...5.n..H...1.Lo.u...kP.U.U..1....jqn.....CH..4.V.u.h..D[...k...Ga1C..2.....~....VU.=...5.E.B.....s..p.o....}.:.h.3.2..-.Q'.....}...5.Z,7c......Xi.f.)......{.3..W..v5... .& ..$....w..nuT.k3Ps..........?.3.....[z.R&%.O..bT.......4..(...Jp:...N...A.E^..k..:d..N.d.m.....2...a......$jpn..3...Q....i...Z%.....ED.uc..._........ 8.q`.........;...r.!v.V..4:0.q;m.3.>.Rt...jkF...iN...)M..v.AF@V..^..8.c..2r...s...p..............j...mch..Xe.*].5.C.d........d.....J....5.....ONH....9..5.2..uo]X...`..j-...Z'P.#.P.=..rb...WV~";2..W.Uwm.?..h....S..p..v.
<<< skipped >>>
GET /t/detect2009v2.php?ver=1.0 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: tianqi.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Set-Cookie: wc=54511; expires=Sat, 09-May-2026 00:17:57 GMT; path=/; domain=2345.com
Set-Cookie: lc=54511; expires=Sat, 09-May-2026 00:17:57 GMT; path=/; domain=2345.com
Set-Cookie: lc2=54511; expires=Sat, 09-May-2026 00:17:57 GMT; path=/; domain=2345.com
Cache-Control: max-age=0
Expires: Wed, 11 May 2016 00:17:57 GMT
P3P: CP=CAO PSA OUR
Vary: Accept-Encoding
Content-Type: text/html; charset=gbk
Content-Length: 1277
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:57 GMT
Age: 0
Connection: keep-alive
var wea_ = {city:"\u5317\u4eac",day1:["18\uff5e30\u2103","\u4e09","\u9634","\u5317\u98ce","26"],day2:["10\uff5e24\u2103","\u56db","\u9634","\u5317\u98ce4-5\u7ea7","26"],day3:["14\uff5e26\u2103","\u4e94","\u591a\u4e91","\u5fae\u98ce","28"],has15day:"yes",title:"\u63d0\u793a\uff1a\u67e5\u770b\u6700\u65b0\u5929\u6c14\u9884\u62a5\uff0c\u8bf7\u6309Ctrl F5\u5237\u65b0\uff01
05\u670811\u65e5,\u5468\u4e09,\u9634\u8f6c\u96f7\u9635\u96e8,18\uff5e30\u2103,\u5317\u98ce
05\u670812\u65e5,\u5468\u56db,\u9634\u8f6c\u6674,10\uff5e24\u2103,\u5317\u98ce4-5\u7ea7
05\u670813\u65e5,\u5468\u4e94,\u591a\u4e91\u8f6c\u9635\u96e8,14\uff5e26\u2103,\u5fae\u98ce
05\u670814\u65e5,\u5468\u516d,\u9634\u8f6c\u591a\u4e91,13\uff5e22\u2103,\u5317\u98ce
05\u670815\u65e5,\u5468\u65e5,\u6674,14\uff5e28\u2103,\u5317\u98ce3-4\u7ea7
05\u670816\u65e5,\u5468\u4e00,\u6674,16\uff5e29\u2103,\u5fae\u98ce
05\u670817\u65e5,\u5468\u4e8c,,\u2103,",id:54511,chnid:101010100,pinyin:"beijing",rc:["05","03"],rl:["19","17"]};if(typeof(weaCallBack)!="undefined"){weaCallBack(wea_,54511,54511)}var weaAlert_ = {};if(typeof(weaAlertCallBack)!="undefined"){weaAlertCallBack(weaAlert_)}var weaAir_ = {aqi:181};if(typeof(weaAirCallBack)!="undefined"){weaAirCallBack(weaAir_)}clickCount('detected');..
<<< skipped >>>
GET /tps/i2/TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40.gif HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtms02.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/gif
Content-Length: 1338
Connection: keep-alive
Date: Mon, 21 Sep 2015 12:01:49 GMT
Last-Modified: Tue, 15 Sep 2015 01:08:17 GMT
Expires: Tue, 20 Sep 2016 12:01:49 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
Via: cache3.l2de1[0,200-0,H], cache39.l2de1[1,0], cache12.ru1[0,200-0,H], cache10.ru1[0,0]
Age: 20088973
X-Cache: HIT TCP_MEM_HIT dirn:7:102194305
X-Swift-SaveTime: Thu, 14 Apr 2016 19:59:00 GMT
X-Swift-CacheTime: 13708969
Timing-Allow-Origin: *
EagleId: bcfe56d214629258829472310e
GIF89a$.(................!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:65951bab-2f93-844c-af0e-f21973d795c8" xmpMM:DocumentID="xmp.did:AD021F2E52DB11E58FC2A28910A322D0" xmpMM:InstanceID="xmp.iid:AD021F2D52DB11E58FC2A28910A322D0" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:a13fcda0-9cc0-094b-a0ff-60131945a4c1" stRef:documentID="adobe:docid:photoshop:e4076f7c-5546-11e5-b7ad-fd1b51c20052"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! .................................!.......,....$.(.............Lj..rC.Q 6r....i5..n/.'(..3..;..uB....;r..\K$45m..SZue].-....hcry.8s..u..nc.s6............'.FW.v..&@.8....(.......P...x...f.#GqjP..;..
<<< skipped >>>
GET /ex?i=mm_26632324_6858394_36942102 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: p.tanx.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 11 May 2016 00:17:55 GMT
Content-Type: application/x-javascript; charset=gbk
Transfer-Encoding: chunked
Connection: close
Server: Tengine
Vary: Accept-Encoding
Expires: Wed, 11 May 2016 00:17:54 GMT
Cache-Control: no-cache
Content-Encoding: gzip
Timing-Allow-Origin: *
1b2............]R.n.0... ..X.e.a.p.0F..h..>4@....PT.V....j......n/.....`I...f.l........$G.@]g.j....2[.?..7.l..Y.Q...hU.P.'..;...]$............/f......u..}d.0^.OGN9...@iL.3o<u..T.Q...J..d...V.. ..:..J..qC...n.....Z.....z.h...z...(.T.^...w.....?..*.$J.7.j....=.........9..q....Z...r...5o...=.F.s:......B..k.c.85.R..fJ..._.k!.=<........9...9...Tin.t....2T..F>.6...6-.h.c.-/....K\....RT9.x..1....{........'..Y;...mp....a@^/.\..$Y.....;TH.._.....0..
GET /css/common_20160406.js?v=2.28.1 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Last-Modified: Wed, 06 Apr 2016 01:07:50 GMT
ETag: "a48d-52fc6972ea580"
Cache-Control: max-age=600
Expires: Wed, 11 May 2016 00:26:48 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:17:48 GMT
Age: 60
Connection: keep-alive
x-hits: 1242
008000..var main = domain(),isIE = /*@cc_on!@*/!1,isIE6 = isIE && /msie 6/.test( navigator.userAgent.toLowerCase());..var is2345= false;..try{.. document.domain=main.replace("VVV.","").replace("hao.","");.. if ( top.location == self.location ) { is2345 = true }..}catch(e){}..;(function (exports){.. var xhr = window.XMLHttpRequest ? new XMLHttpRequest() : new ActiveXObject('Microsoft.XMLHTTP');.. xhr.onreadystatechange = function (){.. if (xhr.readyState == 4) {.. if(xhr.status >= 200 && xhr.status < 300 || xhr.status == 304){ .. exports.serverTime = new Date(xhr.getResponseHeader('Date')).getTime();.. }.. }.. };.. xhr.open( 'GET' , 'time.txt?t=' Math.floor(new Date().getTime()/60000) , false );.. xhr.send(null);..}(this));..function $(_id){.. return document.getElementById(_id);..}..function $c(_tag){.. return document.createElement(_tag);..}..function $t(_tag){var _doc = arguments[1]||document;return _doc.getElementsByTagName(_tag)}..function $cls(_cls){.. var _doc = arguments[1]||document,rs = [],o = _doc.getElementsByTagName("*");.. for(var i = 0,t,len = o.length;i < len;i ){.. t = o[i];.. if((' ' t.className ' ').indexOf(' ' _cls ' ') !== -1){.. rs.push(t);.. }.. }.. return rs;..}..function domain(){.. try{.. var _host=location.host,_pos=_host.indexOf(":");return(_pos==-1)?_host:_host.substring(0,_pos);.. }.. catch(e) {.. return '2345.com';.. }..}..function g_cookie(_name){.. var returnVal = cookieS
<<< skipped >>>
GET /css/index_build3_20160503_01.css?v=5.28.1 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Tue, 03 May 2016 05:54:36 GMT
ETag: "11f8a-531e9be747f00"
Cache-Control: max-age=1296000
Expires: Wed, 18 May 2016 06:21:19 GMT
Vary: Accept-Encoding
Content-Type: text/css
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:17:51 GMT
Age: 669392
Connection: keep-alive
x-hits: 2739357
008000..@charset "gb2312";html{overflow-y:scroll}html,body{background-image:url(about:blank);background-attachment:fixed}body,div,span,ul,ol,li,h1,h2,h3,h4,h5,h6,p,img,dl,dt,dd,table,td,th,hr,sub,sup,form,select,fieldset,input,button,textarea{margin:0;padding:0}body{background:#f1f7ff;min-width:1000px}body,button,input,select,textarea{font:12px/1.5 Arial,\5B8B\4F53,Helvetica}table{border-collapse:collapse;border-spacing:0}h1,h2,h3,h4,h5,h6,font{font-size:1em}iframe,img{border:0 none}img{vertical-align:top}em,i,ins{font-style:normal;text-decoration:none}ul,li,ol{list-style:none outside none}input{outline:none}input::-ms-clear{display:none}.clearfix:after{content:".";display:block;height:0;clear:both;visibility:hidden}.clearfix{*zoom:1}.clear{clear:both;overflow:hidden;font-size:0;height:0;line-height:0}a{text-decoration:none;color:#333}a:hover{text-decoration:underline;color:#f30}.fred{color:#f30 !important}.fgreen{color:#178517 !important}.fblue{color:#0c6ad4 !important}.fblue:hover{color:#f30 !important}.fgray{color:#888 !important}.block{display:block !important}.none{display:none !important}.fleft{float:left}.fright{float:right}.mt4{margin-top:4px}.mt10{margin-top:10px}.mt8{margin-top:8px}.life_c1 li ins{display:inline-block;width:14px;height:14px;overflow:hidden}.skin-c{color:#0c6ad4}.skin-c:hover{color:#f30 !important}@font-face{font-family:'2345';src:url("../fonts/2345_160108.eot");src:url("../fonts/2345_160108.eot?#iefix") format("embedded-opentype"),url("../fonts/2345_160108.woff") format("woff"),url(".
<<< skipped >>>
GET /images/index/index-sprite-160224.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Wed, 24 Feb 2016 08:05:20 GMT
ETag: "1c14-52c7f86f19000"
Cache-Control: max-age=31536000
Expires: Sat, 25 Feb 2017 02:02:35 GMT
Content-Type: image/png
Content-Length: 7188
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:52 GMT
Age: 6473717
Connection: keep-alive
x-hits: 30070968
.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:a8ca6eaf-5047-cd4c-b093-ab90c1cb0093" xmpMM:DocumentID="xmp.did:8F4B76AEDABB11E583EAC9188DD62D35" xmpMM:InstanceID="xmp.iid:8F4B76ADDABB11E583EAC9188DD62D35" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c33bc2fa-ebd4-c547-a3cc-cded6ab15b8d" stRef:documentID="xmp.did:a8ca6eaf-5047-cd4c-b093-ab90c1cb0093"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.:.)....PLTE..................x..\........fff.......O......T....................................................,...R.].............w..........e...............I..............[o.......vuv........... ..8...l..N.l...8...nH...$......s....._...............#........Mg.......iY.{...z.........h.LLL...0.........wZ."...................O......y^..1........6........o..-......u....-............h.....9..ed`.........P..5..QVmV........h`h.........`ge.............C..........6.T.....r..................wxk...hgq..Y..........I>
<<< skipped >>>
GET /i/blank.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Fri, 18 May 2012 05:59:19 GMT
ETag: "3b9-4c04940ca7bc0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:53 GMT
Content-Type: image/png
Content-Length: 953
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:53 GMT
Age: 29432460
Connection: keep-alive
x-hits: 123174682
.PNG........IHDR...............?.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:BE04A97D9F3C11E1BC65ED9A1562F288" xmpMM:DocumentID="xmp.did:BE04A97E9F3C11E1BC65ED9A1562F288"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BE04A97B9F3C11E1BC65ED9A1562F288" stRef:documentID="xmp.did:BE04A97C9F3C11E1BC65ED9A1562F288"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.H".....PLTE.......g......tRNS.@..f....IDATx.b`.'..0..n..........IEND.B`.....
GET /images/logo/logo_normal.png HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Tue, 07 Apr 2015 01:27:05 GMT
ETag: "27cd-513184ff2ac40"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:53 GMT
Content-Type: image/png
Content-Length: 10189
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:53 GMT
Age: 29432460
Connection: keep-alive
x-hits: 102790863
.PNG........IHDR.......9......'8.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:60479eaa-3d1e-a041-ac04-73afa977a47b" xmpMM:DocumentID="xmp.did:4508AD04D9B411E4AFC0E4DB349F1651" xmpMM:InstanceID="xmp.iid:4508AD03D9B411E4AFC0E4DB349F1651" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:719e4563-f8fb-d54b-ba9a-389e92764bee" stRef:documentID="adobe:docid:photoshop:5bd23a12-d797-11e4-afcb-d464024abc62"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>;jiv..#.IDATx..}.......VUo3= 3.0....,.....1.I^.F...4j\..F...D}..[......_M\01QQQ\.>.?...( ...0.LO..U...>5s..{.GM....~......=.s...s...mCmsWu`..A@.@..i...`.y..6...u...O..*5...M .h.X.....LXv(i.!..0t-.O[I../e......|..Y.?....cx....v........._xav.61.A....b}.....C.a..)..p;oH._......f|...S.N.9Y.XT..g......m..'...g.pc'...L YG..po.../.> p.P..O......>Rs......I....Hx..E..,B....i...]..7..).._.........p, \.........^-...Cw....\..b.}5m..m!!...F{....>n...i..:./...............Z.....G|..9.....C...5..
<<< skipped >>>
GET /images/index/lazyloading.gif HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Fri, 21 Aug 2015 06:42:55 GMT
ETag: "6fb-51dcc93dfb9c0"
Cache-Control: max-age=31536000
Expires: Fri, 26 Aug 2016 14:09:42 GMT
Content-Type: image/gif
Content-Length: 1787
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:53 GMT
Age: 22241291
Connection: keep-alive
x-hits: 88684908
GIF89a . ............................444...............TTT...!..NETSCAPE2.0.....!.......,.... . ......I)K....JJ5....U.RK....(..&...05 /.mbp.z...1...;$.1C....I*..HCh`A.o..."3qT5.\.8a....B....d..wxG=Y..g...wHb..v.A=.0.V\.\.;........;...H.........0..t%.Hs..rY<H...........b..Z.b.OEg:...GY]..=.A.OQ.s....\b.h.9.=sg...c..e....*....f.7D..!.......,..........r..I..5........bRH.h.W...*lkL&-)..1-..v.m...).....M..t.\.....Rd..A..H..... .......o............................Gz{..!.......,..........r..Ig@5...rY.M.Q!(.(.(..8.........J..Kb..r....3.h..K!..6..3u`.&.D.A..z.fL.Z*..^`n.F.....O..ssyJ}T....N.aqXshC..XJ...!.......,..........i....Y4.......Cv....A.M.A."....J..j..A'.0T....*.b..JI.I..ZF..P.MM...s.bg.qV$........v.!...5....?}..........!.......,..........ep....80....#^.q..X....[..(\.-......S..@ P....0". ....L......z...xL....*Z....._..H......D..eU..ywZt.n..!.......,.....................A.2.W..E.&j.....B.&..w~.6..b8....p`4r|.F...M.>.......,bLv|?.4B.v......P..u.9.. .&..2..x&...k..&...U]..vo...o..p..raT&..!.......,..........{.........'..e.7......\l.-).S7@.&..4. `.yT.SL.\:=.....J..k...:......;.e....8.c.A.8O.j@b/. :.{..ty....t#....|.....-...mN..qK..!.......,..........l..I .8.b....y ..h..*....Zp=.....3...`.....C....`B.".p..X..9bP...B.`Z=.....8.>.u,.S..t"..O..T\um.|.;....8.~*..!.......,..........x..I.......A.]G...e..AP.b.)..."!s...... .B..I..........V...5q(.(.X2=.,.I.........n#&..A....Vq5t..sn.y\)_.....g......|r.5..!.......,..........g..D .8.[{.`&y_h..I.).(L.". gN.8..l5.."....L..A ...%@%..O@..8.N.gL ............p.us/.j...j.Vj..
<<< skipped >>>
GET /i/search0320/baidu_web.gif HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Wed, 20 Mar 2013 08:34:57 GMT
ETag: "78a-4d85718d1ce40"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:53 GMT
Content-Type: image/gif
Content-Length: 1930
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:54 GMT
Age: 29432461
Connection: keep-alive
x-hits: 121953348
GIF89aU. .................cZ.............9/......ZU..........!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:91695398A26DE111951AE4839BBBE675" xmpMM:DocumentID="xmp.did:6E0F9B15912F11E29525B1ABCBF93F2A" xmpMM:InstanceID="xmp.iid:6E0F9B14912F11E29525B1ABCBF93F2A" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C68C50D22D91E2119448AF4ED6042198" stRef:documentID="adobe:docid:photoshop:f6eab62f-7678-11e1-82f0-c1042319e464"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! .................................!.......,....U. ......I..x6.j.`(.....'5...p,S......|..6@ ...|.d......(..d<.(.t.3...k..-S.P*...0l..\Rc>........}s\jO!..q.JX.;.C.o6V.Jup..(..`vr.......#.....c.E..c........................d.....o..
<<< skipped >>>
GET /right/homepage/zjsVersion.js?t=24382097 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Wed, 11 May 2016 00:15:13 GMT
ETag: "121-53285ef74c640"
Cache-Control: max-age=600
Expires: Wed, 11 May 2016 00:27:44 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:17:54 GMT
Age: 10
Connection: keep-alive
x-hits: 122
00121..;(function(){$CONFIG["jsVersion"] = {"life":1462846838,"entertain":1462862755,"game":1462523419,"shopping":1462867692,"auto":1440716400,"novel":1439350467,"news":1462925713,"spic":1427879216,"vpic":1462762042,"live":1462784820,"news1":1462925413,"trip":1462862286,"video":1462849150};})();..HTTP/1.1 200 OK..Last-Modified: Wed, 11 May 2016 00:15:13 GMT..ETag: "121-53285ef74c640"..Cache-Control: max-age=600..Expires: Wed, 11 May 2016 00:27:44 GMT..Vary: Accept-Encoding..Content-Type: application/javascript..Transfer-Encoding: chunked..Date: Wed, 11 May 2016 00:17:54 GMT..Age: 10..Connection: keep-alive..x-hits: 122..00121..;(function(){$CONFIG["jsVersion"] = {"life":1462846838,"entertain":1462862755,"game":1462523419,"shopping":1462867692,"auto":1440716400,"novel":1439350467,"news":1462925713,"spic":1427879216,"vpic":1462762042,"live":1462784820,"news1":1462925413,"trip":1462862286,"video":1462849150};})();..0......
GET /css/input_20160503.js?ver=1.0 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Tue, 03 May 2016 07:57:39 GMT
ETag: "2aaa-531eb768422c0"
Cache-Control: max-age=600
Expires: Wed, 11 May 2016 00:18:50 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:17:55 GMT
Age: 545
Connection: keep-alive
x-hits: 9725
002aaa..eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('T.p={\'1e\':$t(\'5v\',$(\'1u\'))[0],\'1g\':\'34\',\'U\':U.2Z(\'p\')?U.2Z(\'p\'):\'0@0@0@1@0@0@0@0@0\',\'46\':r,\'2a\':r,\'2T\':-1,\'O\':0,\'1v\':2R,\'L\':[[{\'f\':\'/3M/P.1w\',\'w\':\'R\',\'i\':\'i/I/3G.G\',\'a\':\'k://Y.y.j/P.1z?V=1c\',\'E\':\'D-8\',\'c\':\'\\14\\3B\\3t\\3p\',\'h\':{\'V\':\'1c\',\'1h\':\'-1\'}}],[{\'f\':\'k://Z.y.j/2p\',\'w\':\'R\',\'i\':\'i/I/4W.G\',\'a\':\'k://Z.y.j\',\'E\':\'D-8\',\'c\':\'\\15\\19\\2h\\1P\'},{\'f\':\'k://Z.M.j/Z\',\'w\':\'X\',\'i\':\'i/I/42.G\',\'a\':\'k://Z.M.j/\',\'E\':\'D-8\',\'c\':\'\\14\\1f\\2h\\1P\'},{\'f\':\'k://Z.16.j/n.q\',\'w\':\'X\',\'i\':\'i/I/3E.G\',\'a\':\'k://Z.16.j\',\'E\':\'D-8\',\'c\':\'2K\\2h\\1P\'}],[{\'f\':\'k://1d.y.j/W\',\'w\':\'1H\',\'i\':\'i/I/3x.G\',\'a\':\'k://1d.y.j\',\'E\':\'D-8\',\'c\':\'\\15\\19\\2B\\2A\'},{\'f\':\'k://1V.M.j/1d.2l\',\'w\':\'X\',\'i\':\'i/I/3S.G\',\'a\':\'k://1V.M.j/\',\'E\':\'D-8\',\'c\':\'\\14\\1f\\2B\\2A\'},\'\'],[{\'f\':\'k://v.y.j/v\',\'w\':\'R\',\'i\':\'i/I/3D.G\',\'a\':\'k://v.y.j\',\'E\':\'2r\',\'c\':\'\\15\\19\\2e\\2y\'},{\'f\':\'\',\'w\':\'26\',\'i\':\'i/I/5y.G\',\'a\':\'k://3C.1F.j/\',\'E\':\'D-8\',\'c\':\'1F\\4h\\2e\',\'h\':{\'4k\':\'0\'}},\'\',{\'f\':\'k://v.M.j/v\',\'w\':\'X\',\'
<<< skipped >>>
GET /images/kz_tmall_20160504.gif HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Wed, 04 May 2016 10:06:24 GMT
ETag: "8f47-5320160cda800"
Cache-Control: max-age=31536000
Expires: Thu, 04 May 2017 10:31:01 GMT
Content-Type: image/gif
Content-Length: 36679
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:55 GMT
Age: 568015
Connection: keep-alive
x-hits: 1347056
GIF89a}....................{..w...................................j....... ...............................v ..........yy..............U.............kk..f.>>......hef..........@@...............#. ....||..........o .y0..`....e..................P.``.pp..p................00.... ....PP...ZWW......>;;...ZWX0--...0-.ust>;<gee...ussLIJLII...............................................................................WW.aa.....W.... ..........LL........L.AA....................`.o ..A.......ww.....a....``....a..66.....J.vv.......~~.uu...............................h........>...........nn......................ll.....l....vv..e.......gg.U......9.e`....00.....t..Z.......dd..........~@...................}6..............P..q.....>.............Q@...................'............@.[....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:67C12B1B10DC11E6A7F8BFA9F48FE796" xmpMM:DocumentID="xmp.did:67C12B1C10DC11E6A7F8BFA9F48FE796"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:67C12B1910DC11E6A7F8BFA9F48FE796" stRef:documentID="xmp.did:67C12B1A10D
<<< skipped >>>
GET /right/homepage/newsChannel_20150831.js?t=1462925413&ver=4.11.3.0 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Wed, 11 May 2016 00:10:08 GMT
ETag: "4a46-53285dd46d800"
Cache-Control: max-age=600
Expires: Wed, 11 May 2016 00:25:14 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:17:56 GMT
Age: 162
Connection: keep-alive
x-hits: 3
004a46..T.newsChannel.init([{"hd":"<a href=\"http:\/\/VVV.2345.com\/newsweek.htm\" name=\"2\" tj=\"yxw_1\">\u65b0\u95fb<span class=\"line\"><\/span><\/a>","bd":"<ul><li><a tj=\"yxw_1_1\" class=\"fred\" href=\"http:\/\/finance.ifeng.com\/a\/20160510\/14375333_0.shtml#_zbs_2345_bd\" title=\"\u4e2d\u65b9\u6d3e3\u519b\u673a3\u519b\u8230\u9a71\u79bb\u7f8e\u519b\u8230\" name=\"2\">\u4e2d\u65b9\u6d3e3\u519b\u673a3\u519b\u8230\u9a71\u79bb\u7f8e\u519b\u8230<\/a><\/li><li><a tj=\"yxw_1_2\" href=\"http:\/\/finance.ifeng.com\/a\/20160511\/14375882_0.shtml#_zbs_2345_bd\" title=\"\u5b98\u5458\u6d3e\u79d1\u957f\u51fa\u56fd\u5e2e\u5973\u513f\u5750\u6708\u5b50\" name=\"2\">\u5b98\u5458\u6d3e\u79d1\u957f\u51fa\u56fd\u5e2e\u5973\u513f\u5750\u6708\u5b50<\/a><\/li><li><a tj=\"yxw_1_3\" href=\"http:\/\/finance.ifeng.com\/a\/20160511\/14376000_0.shtml?_zbs_2345_bd\" title=\"\u6551\u62a4\u8f66\u649e\u6b7b15\u5c81\u5973\u5b69\u9003\u9038(\u56fe)\" name=\"2\">\u6551\u62a4\u8f66\u649e\u6b7b15\u5c81\u5973\u5b69\u9003\u9038(\u56fe)<\/a><\/li><li><a tj=\"yxw_1_4\" href=\"http:\/\/finance.ifeng.com\/a\/20160511\/14375891_0.shtml#_zbs_2345_bd\" title=\"\u5973\u5b50\u770b\u623f \u5760\u5165\u5730\u4e0b\u5ba4\u6454\u65ad\u810a\u690e\" name=\"2\">\u5973\u5b50\u770b\u623f \u5760\u5165\u5730\u4e0b\u5ba4\u6454\u65ad\u810a\u690e<\/a><\/li><li><a tj=\"yxw_1_5\" href=\"http:\/\/news.ifeng.com\/society\/special\/rds
<<< skipped >>>
GET /images/ico_taobao.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Fri, 27 Sep 2013 10:25:50 GMT
ETag: "3be-4e75ae90f2780"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:54 GMT
Content-Type: image/png
Content-Length: 958
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:57 GMT
Age: 29432463
Connection: keep-alive
x-hits: 117313914
.PNG........IHDR.............(-.S....PLTE....i/.m4.J...V....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................Y....tRNS.........SOx....dIDAT..U.A..1..$.,..q.I..n.X.......n.X....d.4..m....yN!.........F|.G.n....`...-....I..YLej.j..1.e..<......K.e....IEND.B`.....
GET /images/mz_ic_tmall2.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Thu, 10 Jul 2014 10:04:51 GMT
ETag: "4fc-4fdd3f4a196c0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:54 GMT
Content-Type: image/png
Content-Length: 1276
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:57 GMT
Age: 29432463
Connection: keep-alive
x-hits: 118197216
.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0480117407206811822AB97ADF869A58" xmpMM:DocumentID="xmp.did:CDF9C3FAFF3E11E3A69CE6CFEC5F358C" xmpMM:InstanceID="xmp.iid:CDF9C3F9FF3E11E3A69CE6CFEC5F358C" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0580117407206811822AB97ADF869A58" stRef:documentID="xmp.did:0480117407206811822AB97ADF869A58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.='Z...*IDATx...Oj.@.._B.e.Rs...7.M....&7p.....7..........&H.........&....0......(..f.'....).X... ._...o?<D....F.X.k!.#...h.l.;.......bMx.J.....k....`p..~}@...k:EK..M&.:..6....2. ..%....=.z...h....w.E...\.J.}]....#.....o.L,....K4.....e...........u]&..Z.k.f.$I>!...Y..=...!Vu.g..qD..A.4M..|.l}....yH..&._...>.....IN....IEND.B`.....
<<< skipped >>>
GET /images/lvy/mz53_160307.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Mon, 07 Mar 2016 09:43:45 GMT
ETag: "735-52d724d013640"
Cache-Control: max-age=31536000
Expires: Tue, 07 Mar 2017 10:00:39 GMT
Content-Type: image/png
Content-Length: 1845
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:58 GMT
Age: 5581039
Connection: keep-alive
x-hits: 24406626
.PNG........IHDR.............(-.S....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:EEDEFD2FDBAB11E58FFAF759B2BB2376" xmpMM:DocumentID="xmp.did:EEDEFD30DBAB11E58FFAF759B2BB2376"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EEDEFD2DDBAB11E58FFAF759B2BB2376" stRef:documentID="xmp.did:EEDEFD2EDBAB11E58FFAF759B2BB2376"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>m.K.....PLTE........G........F..?..F.....>..............>..............B..6.....F..:.E..x#.K.7.`;;;c-...G....)!...0.Q....~^.........2.R/.J..=..E.....D.....=.........0.[.x..b 1.].|.ogOt....>HLO...n.U..F..Cv.o...s.m1.]............Y..t.&..R.0......u........s..,..&........8..@..m.....7.....u....x..K.....0..(..J...............E".E.....B,.Z.....y..G.....u.....B..G.....F........:.....=...`2...m...,.J..............<.}....XY[HGHNf........./.....V.H...h..@..:.....G..<........Q.....G.....e.u#.../.[..-..=.B....7.a..<...W.S...........>..<..D..zb.i.....=................U...v..u..>
<<< skipped >>>
GET /images/lvy/icon_mz62_160329.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Tue, 29 Mar 2016 08:44:27 GMT
ETag: "5ff-52f2c0970b0c0"
Cache-Control: max-age=31536000
Expires: Wed, 29 Mar 2017 09:00:19 GMT
Content-Type: image/png
Content-Length: 1535
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:17:58 GMT
Age: 3683859
Connection: keep-alive
x-hits: 16215561
.PNG........IHDR................a....sRGB.........gAMA......a.....pHYs.......... ......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:302F918F658B11E584BBDD0F24716BFE" xmpMM:DocumentID="xmp.did:302F9190658B11E584BBDD0F24716BFE"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:302F918D658B11E584BBDD0F24716BFE" stRef:documentID="xmp.did:302F918E658B11E584BBDD0F24716BFE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..Y....AIDAT8O.SKh.Q.=o..d.dJcm..?...-tU\t]A,.U..bA7..gQ?.. Aq...........n..f.`..*M...N3If.yo o&5./..y..s/.. ..59rg.k...&.?...IC...4D.B^...z.5..J.>`D.-T.J..)..T....$~.z....P..%G.R..A.0V.:.W...'2{gJ..D'.o.(P....%............X...7.-...........e.8.N.A......].@o.I...-,........*..)(.....L.....A.{c..."..,.'A.b*.)YL..@B...]........@.H6..- ...i....?.R.0ts._.4.$.c...~9fS....v5...{..3...j.t..c....1:..z(/ ....x...W.HL6.D....V....i...Q.17".(..p..j.m.G.p......z70..............H.d..us.6cj....b.Hy.b......Ed.`.b..E.q..T.i.{.....ca.......C....<...K.o..2.
<<< skipped >>>
GET /images/ico_amazon.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Fri, 16 Aug 2013 07:32:51 GMT
ETag: "218-4e40b99166ec0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:54 GMT
Content-Type: image/png
Content-Length: 536
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:00 GMT
Age: 29432466
Connection: keep-alive
x-hits: 116929364
.PNG........IHDR.............(-.S....PLTE......................I...........G..a.....G..H....ZZZ....! ...WWW........g.o............i........... ....{....kkk........x..I.......n... ..........i.........#...ppp.......................^|||..5.....f.c....NNN........9..........,A....LtRNS....................................................................................IDAT.WM.U..0.................|X..F2af..b....>...@...Br E!3..[Q.......%.Z@|}...,.....z...;.l....4.nC.$..vb..L8...yJ.!.|.qM2.Y}g..Y...p@..:......{...Y.....<....@....IEND.B`.....
GET /images/i_tmall.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Tue, 25 Feb 2014 10:06:56 GMT
ETag: "3e8-4f3383f815000"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:54 GMT
Content-Type: image/png
Content-Length: 1000
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:00 GMT
Age: 29432466
Connection: keep-alive
x-hits: 116118124
.PNG........IHDR.............(-.S....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:69815D71833111E38AF6B23008E312F1" xmpMM:DocumentID="xmp.did:69815D72833111E38AF6B23008E312F1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:69815D6F833111E38AF6B23008E312F1" stRef:documentID="xmp.did:69815D70833111E38AF6B23008E312F1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...J....PLTE...............W.......tRNS........S...0IDATx.b`aB.,.L..H..ebF.`.F8.%.. .\... 9..s....0.H_.ye);.....IEND.B`.HTTP/1.1 200 OK..Last-Modified: Tue, 25 Feb 2014 10:06:56 GMT..ETag: "3e8-4f3383f815000"..Cache-Control: max-age=31536000..Expires: Sat, 04 Jun 2016 08:36:54 GMT..Content-Type: image/png..Content-Length: 1000..Accept-Ranges: bytes..Date: Wed, 11 May 2016 00:18:00 GMT..Age: 29432466..Connection: keep-alive..x-hits: 116118124...PNG........IHDR.............(-.S....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTcz
<<< skipped >>>
GET /images/icons/y2x5_150626.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Fri, 26 Jun 2015 10:04:24 GMT
ETag: "8b8-51968dd523a00"
Cache-Control: max-age=31536000
Expires: Sat, 25 Jun 2016 10:23:03 GMT
Content-Type: image/png
Content-Length: 2232
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:01 GMT
Age: 27611698
Connection: keep-alive
x-hits: 112645444
.PNG........IHDR.............(-.S....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:2C320153E7ED11E4BA39BE293C13D554" xmpMM:DocumentID="xmp.did:2C320154E7ED11E4BA39BE293C13D554"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2C320151E7ED11E4BA39BE293C13D554" stRef:documentID="xmp.did:2C320152E7ED11E4BA39BE293C13D554"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....PLTEMB;..%..$4,)*# )#!.....2..p%!%.tJ..2 ......."...C6%.. MD;=..l`a0*$,&.......n15,%.........s...YOI..nVU...;.sz...../......2 ".".@53...:)..uSGGJGCLp]SXKE.hF1 2[JB.vUbQI...hYSq..eMG- ,p.. --.)(..*D:6..wH;=YKJ*2B.fGM:;....eC6*.@0"..iKB<)',l...rn..Z ..mg_....~{.A;d[OH8Dplf...)'%.{j."!u'.J35 #-hg.xl[-$ jaagb.B5'." .kJH;,...KFD...UN\.z^.)%..F{rvn_VK.2QRpzp_.|i%..K==....*&rcLnS7cR<y........q........5,).....r$"&.& o27..(C:6.....[..R.$...P..=..J..Te^V31CWK=..9bTLWH;.2,i\J.jD]TOq_P...b]XB..-..]WUm....?@9<}vsSF;vsrmbZ1&.eTW.....=fUETHD`^^H@D^^.oec1'(LA@IC@kS;hTTLJ....`[.>51XBL64<.
<<< skipped >>>
GET /day_data/20160511.js?ver=1.0 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Tue, 10 May 2016 02:58:01 GMT
ETag: "89-5327417d54040"
Cache-Control: max-age=600
Expires: Wed, 11 May 2016 00:25:51 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Wed, 11 May 2016 00:18:01 GMT
Age: 130
Connection: keep-alive
x-hits: 2454
0089..mystyle.everyday.data = {title: "\u7b11\u8bdd\uff1a\u771f\u662f\u6167\u773c\u8bc6\u73e0", url: "hXXp://day.2345.com/20160510302383.html"}..HTTP/1.1 200 OK..Last-Modified: Tue, 10 May 2016 02:58:01 GMT..ETag: "89-5327417d54040"..Cache-Control: max-age=600..Expires: Wed, 11 May 2016 00:25:51 GMT..Vary: Accept-Encoding..Content-Type: application/javascript..Transfer-Encoding: chunked..Date: Wed, 11 May 2016 00:18:01 GMT..Age: 130..Connection: keep-alive..x-hits: 2454..0089..mystyle.everyday.data = {title: "\u7b11\u8bdd\uff1a\u771f\u662f\u6167\u773c\u8bc6\u73e0", url: "hXXp://day.2345.com/20160510302383.html"}..0..>....
GET /images/index/mod-dot.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0
HTTP/1.1 200 OK
Last-Modified: Thu, 27 Aug 2015 11:51:36 GMT
ETag: "6b4-51e4996dc0200"
Cache-Control: max-age=31536000
Expires: Fri, 26 Aug 2016 14:10:04 GMT
Content-Type: image/png
Content-Length: 1716
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:02 GMT
Age: 22241278
Connection: keep-alive
x-hits: 94698655
.PNG........IHDR.............a.E.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F8B2C6AD4B2611E5B810C0794A4CB90F" xmpMM:InstanceID="xmp.iid:F8B2C6AC4B2611E5B810C0794A4CB90F" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7D868CCB324311E4B53F954A3C1DF708" stRef:documentID="xmp.did:7D868CCC324311E4B53F954A3C1DF708"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........PLTE................................................................................................ !!!"""###$$$%%%&&&'''((()))*** ,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{|||}}}~~~............................................................................................................................................................................................
<<< skipped >>>
GET /images/w_day40.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC
HTTP/1.1 200 OK
Last-Modified: Wed, 04 Sep 2013 01:32:03 GMT
ETag: "163b-4e584c5c04ac0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:54 GMT
Content-Type: image/png
Content-Length: 5691
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:02 GMT
Age: 29432468
Connection: keep-alive
x-hits: 114571596
.PNG........IHDR.....................PLTEooo)......f............O.....U.........................................C......................."R..........z..R...........l.......................<.....N.....N........i........E..H...........D....................{..T........t.............................j..n.............. ...........\..[...:..........B..#.....~..<.............................f}}}../../.....t.......................{................._.....?..o.....N.{......b...X..../.....Y.. .................:.................a...........-.....q.....?.....S....................K.....3...........#..m...........).....O.._..E.....K.._.................t.....O.....n...........3.....R....s..............................).....{..,.....B............../.....l...........J..y.....!..H.....E...........<..............C.......u......tRNS................................................................................................................................................................................................................................................................S..%....IDATx....|.e..k..Xj.....f.&u-....V.E];..e........u..-.... .."cC...6. .F.....t..*..............'...I.r..=..Yz.=.Osm.>.{.{..y.....$.0 ..m......VOQ..<..a.....l...Vl).5....`c...-...v...a....9.....C.*......u......`4..jC..E.?"..>...{..q.=.........^wD2..kp1E..d...z......._@....x..Q.W...I......6d..<l".VV.Y\'F$......Af...6.d.t8.a..Y...N.C{a..a.M....=..FAzS.w.XyAT-...kmc..YH..e..).x.......7%..`.z...=R.]i..G..(......A.0....T^w..5=&@.<
<<< skipped >>>
GET /images/mystyle_wait.gif HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC
HTTP/1.1 200 OK
Last-Modified: Thu, 17 Feb 2011 07:01:58 GMT
ETag: "17d-49c74f9354580"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:36:52 GMT
Content-Type: image/gif
Content-Length: 381
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:03 GMT
Age: 29432470
Connection: keep-alive
x-hits: 117211572
GIF89a.............s.................!..NETSCAPE2.0.....!.......,..........0h.E.0.2.\ ..^...D..e..],.._...U..........F....d..!.......,...........hj..&.PHa....]..!.......,...........XT.F.8...`......!.......,...........XTf4.).j... B.@..!.......,...........hVTJ.(..... ..J..!.......,...........hjE.....`....]..!.......,..............."8.X!e.A.-..!.......,.............f!.).j-.42H.E..;....
GET /images/index/yun-skin-151015.png HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC
HTTP/1.1 200 OK
Last-Modified: Wed, 25 Nov 2015 10:03:10 GMT
ETag: "afb-5255a90ca1380"
Cache-Control: max-age=31536000
Expires: Wed, 30 Nov 2016 08:10:22 GMT
Content-Type: image/png
Content-Length: 2811
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:03 GMT
Age: 13968461
Connection: keep-alive
x-hits: 47440189
.PNG........IHDR...(............g....PLTE.........r.[aaa..uU....e.............................r...........................b.........................................}}}}.h...s.............................................................................jjj.....}.................y..............................z.d......mmm....................................................................|.....................i.....................................u.....m..................................................................qqq........................{.................................................._.....^.............................ttt.............................................................................q.........................................l..................................................}.)......tRNS.@..f....IDATx^..S..k....g.m...m..m...m..m...R.U*.j:.L:....M..< .E!.......x..U......L.q.m=.x..U..^..2....3....>....ez...g...W}t{.....Fc.,.=....b....n..g.o......=[..[.[.......@....GWp.j..`..7........g...C..C.9t.....Y......< ......iIq Q.,.?8.JKa......J...?........ E.{.....&|/..^...Y.<.s23.@.....?..|...2...I........9B6.^.i....Pz....5...RXv.!.>......`.X.....`..#....."....h..{u.?a....ty..j.u'WV.....N.f.....c.....u(.....>...9@..J.J....B..W).......:.X/"V<t....x...c.W...E........#..C..VKu.......:...!..4.$xM.&E...J..?Y.Q.JK..t..*i.W.....X..n.4..O..]G....p....t....f.4.I.u.%..%K.h..3...>}.......IF......Q.v|........eG ...'....*.7.....p..\.f..k.m.%..L..S.........'..n......l.>...}...>n\.d..
<<< skipped >>>
GET /right/homepage/img/block1409031001/tab1/20160505092233.jpg HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC
HTTP/1.1 200 OK
Last-Modified: Thu, 05 May 2016 01:27:36 GMT
ETag: "191b-5320e3f457200"
Cache-Control: max-age=31536000
Expires: Fri, 05 May 2017 01:28:05 GMT
Content-Type: image/jpeg
Content-Length: 6427
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:03 GMT
Age: 514199
Connection: keep-alive
x-hits: 2744179
.....0Exif..II*.......1...............VVV.meitu.com....C....................................................................C.......................................................................N.|...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....4....j..^.t.......b...2p1.Mx..*.}.e....u...R..!{...K.......l....|.....61..N...........?i..j.........}]...nbd..`....z..8.Y'(....u...L...a}yo.wPj67..-..:.\*..GR3.W.I{...&T./2G.4ZO.u..'J.5.][.y.e..\......5.F.U%.Z.......~$x.].. K.J.......PC.R:g...V..;..c..Z.2<%...jq.z....VV.`.ms?...9.s.....)..U6.v.\........,.../.Y....$E...<..g.c8.B2S............H........W3ih...f.....a... .....~....2...j.t...E....AW.9...c..{V..R)...f[W{...j}[.?[v.....y.D.9d.I....}:V...../%..B..?uy.'......X....]2.w..Rv..uV.$..WIO.{.m.G..[....'.j.z....._.fA;..r.u..Tf.u7.......?.....M.Z..cw .E7o.D..J...UjFvZ.... Q......k..Ky.....'... ...T...tV.4......1i.....x...Y.X...wH..L.2.`.k....&...WW.T#.....t.o...P..JWQ...^UXHr.;....n|.*.7J.NsgC......yQ\..d/'.p......#..........7dq..25.d......3.........\TL.v.B.A.E.)..2K.o.{......`....3.rH...<..|V.T\.u......F.s.D......O..%...H`.( ..:.#.....B.......w....x.y.Q.H.
<<< skipped >>>
GET /right/homepage/img/block1409031001/tab1/20160505092249.jpg HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC
HTTP/1.1 200 OK
Last-Modified: Thu, 05 May 2016 01:27:36 GMT
ETag: "1bee-5320e3f457200"
Cache-Control: max-age=31536000
Expires: Fri, 05 May 2017 01:28:05 GMT
Content-Type: image/jpeg
Content-Length: 7150
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:03 GMT
Age: 514199
Connection: keep-alive
x-hits: 2621454
......JFIF.............0Exif..MM.*.......1..............VVV.meitu.com....C....................................................................C.......................................................................N.|...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...Z.g....e...3...Ae!3..,......9Y.....t....B.t.X:......0H.......3XN|.Kr...T......A5...Ap..h..1.=.8..hV.......Zh7.}}..4dF.H......O.....v..rG.:....kH...s$0.dVB......98....99(.....9..S../u.3T.#.......,eH..F.y.r...0OZ.U.ch..8QR...9......Ki....1..-......[..GN1.tQ.EwSveVQ..".F...S...._4....r....J.C%...x*....s&.w....3..^uI..M%.3.x..e.=....s!...t..<O.j6...\...%jQm..n*.9 ]B....._j..u..[kt..'.1...9..U...&..........~S....Z.s.VCQh.?......G.&.&...m....Ye.#<.b.....x.1>.N.]*..J......6..SYh.... m..K...8..^..^..\..#.B..n.X...3t..W.jn.....J.<.#...4....,hJj.?At.F.^..A~_u...%..c..#T....~{.F.....s.p.........Y._.|.`...|1l........3.b....74.....X].]..p....DW...o.C...p......=kV......<....~$|F.i.%....!.....!.. q..qn.e.8.5i.7c...u......3Z....F..S.%...AVPzm........VZ..p...{.....9#MFm.-..".,F.~\..t. 4.et].8o....G. ......I..c..8e...<....Sr.9jG..... I.,..k.t.......
<<< skipped >>>
GET /right/homepage/img/block1409031001/tab1/20160505092311.jpg HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC
HTTP/1.1 200 OK
Last-Modified: Thu, 05 May 2016 01:27:36 GMT
ETag: "1302-5320e3f457200"
Cache-Control: max-age=31536000
Expires: Fri, 05 May 2017 01:28:05 GMT
Content-Type: image/jpeg
Content-Length: 4866
Accept-Ranges: bytes
Date: Wed, 11 May 2016 00:18:04 GMT
Age: 514199
Connection: keep-alive
x-hits: 2549983
......JFIF.....H.H.....0Exif..MM.*.......1..............VVV.meitu.com....C....................................................................C.......................................................................N.|...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.O..............bC.C.s...$........k......r'..\.....cc.......O..-..BI.-mt}M..p.g..E$.2.|.....o.#..1./.|i..O.:....u5....J.].cff$.'.(....X4u-.........g..v..t....O....k..].$~u#h..../.1k..L....8.....i .S..7....V..q*j.D.7...1...9.k.....t<=H..}..2.S...2...w..@......ZBs..OA.......}Y.....},./...~Pjd..w;q....h......(.......tw.cl....d....l.>o/[........2 Xu2..9..*.[.....n..k....FX.l.........`J....k.....1..q.w.....<?ut.p...6..c.8......S..E....o.Clp.O'w......L..Z.h......W....30.......nRp.....L............... ..,.5.Po...|.)%R..._......rH..kU..RWe..|j....Z...&...Q.f.f....,?. ..j9_.....<_..ao.>.:.!.-..&..Go..$.j,.c.`. ..ki.h.e..2...u...P.@..|..1Cj:*K.....&.'.H.R.....<]...$H.(.F...#.3....6.5..[.>r....E.d.|...k..)[S._...xw.Wv...[. ... ...5..wA..dhxWJYn...'R.gp.Z..[...w5.'....Ps..ul.i<).i.L..V....bE.p..#.q.x..8..R2.....I{...]...$..D..r....'>.. .
<<< skipped >>>
GET /t/acookie/acbeacon2.html HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cdn.tanx.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Content-Length: 7077
Connection: keep-alive
Date: Tue, 10 May 2016 23:24:11 GMT
Vary: Accept-Encoding
Cache-Control: max-age=3600,s-maxage=3600
x-oss-object-type: Normal
x-oss-request-id: 57326D9B690D73797A2949D4
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: cache35.l2hk1[0,200-0,H], cache6.l2hk1[0,0], cache1.uk1[0,200-0,H], cache12.uk1[0,0]
Age: 3229
X-Cache: HIT TCP_MEM_HIT dirn:3:499972273
X-Swift-SaveTime: Tue, 10 May 2016 23:31:13 GMT
X-Swift-CacheTime: 3178
Timing-Allow-Origin: *
EagleId: c33b46d414629258800378134e
...........Xko.6..._!..C. ...;J...vg.A.M..7.d....EW.<.D..{HJ.3.....E^.....W...,..........z|....... .pE...cJ....._..-D..[J8...b.R.wY.R.n...4.wJ....x-.C.5a0%..(hM..HII.. ...).......k;..._.....'....Y..wM.V,.x.j..Y....P.\'..X9.fv.%.IW.tS.. i*,...{K.B.0,.~a_h.>k.n.*..0..6.t<=.|.0...>l.O..Y...FO...|m..`{.0.. 5UJ...m......r..sk[n...f...}HC......m.;.5.6.B..yW.UW......bu..".tu.....q.Q.....'..K....w....CLU..T&...S.....5..e.g.'.P.4.A.?.fc.otn.....B-./f.....@../&.Y.-. ......R....c:.Oc..{v.?q......Cd.aC.j.#.d..D....k.4.8.........&....$4h...^(~..m .*hE9..n9.:........~E...}.....A.5...=.......R...^wU..^o..7...8 ......8h.k.s..E...qL.....[....-v u...=...D".l!...6......1...[..q...P...Nvb..GD..S.L..g.$..%...R.A..AK.Y..|...g3...,...~.N!.V.=...P...p..[..Ee....U..I.P..e...C.pb,.s"...(.%..C.C.oN5X...Voev.O.....k%T....V...../\!3j<...18..D...x.m.........@.\.bjU...3X.8.)q....._.......x.#...H.'......N....5.'......\."(.....{m.Xh.h..Y.[V.X...\........f8....U.5m...._f)...u3.!..,...I...-..X.s..]..VW.. ...L[..V.:...d.y..>.Q...dd..m..T$. N.#r"`..s.f.....u....B...K6...g...%.M~.U.u...ki.C....U0UJ....?.}|...VC..1..a,y..4.. ....0...1..dq~d..S.j.. [qj...........[.Hr....wU4X..u_.).%....t....d.3..........k.>...4.h...h....v..4....X........jM..y.r....sp.Q...{a_...)y..J.K..n ..W.~k....RC.=......X..n4v.^.#.......F8.q ......".....l...2L.....Y.....Z.Dt\.KW....VR-...^..$..~R..S..!..O=f..{R2..........a#../;.,tC. .....P/H........T......U...O .8u".4M4...............@....y..*t.'CR........._......a....`_9...-O........F'.%...B.".....O.mq...I..
<<< skipped >>>
GET /tps/i2/TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40.gif HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtms02.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/gif
Content-Length: 1338
Connection: keep-alive
Date: Mon, 21 Sep 2015 12:01:49 GMT
Last-Modified: Tue, 15 Sep 2015 01:08:17 GMT
Expires: Tue, 20 Sep 2016 12:01:49 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
Via: cache3.l2de1[0,200-0,H], cache39.l2de1[1,0], cache12.ru1[0,200-0,H], cache9.ru1[0,0]
Age: 20088973
X-Cache: HIT TCP_MEM_HIT dirn:7:102194305
X-Swift-SaveTime: Thu, 14 Apr 2016 19:59:00 GMT
X-Swift-CacheTime: 13708969
Timing-Allow-Origin: *
EagleId: bcfe56d114629258829453130e
GIF89a$.(................!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:65951bab-2f93-844c-af0e-f21973d795c8" xmpMM:DocumentID="xmp.did:AD021F2E52DB11E58FC2A28910A322D0" xmpMM:InstanceID="xmp.iid:AD021F2D52DB11E58FC2A28910A322D0" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:a13fcda0-9cc0-094b-a0ff-60131945a4c1" stRef:documentID="adobe:docid:photoshop:e4076f7c-5546-11e5-b7ad-fd1b51c20052"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! .................................!.......,....$.(.............Lj..rC.Q 6r....i5..n/.'(..3..;..uB....;r..\K$45m..SZue].-....hcry.8s..u..nc.s6............'.FW.v..&@.8....(.......P...x...f.#GqjP..;..
<<< skipped >>>
GET /t.gif HTTP/1.1
Accept: */*
Referer: hXXp://cdn.tanx.com/t/acookie/acbeacon2.html
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: log.mmstat.com
Connection: Keep-Alive
HTTP/1.1 302 Found
Server: Tengine
Date: Wed, 11 May 2016 00:18:01 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=OWi5D5caaE8CAcLyYNrLinLK; expires=Sat, 09-May-26 00:18:01 GMT; path=/; domain=.mmstat.com
Location: hXXp://pcookie.tanx.com/app.gif?&cna=OWi5D5caaE8CAcLyYNrLinLK
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 302 Found..Server: Tengine..Date: Wed, 11 May 2016 00:18:01 GMT..Content-Type: image/gif..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=OWi5D5caaE8CAcLyYNrLinLK; expires=Sat, 09-May-26 00:18:01 GMT; path=/; domain=.mmstat.com..Location: hXXp://pcookie.tanx.com/app.gif?&cna=OWi5D5caaE8CAcLyYNrLinLK..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Pragma: no-cache..GIF89a.............!.......,...........L..;..
GET /Umid/getDeviceInfo?_cbFunction=fn_UaZfvibD&tokenid=2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs&acookie=OWi5D5caaE8CAcLyYNrLinLK&n=callback HTTP/1.1
Accept: */*
Referer: hXXp://cdn.tanx.com/t/acookie/acbeacon2.html
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: jsonp.aid.alibaba.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Date: Wed, 11 May 2016 00:18:08 GMT
Content-Type: application/javascript
Content-Length: 71
Connection: close
X-Content-Type-Options: nosniff
/**/ typeof fn_UaZfvibD === 'function' && fn_UaZfvibD({"result":true});..
GET /t/tanxssp.js?_v=11 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: atanx.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 27283
Connection: keep-alive
Date: Wed, 11 May 2016 00:01:26 GMT
Vary: Accept-Encoding
Cache-Control: max-age=3600,s-maxage=3600
x-oss-object-type: Normal
x-oss-request-id: 573276564E83D49A7B2DA78A
Access-Control-Allow-Origin: *
X-Source-Scheme: https
Content-Encoding: gzip
Via: cache4.l2de1[1125,200-0,C], cache3.l2de1[889,0], cache4.uk1[0,200-0,H], cache8.uk1[1,0]
Age: 990
X-Cache: HIT TCP_MEM_HIT dirn:5:435754131
X-Swift-SaveTime: Wed, 11 May 2016 00:01:26 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: c33b46d014629258769792969e
...........SQo.0.. ./.M..BS...1UZ..{(.*!...i<%vd;0T....P.*....}....sz...._..8....(...7i.Jj...%..1MnJ...|'H.v.;1A.`0f..5...q.Pqo...,.>3!...).@.w.o..<.w$0v[q.g.4..fRI>................ .....0....8.@.Vk.x.8.tl........p..W..s.".J....O.`...5........]..5.......Qx...`. E.W.....j...\..;..D.a.._...m...J....>.j...h.. .....i1..8f.jN,?......*\.c.f....gR;.KN....r..-.6.b.."..1G.(.3}i..HH....Bi.r.(.6.[)*...:.!......<!(7.8%...O..Rt.Uy=..u.ga....)Y)..........._!Q...]....).qD*A.DT..M..V Q......f.......h. ..i^....../........Zks.F.. .*..a..=.'...z<....8.9.E...h..@..@.*..}....JTj..S@......n....q.)..YL...E2.h.z.@Z......j..n..S.....k.:_.>}p.7g.j..(.`.K.a.....tpJ.3p7..Y...4}.L.....Q._&3..e ....NR8"..L..Z....M....B.....z}3o.G...0......._.a...4.........O...1..gGa.X.(s.A......o...]..]i......yS..>..Tf....*?..b.5`..G....!G...|.R#..k..I.UJ...~[].u^..2..@*.b.Q...EvC.4..'..nJ=...s...%..!v...yD@..M.o.i.n.Cy...|....}...c..Q._.g`.|.....#..]..:ZvG;q..^.X....Ew.F....[..D..,....O..=....?x..Xc.....~..s..<..R!.!B..r....7.....{....U.L..t.u.e..l............%....DE..........6..4.p.q..7.,e.Wt...&.......j.a7]..x..u.S.((......~..:Ih....Q..9o].?ao:...a:...L.p*r@.%.Z......F8.M]cW...)(..b.f...._.....i@.....!.Mc..f../..n..v...L..3.....9-.=.S..AL".3q2..e..054...4.?.w...J..v" ..kB..6r#.x]."..P...Y.w....V..S.o..#D.52..m.....&gB.C .......@K*."..vt7G.B.....@.s\B...Kg.u..`x._....xn6q....H.NR.7._....h.w..."...)..w.............Y..f..P....z...d{>...........2 ..7...4|........8...q......v.'.....6c. ....b....z......#.>>...b..,......`.
<<< skipped >>>
GET /t/tanxssp/privacy.js HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: atanx.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 7224
Connection: keep-alive
Date: Wed, 11 May 2016 00:10:24 GMT
Vary: Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=3600,s-maxage=3600
x-oss-object-type: Normal
x-oss-request-id: 573278707B5FD0258FE7917D
Access-Control-Allow-Origin: *
X-Source-Scheme: https
Via: cache40.l2de1[0,200-0,H], cache22.l2de1[0,0], cache9.uk1[0,200-0,H], cache8.uk1[0,0]
Age: 453
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Wed, 11 May 2016 00:10:30 GMT
X-Swift-CacheTime: 3594
Timing-Allow-Origin: *
EagleId: c33b46d014629258771252982e
/*!2015-04-27 10:16 */KSLITE.declare("tanxssp-privacy",["tanxssp-utils"],function(a,b){var c=['<iframe id="sxbgf{{pid}}" style="width:100%;height:100%;position: absolute;top: 0;left: 0;background: #fff;z-index:200;" frameborder="0" marginwidth="0" marginheight="0" scrolling="no"></iframe><ins id="sxbg{{pid}}" style="text-align:left;display:block;border:none;text-decoration:none;width: 100%; height: 100%; position: absolute; top: 0px; left: 0px; z-index: 300; font-size: 12px; background:url({{bg1}}) no-repeat right bottom;">','<bdo style="display:block;padding:15px;">','<bdo style="display:block;width:80px;height:23px;line-height:23px;font-size:18px;float:left;">\u5df2\u5c4f\u853d\u3002</bdo>','<a href="#undo" style="display:inline-block;*zoom:1;line-height:20px;font-size:14px;color:#336EC9;margin-left:10px;">\u64a4\u9500</a>','<a href="hXXp://tanx.com/web/content.html" target=_blank style="display:inline-block;*zoom:1;line-height:20px;font-size:14px;color:#EF6F30;margin-left:10px;">\u4e86\u89e3\u8be6\u60c5</a>','<bdo style="height:1px;width:100%;display:block;clear:both;">','<bdo style="height:1px;background:#999;width:100%;display:block;font-size:0;">','<bdo style="height:1px;background:#f40;width:20%;display:block;float:left;font-size:0;"> </bdo>',"</bdo>","</bdo>",'<bdo style="font-size:12px; margin-top:10px;display:block;">','<bdo style="font-size:12px;">\u6b64\u63a8\u5e7f\u5185\u5bb9\u6709\u4ec0
<<< skipped >>>
GET /t/tanxclick.js HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: atanx.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 1729
Connection: keep-alive
Date: Tue, 10 May 2016 23:42:55 GMT
Vary: Accept-Encoding
Cache-Control: max-age=3600,s-maxage=3600
x-oss-object-type: Normal
x-oss-request-id: 573271FF7B5FD0258FE085BF
Access-Control-Allow-Origin: *
X-Source-Scheme: https
Content-Encoding: gzip
Via: cache41.l2de1[1243,200-0,C], cache51.l2de1[792,0], cache2.uk1[0,200-0,H], cache8.uk1[0,0]
Age: 2105
X-Cache: HIT TCP_MEM_HIT dirn:1:546891551
X-Swift-SaveTime: Tue, 10 May 2016 23:42:55 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: c33b46d014629258805353441e
..........\SK..0.. !...q^.hU..E../....J...HqX.Y......H.^<..g<.#..`..#7...7 .:...[...*..uE8K..%......o.....fP....k.....i.YI...x...Y.t...."#.R......u..dK..=....J..c.......{J......:>..v....M.!..J0E.>.c}..\O.)..A.m.JMs.9nM[..H.!.X.M...$v......S\.............._:./h..m......eT.A?zRdO..pI.#..%.e...%B..d$...B.#...5......{.JY.t.}.....a.RT!...H..t..$.....gS1.>.d......6'.....^o.......U..{.MV:.$.F......H>_'..,....4}R.M...m.4f:..~....J.G....t..83E...R....$`.<c.v.Z....@t.N4.0#1:....'.....F.,.B...d|...dvl....W...........]k.0...J.......n....6.c..BC.............}.$'QC.........W....?.5.....h*.f2a.~...< .g..*..:...'....]79ob...Du#k0..GC..E.._..;....U.%y......f<..}y..d...5.t:.O..H...../.F6.e...K.%UN5..\8.....Q'y...$....G.#.k...*..g.0:..{.Z.X.....U].?Vw.{.a.../...9.yv(';...sz.."xQ.`I........I...W?.......x./.;./}....]..A/.v.....j&.7...Y......N...?]{..le...7.......!..)BL....../.je)...,y...../.`..Ql.X....,L.......`0..._y^.,...7m..1..0.......;'..!b....9..r..22L..u..KY..YN9.vpB....A.5... .. ...:^'...L.wmx...'...L.B.Jt..l?.a.d.B....0.........o9.............5.......|.K..0........)!U.CXo..h..z...(E............c.d.....3.g..o..,T. u...C..f..R.L#?..W..,..}..v.nW...(.&r...B/...'n...t...I..C.._X..)e.\M.*.'.!....f.C...$.............F..q..\...ne..hOP.)U.c(n....... ...3.........h`.3..v"/......%. =.....r.oN%...B.,.......,S......L.'E....ta..........b..|_..r......`./Gr..s\..)d....yW.. Xk:..C..;DJEq:...........;=.....*Q...0...,....n\w.=..s.,b.,.........-.qR.J...M."Y~e........!jQ.4......()9..18=.n-./(.<!.hU._.h..8I...@..0x
<<< skipped >>>
GET /L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: strip.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html; charset=gb2312
Content-Length: 25054
Connection: keep-alive
Date: Mon, 21 Sep 2015 12:10:20 GMT
Last-Modified: Fri, 18 Sep 2015 06:52:47 GMT
Vary: Accept-Encoding
Cache-Control: max-age=3600, s-maxage=31536000
Content-Encoding: gzip
Via: cache13.l2de1[0,200-0,H], cache38.l2de1[0,0], cache5.uk1[0,200-0,H], cache2.uk1[1,0]
Age: 20088460
X-Cache: HIT TCP_MEM_HIT dirn:4:651711387
X-Swift-SaveTime: Thu, 21 Jan 2016 17:00:43 GMT
X-Swift-CacheTime: 20977777
Timing-Allow-Origin: *
EagleId: c33b46ca14629258800731487e
...........TM..0....0.V...),.j.Vh...$.....d.xI...tw...3N......~.y3....'.?]~.......W..'.r.l.. *e...=n..<..Eh....Y...\u].IcrM.[....Bu*...yh..J6}].....d ..U....Prcl.0)..@m.L.kU|...m....%......tz.K.d.;].X..3.j..N\.j..4.Y..t.7.P..H). ...N.mg,..C.......K.. .a...HTy.;..Y.=_.[.....F..<Q.rS...)...&l.*..*0.... .Qv..9..a9=...V..>b.,...R.@E.O.....;\=....{.1.}81...[....Rr...J\e.._!..!."..Z..'..1.r..B.b.lF.".tb!N..!g.......S.!U...b..bK......w..../_I)..R....n.QFC.yz.8].^`.B<<@....>m"..b.=<\.9r.a2......].j.\......^..X....$w...`b.{..X.Mt."8$na$,.v...xMmh..(...!....-..H...{.G.........H.v...t.....tC..r0.0EFdf.cJ...GF....0..AS.zbDl.......5....V..G..t....cf...yi..;$....{h.9.[._`.........C.K...t.H.|..!.O...)...o.....Y|..#.&....d2..qB..K{K.....:..i...'......YkO...........`'g.m.....Z.......r.L<.{.1.L.)......vB...`{<~..g^..k.....>...W.X.....'..f/.H.\.t............=....Kp....~.%.u..-..O...~:..R,c..._.>MV}.p.......%e'....)8....OJ<..w...R......~.#.j..G.@..'.-.36.=.4.........D...Dv.H..pQ...]r...)._..F .d&t. PFf..E.yF)s..(.4.BM9.'.N<.....eR..u..Ks.w.....6<_........I..o.$..9....o.....]...~.]..sp...~.<9..................=..`............^>S-.J..i.$i$8...z.......I.Yq...UG2..N..r.y.U..9b....|j.......6sg.@Pn........./L5R..`~...b...E .".(.b........*...G..MY.b..k....2....ao..%..7.N.NT....EU.B.e.>.c].e..o...~M.il$..jm.Hr.8...u$.c..lq\)"T......)Z...8G.G1...[.W.wf....P". .b..Y.w.....v..F3....a(..a..G...(..e.u7.T Y....'2..QUy)..=..f\.....Y....r......s`...UB.ki.c.,.....ek..I.B<..t..P..4.&9..)?3....
<<< skipped >>>
GET /bao/uploaded/i1/171640213312141087/TB2bgHEopXXXXbHXXXXXXXXXXXX_!!0-saturn_solar.jpg_220x220.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 33103
Connection: keep-alive
Date: Fri, 06 May 2016 17:56:08 GMT
last-modified: Fri, 06 May 2016 13:44:59 GMT
Expires: Sat, 06 May 2017 17:56:08 GMT
Cache-Control: max-age=31536000
Via: cache33.l2de1[0,200-0,H], cache32.l2de1[0,0], cache3.nl1[0,200-0,H], cache7.nl1[0,0]
Age: 368514
X-Cache: HIT TCP_MEM_HIT dirn:3:433323413
X-Swift-SaveTime: Mon, 09 May 2016 05:46:37 GMT
X-Swift-CacheTime: 31320571
Timing-Allow-Origin: *
EagleId: d5f4b28714629258826631388e
......JFIF.............C....................................................................C.......................................................................................................................L...........................!1.."A.Qa..2q.#...3BRbr...$C......L.D..&5......................................D.........................!1.A."Qaq...2......B..#3Rb..$r.....Ls..............?..8.....DN.....j.xy.?..".6U.n]T.r..U.r..6..yM%.kO..8.|.0t..s.p.S...U.dz .@......T..2.....h..1..Ku;.5....._..A.f...L....D0$..r\XBr...aA|..S.g:c).^k. ...O..d.wm.O..I.~..M/...u..*... tm..*..:b.W...T.....d"L.P.%..!.R..S.#.}...H..H;.{I.(.IJ.C\.^.)...L..W.n.x...Ke..$.......K..d.._]V.r..Z..qR.Q..T.a.i.Q...6...C....q.t?..".v.!.%..my......' .....!^.7.;.yfU...T..2.B.).~..6.'$2T.a|.-.H.s..Pu.W..a.<_.....}..#..9K....Z...v.Q.R.....bly../...4...>.._uj..K...Et...6.<,y..!%........*P...w.x.n.......?5....dv6.!9X..t....u..-.L.^H...>........m.6}.{[..u..(.%........J..:)$..=...#..1....L.#w1...... .h'.M...j..........u..6..T.....u$....h.......>I"'.'..xi.m...6..`S...$.1..4}....K....-......2. ........LB....s.....p...x."...'p-."Z).............FV>d.^E](;.z..w.z;.[.(V}.c.....\.4..bA..m..qg.H.J?A...e..<..dQ..6e....6...m..R....5......g..X.......s.t|S..b?........p...A}..... s....2.?..X}.~..F...T.w.S.{D..B6v#*&.\....7..m.W....n..)K..]..Jl.|0. ..{.@.q...#..S0d..X..u...~.{.A<)..\..M.{...G..v..njm..B....j..S=..A&;.!n...Z.2RG,..[.B.. .....Z....$.}..ar..q....c.2i.U.5:.....Z{........S.Q"...x.y...[m..T.....:.N..B..H.\.`5$..d...<.Z
<<< skipped >>>
GET /bao/uploaded/i2/103750179980305906/TB2UPnKlFXXXXXAXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 24286
Connection: keep-alive
Date: Thu, 24 Mar 2016 21:39:23 GMT
last-modified: Mon, 14 Mar 2016 08:34:55 GMT
Expires: Fri, 24 Mar 2017 21:39:23 GMT
Cache-Control: max-age=31536000
Via: cache28.l2de1[0,200-0,H], cache1.l2de1[0,0], cache2.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 4070319
X-Cache: HIT TCP_MEM_HIT dirn:3:728341778
X-Swift-SaveTime: Sat, 26 Mar 2016 12:11:37 GMT
X-Swift-CacheTime: 31397266
Timing-Allow-Origin: *
EagleId: d5f4b28714629258828391398e
......JFIF.............C....................................................................C.......................................................................................................................A......................!...1.AQ.."2aq.B...#..R.....b....3$4r.%5...................................=......................!..1AQ..aq.".....2....B..Rb#.3r$%S...............?...Z.F..M.N..$.q.I>......p. .bp.Z.<B.IB...#Q.O;{...'&aI'X....?5....Z.. .%HZ.@&T..J.....9@..CX...t..A..w..[IA.@\..@.`A.. M.ju............T6.M8..V...|H.E......\..f.Ftg)..........}@..(YI`1...h...L.4c.ml*.X.&E......lb....;.zR..5.|.=St.!Z{.3.:.....i..$<."..Wx..V..r.`.....^1......4.?....O'...;k.p..iBt..i"d.bb./\4... L...R....k.C....I....I.b0..3xpJC.....P.SN...h........78m..$.]....!yy.}X.)C.X!@..&.c...*.p.zC.H..=?1..%.k.I.A..F.7.n.......(r.?(a.y...L......y..5.(e.(p.._.....6..t1...9.........b..e.N..6.I....H1.|.t.r...V..^*8z.C."m.b$II\......NP...,..E]Ca...P@!..*..\\..c.../7.M2.:,.......I.A..S...W.@\.&ZT..r...k.....(J[CZt.E..H.6.O.(......9XMC(.X7.......i..2....=........P.......r.:fR.....<...].....!.h}...)N.k. .ZV...((..7.m....$..[...)...p=>...B..H..M...F.}..zz`........bo*.....N8.*.... H! .n^o..a.oC..r.7_..Q........?.$D.M....w.G&...}bS|QSN.;.4.;...c.........v8.(ZV..@....G3.....F-.#>....y.....3P./.B...'......8.03-C,3.. ..U.JR....(o..8..%.}.H...".Cu.t...e...(..r5...#8......|.E......]Ur.*.....B..r....R...f0.MOv...u..jK$...A....nX..| ...m.W.=.f..QHZu.E.E......H...?...m.....2l,).T.>i6.?......-.z@..3......b......an.H.....Z...|-m..d
<<< skipped >>>
GET /bao/uploaded/i4/19897056328747180/TB2R4aCaVXXXXXmXpXXXXXXXXXX_!!28659897-0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 9776
Connection: keep-alive
Date: Thu, 23 Jul 2015 16:23:48 GMT
Last-Modified: Mon, 27 Oct 2014 13:38:01 GMT
Expires: Sun, 20 Jul 2025 16:23:48 GMT
Cache-Control: max-age=315360000
Via: cache40.l2de1[0,200-0,H], cache23.l2de1[1,0], cache4.nl1[0,200-0,H], cache7.nl1[0,0]
Age: 25257254
X-Cache: HIT TCP_MEM_HIT dirn:3:552134721
X-Swift-SaveTime: Thu, 23 Jul 2015 18:33:32 GMT
X-Swift-CacheTime: 315352216
Timing-Allow-Origin: *
EagleId: d5f4b28714629258829501403e
......JFIF.....,.,.....C....................................................................C............................................................................".........................................O...........................!1.."AQ.aq...2...#3BRbr..C..$.......FGSTVdst.......................................5.........................!1A.."aQq..2b..R......BS..............?..xk..5...y........j ..JTS.vrI..{..6.....k..\.(S..-...e9 -.m.$.m....&.|G.?.......I.}.........!....S.;...`.2...J........X:._...#...]...Zd......\...N...$...'...........r...a.=.cH.$n...Z.<....W.i.H..p.e.;.%.c....v.v.....I._...i.m.N...# .R...F.....).L..Iz.[?P11.);....`m.6.....}<.J8..I.wK..;...B.p.....:......l...6..rT............6.....3....Cm).AYp-IJ....@.]G*..].E...P....C.../....|}...........#..[.}4..ms..F...k.bS.....wSZ,.j....!\.:.......}.%#..hQc....gi.*...gQ..[z.s....T..K..7|.........p...R..UD.1.$ih.\.D.Ci..4.j...[...`)$I$....`.3.3Sq7_ L..F.....J.n...W.P.. .T;...ui..d.C.I...89.:.qN......-.....r.....n....{t...'p.S_.<..........r.$"; -...........R....I).].N. F=..j..Z...lt6..|:. t..x.#. ..y...[_........l0..O..e.<.A....{..s..\yJ.2....`...9.M..7G...L...}~3.R.....%...7 !..Rw.B..N ^H...&...=y.....<8B<.....gtc.M?-...pz.O.A..n..v...W..rn.SIB.K~../..x3.v....ub>...f."............h..P^........l.....".......b.e.....8.@J[....Vjv.4f*.q....-.`.rrr.$...].1.nd;A.......k...L.|7...k.<.......^.yae..}U... ....(.."(.."(.."(.."(.."(..".|.e.<#.....K...(d(.V."...>..^.z............y..)]..m.AE..}<.v:.`(..U..vs......mKo.....D.....
<<< skipped >>>
GET /bao/uploaded/i4/138420213725124971/TB2ezzLopXXXXcMXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 27000
Connection: keep-alive
Date: Tue, 10 May 2016 04:49:03 GMT
last-modified: Sat, 07 May 2016 05:12:04 GMT
Expires: Wed, 10 May 2017 04:49:03 GMT
Cache-Control: max-age=31536000
Via: cache21.l2de1[0,200-0,H], cache41.l2de1[0,0], cache1.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 70140
X-Cache: HIT TCP_MEM_HIT dirn:6:102375161
X-Swift-SaveTime: Tue, 10 May 2016 09:30:22 GMT
X-Swift-CacheTime: 31519121
Timing-Allow-Origin: *
EagleId: d5f4b28714629258831141416e
......JFIF.....H.H.....C....................................................................C........................................................................................................................S.........................!...1.A..."Qaq2.....#..$BR....&'3C.ESbrt..7DEGTcdes.....................................I........................!..1."AQ..aq..2......#3S...BCDRr.$4b........Ts.............?..D.....eOg!8.3...w.Jjh....1:.K........Yj|.S..4...-"9.]..j.E..Z..:.T..N{.B..z.u9HR.......}.P/.I.,.{.9....'Ly..;..P.b;..u...U.........N....<)K.k.GS.|.i\...u....*.L..H.....j..}*.Sh.e,..u..l.hu..U.x.....p.$^.Le p.2N..<..,.u.*jZ.rJRNP..o.....*.^_...*..@.$.N........cJd.'#...1.<.R.4....O.26....(..El .....-...#..2.E)...^T.x9....xR. .5-L....J.*q]....t..~...C8BI...;.o>..->8!..6....p..1.)..rF.~.v.)I......R....N..m...(..$Ia...x^.@S..(.....8R.T...q..};.....J*..q..._....p.....c...)C...($..r..W.....*Ac.Deu..........J..H. ........J.J>._..p.]...A.~.....><)]....%kU.......YZ.3.;o]....Wn.].UfG/..j...5..&%.M.Uz.;X/..*.Hl8......Hn.....f.n..i9....F....2..[..{..t...h...k.^....W.HL".H.3.Jq.Ya.X..!H...T...Na..)J.Uyz.-..H.OR ...E})........fj*wI......[L.*P.....q.:{]...:=v.w.,....JkJ..]y2a.e....2..B....m*q..4.D...........P$..@......F..L..-...t..?.}xR..R..>Z{d..A.}..p.....r..I'm.......)W.k.$H.,W..q8.1..F.....J..MD.K..V..I.......)G.,.3.-:.WP.*...{.p...m.........Gd.....)R.sc)IFF~.....M>.........BR.I.....}.)K.Y.Y ..* $.|...s..w....z\@)P...8R..6..J...h..$.6.G..)P#..2.......J.zTx...I'......xR...f....3...=....
<<< skipped >>>
GET /bao/uploaded/i4/16562077679543870/TB263C9cpXXXXXBXXXXXXXXXXXX_!!30796562-0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 14167
Connection: keep-alive
Date: Sat, 07 May 2016 15:36:09 GMT
last-modified: Wed, 15 Apr 2015 05:49:51 GMT
Expires: Sun, 07 May 2017 15:36:09 GMT
Cache-Control: max-age=31536000
Via: cache1.l2de1[0,200-0,H], cache2.l2de1[1,0], cache6.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 290518
X-Cache: HIT TCP_HIT dirn:10:827409375
X-Swift-SaveTime: Sat, 07 May 2016 18:53:32 GMT
X-Swift-CacheTime: 31524157
Timing-Allow-Origin: *
EagleId: d5f4b28714629258876291698e
......JFIF.............C....................................................................C......................................................................................................................A..........................!1."AQ..aq.2..B..#Rbr........$3...%....................................?........................!1..AQ."aq.....2...#BR..br...3.$%s...............?...)...h..........w(".....'2.......QfP9M..].Gv.Q.....-.....D...3P.-:... .L.F..^.A.B%...IypJ4...!......I.H.5.~@)U.....K.HL.'\...{Dz.4..%O....d..4..a.e...O:7 .7..5/...][...e.. ir...J....`.M.B}W....Z...C....~...|7wD!F...y*.@..M..(...U}t.w.....N_....Ps'.$..S.%..Z..O..2F!bNQ...Y....%$...:.QE.:......!.H....1(....V..@M.g...l~X.*...|1;..........zP,.......%..:.T. ....!B..Sn...BV[.=S#..U.h..9..n.9...([.....>eFen....kA.0... %....e.)4.6.E...&..........^..V.li..P.T...bO.#........KY........L..PF.$]?.. ...3.....-Gd.\....H{.Lo8.W.../...En.:....HT.@T... .....6....s.X5q.v...`...G...,.W.\-.=n......j..)>.x.~..-!W..9..T....)7J~......wmh....?.....s.W~....h.........#.. N...........m ...h...*....q.E.?....S..F.m.../.O.c..2..G..5K......z....I...=.,.8....4..r...:D.C ..Rhmf...@.j..K.p.../5.|K.F...X.....p.^q.f_Ot....,...hu3#.."....N...:kGg........jA.....a....,.~...$C..f.,.E .o...0p......7..T".D^P..I&...(.`.{C......^.RuG..Z.zay.mKWd........KaW.........o...0......y.*\pj..~............u7...2..*P..."..o...D.N....M.&.%.E. (./.......'B....H.R....[.).%.h......h.(.'..3R...\...mN..t....N.....]......_.`.F.'....)j.j.........bI......)[Ax%.F.S.N@y..f-.3..:..g.i0j.].....
<<< skipped >>>
GET /bao/uploaded/i1/123460167207656772/TB2iBsPkXXXXXcTXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 26974
Connection: keep-alive
Date: Fri, 19 Feb 2016 04:34:54 GMT
last-modified: Tue, 16 Feb 2016 13:09:15 GMT
Expires: Sat, 18 Feb 2017 04:34:54 GMT
Cache-Control: max-age=31536000
Via: cache39.l2de1[0,200-0,H], cache18.l2de1[0,0], cache6.nl1[0,200-0,H], cache7.nl1[0,0]
Age: 7069393
X-Cache: HIT TCP_MEM_HIT dirn:3:782333018
X-Swift-SaveTime: Fri, 19 Feb 2016 05:14:48 GMT
X-Swift-CacheTime: 31533606
Timing-Allow-Origin: *
EagleId: d5f4b28714629258877001703e
......JFIF.....,.,.....C....................................................................C........................................................................................................................D..............................!1."A.2Qaq..#.......$3Cr..Rb.KE......................................B........................!..1..AQa"q.....2B..#......R3br.$.CDSc..............?.....JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ. ..W......{..O..R...iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.).ow].&t.c2.u......1.S..Kv.......M./.I6..p...}.[T1^...Q.[..L.....c._.=..2D.....-.$..".-...1Q8".M[.k..w.>3...*...-a.......y...4..>>...U".6.@.%E.;....9N./.0.......?MM...S.s..T..h.0...3M..;.......nh...N.bE..!..b6....x..~.1...>.C.g......i.3...1m..^.[..x. ...#..........}x..*.qa.G..........c .Q.....7X.{~!..]o....cd....4.q=..n....(wcV9|...i1......qU{.Tq.4..F%H.. .#....z..n....H..:..=cd.t9.2J..o6...T...!a)q.N...\.z..(.......NO..@........K..u...D..7....m....?rRLdPy.W...n<Y..c...q."'...p.o]..{...m'Q...1.E..rc...B...`O..6Gz._.....b.J./.....F..&...~..c..7.<E.x#..ae2*....2'u&......W....4J|.o..sS....r.v`..k..Q...id22a.......<.F......n....H...H..Y.;.x...r.|H...._`....m....V].J.R9...<.s.`.3..*..O.,R....`.|k........n.^..q...C}*4.....tn.;.vb.8^X..p.#.o.9.......&..$>.G..{C.c..g~Rpq.u....iR]i<c<7...R...1..4.."'......".T.EI.".k...>P..Q....S.....,..........yx..\/Mg#..&O.....'>8....n|..#...;V..2Kc<.RF.h......X.v..E..(...W.n..:....<u....57.U...D..yP,!..y..(..(M.|.<.9Km{H.N...a.
<<< skipped >>>
GET /bao/uploaded/i1/177580166231838167/TB2VCyIkXXXXXblXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 5755
Connection: keep-alive
Date: Mon, 08 Feb 2016 09:41:26 GMT
last-modified: Fri, 05 Feb 2016 05:19:49 GMT
Expires: Tue, 07 Feb 2017 09:41:26 GMT
Cache-Control: max-age=31536000
Via: cache18.l2de1[0,200-0,H], cache52.l2de1[0,0], cache7.nl1[0,200-0,H], cache7.nl1[0,0]
Age: 8001401
X-Cache: HIT TCP_MEM_HIT dirn:2:429714739
X-Swift-SaveTime: Fri, 11 Mar 2016 00:19:48 GMT
X-Swift-CacheTime: 28804898
Timing-Allow-Origin: *
EagleId: d5f4b28714629258877691705e
......JFIF.....`.`.....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................F.........................!..1A."Qaq...#2..Rb.....3BS.C....rs..$%t.....................................................1.!Q.A............?...#.d........8..5F..D..`..]{k .].z......F...Oj.(@[.A{../l..W.B=.@.ob.Q...@.U..R.Y.$.,. "8[...e.:...B-..Y.........;,.........i..Y..LKi1....E...IL..&....6E.............#..v...F :a.jbA..)......8.0.~....2.....{.....0l. Q.p.....)*C^;...t.....c.m....e."..5.O.:?.A.._.....U4...;..n....{.Rc.p.^Q....5.........-^...?....;....c...'....-L."8.q<.XO....l..gK.p.E..7.O ..d..F............fnf.V..b-...va8.7...:{.....0.....be..)a......P......}...y>L..e....7Y.J&....K.>.K.&.C5uL..-.......&..G....:.......V..S|_..0{....)...iCM.m.a.V.......5.P.*..... K.T.m;..y....(s.&\..:.....LV...........I.C.M.t...x..n:z..3.8.......X./...8...`...........p........./..... ...b..>.....<8..u_..=.9V.x..L..pkK.m...[.S.-..V.F%..RoK[...vW...0.z....(.;..$...-.-H.......)).$r.XI....u..k..HD...d..w].....v.......P5..s....I..as`.;.(.eh.X.7!.nn4?0.........3QTS...6V...)r....71.. .m..e=b...hA. ..?..lU..j7.`&?&=....R)......yC@.h.'......}.5.:F.`.6g.c_..;O....o...."...s. ....\v.|=.9.S.j.s}y.\(.....j....u...\._...E..X.\P...cd7...j...-....c#.{.P..X.l.'SM..y.w...M.n....i.. `i=..@.Ko^..G.B.Q1.....*:.UR.qf .....Z;...}l..w[Y#t$g-.U.Vw.l..b,N..Z.....T.M6w{......QD...[..2k&..de....z....,h.xTt............X[.:.y..Ad..?tsK.]O
<<< skipped >>>
GET /bao/uploaded/i4/178000163688726194/TB2rvNBjVXXXXX4XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 9971
Connection: keep-alive
Date: Mon, 25 Jan 2016 00:37:54 GMT
last-modified: Wed, 20 Jan 2016 02:18:00 GMT
Expires: Tue, 24 Jan 2017 00:37:54 GMT
Cache-Control: max-age=31536000
Via: cache51.l2de1[0,200-0,H], cache26.l2de1[0,0], cache3.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 9243613
X-Cache: HIT TCP_MEM_HIT dirn:8:304571194
X-Swift-SaveTime: Mon, 25 Jan 2016 01:47:27 GMT
X-Swift-CacheTime: 31531827
Timing-Allow-Origin: *
EagleId: d5f4b28714629258878331709e
......JFIF.....`.`.....C....................................................................C............................................................................"..........................................P..........................!.1.AQ..."aq....2..#R......;....$4Sbs.....&6Ct...................................5........................!1."Qa.23Aq....B....R..#$..............?..:(..B.(.....h..#...].......Xq.V........H. rx..^.....:.n................j{.a....%N........-....p..[......j.} .......V...v....o..ZK.....n........Bq..`%.FK.N...wns.,.U\.0SS...'.......i...Sf....w.=.....(.WZ..]D........'.-...3..%..j...=K..%.G......Z.Ma...*.K....>.]H...O...9....[....1........?.(.['=6.a.U.'...1..O..{....0.l......O..^.F.s........R=.z.)qni..J.VB\xd..MoI..J^..S..A.....Y.y....U.......NH.4[[...p<9.."...OS..q..?Rx.s.U..mN..p..In......b..zrS............[.....rJ]k...F..JJ....#............6..58.B.-....S....6.Y.J..m.....d...._l.....2.....}..R..y4uq.aE.Td.E.Q.QE.B.QE....>. Hh.s.9twr}p.....$..]I. ..q.n.ESl....B.Y.K*Z..c.....I.y.. ...&J.L5ryKp.BG.2x.........o\m.q.]$.N.....G..l.S...13.....h..z5.a.....9wB?.R.G..h8.....-..z...._....J.......<....qQ..YH...ZI.q.......JO.....*:wf....UV...=..]....de......$..%(...(..g5;..y..Di.jk.r......*W.....5..R.Y^j..."..5..!....JT... ..>.....a.$..F.\...IR..e..!..%.$'rJU....Zn....b:~.....>W......s5).U...=......?.w ..#.%K....E&..(w.......~.Z...(.=..#.i........l.c...w.R........w].,..............T.E....'FX.K.?.Y.s....eG.8...zE.0.Z?.UO..H..mms..z.q..G.[.V...!y. .2.H......R........s.....o....
<<< skipped >>>
GET /bao/uploaded/i3/186670170379626011/TB2aUepkFXXXXaRXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 42329
Connection: keep-alive
Date: Sat, 27 Feb 2016 20:32:05 GMT
last-modified: Thu, 25 Feb 2016 07:03:52 GMT
Expires: Sun, 26 Feb 2017 20:32:05 GMT
Cache-Control: max-age=31536000
Via: cache24.l2de1[0,200-0,H], cache54.l2de1[0,0], cache10.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 6320762
X-Cache: HIT TCP_MEM_HIT dirn:7:418161310
X-Swift-SaveTime: Sat, 27 Feb 2016 20:36:00 GMT
X-Swift-CacheTime: 31535765
Timing-Allow-Origin: *
EagleId: d5f4b28714629258878961711e
......JFIF.....`.`.....C....................................................................C............................................................................"...........................................3...............................!.."1.A$#%2.3BQRa...................................4..........................!."1.2A..#QaqB.$R.3Tbr..............?.....9....H.=%.VTv.?..-...G.u.-S.\.,).bY....ie........@..5..y..-.L..UJ...\....v.....p..@r........O....vF...../.W*...3..SeT.p~..>...~m..)}.. ....s.V.n...fl..5...t..I.I.*.R..I..R..#..hMx.M..C..G.....e.U..6...:z.(......T......N..BW..i...t..y{.....2;_C.Xcy%f#CR...t-..V......e.y.....>E.G.U{i.u.. .e.g.3rg...;E..S..[];...R..b.....rWx.kh.g.M&.8`.,.TDN.{XG.........(....)]od.J.7`.....`..... K.x.x.O.'.1MR_.. k...:U...3.49...y..[-Z#...........<n.......w...>/ASe....Q....M......'E....*]aS..m...B......9.@.6......W.|...z.R.Z._;...?.....v...w.,.).7..>........i...|....#U...xV...k.X.EFOq....A.A........b.]^....-.g..].U...h..&.....B..._.....l.....%.i.hi..(..y...j...I8.:^%.-.Uxj...I.{.9.:....a.4....4,..X.q,DD.v;..s.5C!\.vThd.M{..|.#U.... .R..>...../.>4.P..u.......6.....OK.o.........6BlH.......%..;..2.q.rNg.5v...y......$]a..e..[..R]...Bt..Z.v.....D.S..`...u2C]..l.....^.w.k`UU....u...EM.s=..O.....)...J..... ....b.-..?..*U..M.s......_.M.;`...9..u.P.)6.... Z..`...z/...*.'.L.s.n.N]BY..&.e.....s.m..........Y,._.R..*.K..q......}.Nv.sW..G.....9~D..,.Mfi..{Ld....1..q.(. g8f1.m.d.C".p....|j.=\..........w.{.........lh.X?..q..3-i,../...q..{.....[....?W*w..2.....{......b
<<< skipped >>>
GET /bao/uploaded/i1/192730199314517441/TB2L7nanXXXXXcpXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 4870
Connection: keep-alive
Date: Fri, 15 Apr 2016 06:06:43 GMT
last-modified: Fri, 15 Apr 2016 02:27:17 GMT
Expires: Sat, 15 Apr 2017 06:06:43 GMT
Cache-Control: max-age=31536000
Via: cache17.l2de1[0,200-0,H], cache50.l2de1[0,0], cache6.nl1[0,200-0,H], cache7.nl1[0,0]
Age: 2225484
X-Cache: HIT TCP_MEM_HIT dirn:9:599670802
X-Swift-SaveTime: Fri, 15 Apr 2016 08:37:12 GMT
X-Swift-CacheTime: 31526971
Timing-Allow-Origin: *
EagleId: d5f4b28714629258880181716e
......JFIF.....`.`.....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."............................................................................5.0.....E..@.FjD$.D`..H...M.D..>oh.R..*$.$..l..V.EN%............'...#.0D..$$;`1.inRRdy..xE..ql..........0C.."4$.. ..........v........L..@.0..a.$...h../U..9........hh.@...\Tlj.....~;.T....$=zX.k....q.......6i^.dB/...:.]a..q...b[../G......}J#.B....a.~.r.j.2:zy.3.....uE1.....M.......X...sJ|]Q0U......Y.....R..~4.a.Dz.....>C.Y.3.*.\}.bS...v...~5VoG....Fv.p.....e(.......$..$.M.`X.....@.............. ........................... @.!"0.#$123AP.........................$0.u)..LE].x......JZ.n.F8....O.;.-N.;t6r.....Sg.,A...!.}...<..P........g$.._d 4v2..f.).7.|.)....BN..Z.\......6C .......:oW.y...........*j.u.H.?.......z......t..}..2.m......z&.*...8...,...o r...vQ..Z..h}...M>..M.Kl.%n....../.j..o..s.....%*Q..".wO.......|Si..hE......k.........R.Jhc.q...w.....*...H...) r9-wy.fQ.......U.XU.[a.......;.7.e.........Z.YR..c3....Q6NNR...E..". \I.9..9......(.........t...s\m..6..........U..-........b4hk..D..).i.....\2......*...WB.2..=.{V..S.......................... ..0@`........?........^.B.p....1:.1EW......................... ....1@`........?...e.T=..5T......$H.d..>....5......................!."12@AQ. 03BRaq.....#..`r...........?...9...gx....].....2e.U.P.V.t.\t...\V#..<..{.{.b....h\ .bw'4j..z.|..'.......nm.<%....;.......i.:.g-........p6;.-.n`...]...U..e..C..O...:!tt.\}S.
<<< skipped >>>
GET /bao/uploaded/i4/113190196075680595/TB2VcJYmVXXXXaFXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 2761
Connection: keep-alive
Date: Tue, 19 Apr 2016 13:39:03 GMT
last-modified: Sun, 10 Apr 2016 04:02:26 GMT
Expires: Wed, 19 Apr 2017 13:39:03 GMT
Cache-Control: max-age=31536000
Via: cache16.l2de1[0,200-0,H], cache42.l2de1[0,0], cache8.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 1852745
X-Cache: HIT TCP_HIT dirn:6:43019369
X-Swift-SaveTime: Sat, 30 Apr 2016 00:00:12 GMT
X-Swift-CacheTime: 30634731
Timing-Allow-Origin: *
EagleId: d5f4b28714629258880801721e
......JFIF.....H.H.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......?...."........................................F.......................!..1A..2Qq.."a....#BR...$3Sr.%b...CDETcs...................................#.......................1A...!"2aQ............?.f.w.....sC.j.Ms..T]..pNj..1*..s4.......<qg.f....|.&..f(.....<.i.N_T....p8.S..*J.......1.d...VM.Nv..=.?.....t...>...v..y._...{y.m.O.E_.g..m.'kk]..H.)...........j......2~....fo..{...<..!4x.r..w..$..aS....h.....dc...5....K.\..M..A....*.u......[..._...... ...<....EG......Y.'.j.u?J..K.....ys...*.q...G.Y...>..l...^g.H...x1.rm..... .3..,..-.hr>.. .._....b......1.h..e....h............G...\i..m...........)C.5.i.....6....}u..^....Sg<(9.g.E.}m}.Ym*.......M-....;DR...s.p...PG.....p;....g....oG....F......#Q..FQ....6..9..x.O.....tU...{.*..|.o..D...n..8U.m....\.$..>< ..[....5..'..P...'...J...yq.4.#<.Dm..>.r.....iu.|.bvm.<...]z49.(....T-4.#.UcP|.Q.m.....|.5e...a-Y>G.2=.>Q........S"t....-f......!.7Ee.Uk#......nR.B..>.>......t.o...M9.;i..$..G.}Y.L:>R6....T/V....x.........E...>.....F........c ........U..'.B..[:.p..$.J......O.....4.....}.<"4.'..f..Q&O..T..\....5.N.Y.n.....US#$*>.?.>UKl...5...f......Nn..P.mK....C...... ...JB.&3.....".{0>..k...b..aH........-$-#...=.4...*.D.......1P..0........z=....V.f...R..1.'>.u.=.......f*.2..W...Z&.t tK..O}..Z....}3.}.....?5.....a... ..s8..Y..&.....c&.Ny.4.....m2...S..#..Xm
<<< skipped >>>
GET /bao/uploaded/i2/129270176894498732/TB2wKl8lpXXXXX1XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 23527
Connection: keep-alive
Date: Fri, 11 Mar 2016 00:51:46 GMT
last-modified: Tue, 08 Mar 2016 13:28:12 GMT
Expires: Sat, 11 Mar 2017 00:51:46 GMT
Cache-Control: max-age=31536000
Via: cache64.l2de1[0,200-0,H], cache38.l2de1[0,0], cache3.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 5268386
X-Cache: HIT TCP_MEM_HIT dirn:7:842995175
X-Swift-SaveTime: Fri, 11 Mar 2016 01:12:01 GMT
X-Swift-CacheTime: 31534785
Timing-Allow-Origin: *
EagleId: d5f4b28714629258927391978e
......JFIF.....H.H.....C....................................................................C.......................................................................................................................N...........................!.1."AQ.aq..2.#BR...3br.....cd...$4C.%'5GSTet......................................J........................!1..AQ.."aq..2....BR.....#3Sbr...C.......$4T.Us.............?..9.W..>a.Ji U...#..l,.3..{".F.@.Qr....Z.$.rw.-..p.'.....uQ.=?/2..R.|....1..WI.lL..d>..=H~...... Dt.w.......0..t......~....=....6.....Pz....X*..ez.XK.RqJA.g......)^P@..N.=.....{F.i...n.}.....6..'..h............$.....H...m...Q4.....j...............'......)a=....X.X..$X.@}q.g......o!..E...JE..x........-....?..F.twK.T..#...I~K..d\_m.`.<..{I6#X..h..G..5...[)i.@..|U...im.W............}.....).'t4.........O..........'..x....ss.2........<%.9../.....g.n.......#.......O.}..3<5$.l;....<.|!._.O.^/3....m...B?..x!....B...p..tN?.......T...}.....}...lK....G?.......T....P..G...I..]j9.,.u<>.^...-.R.o...&.G .i...XQ$H.uA.....~XoQR.x..9..N..._ .F....CL@...:.N...].. .t..CYR...9..O...Yp.@k..P....S.=...a..<.t.......&..."..1....u....r&......g:..-...^B.....K3......10..w....;....p......S#8fEM.P.*u.mJ..p.L....a...8........Y..b.m......Wk@*.Z.A..*..w..........R...5-Dqc..]e....#...o.p.8|>.}.^....e.Jv....s..#...b.....p..j.....7...Z..p.u.\ *...wm.....SB........C.0.@uO#......w.t...G.....eN.X.1.....R.Ze..:....JR.J...CR..aa,......[T....X.{..<i....._r.K..M.io.....%.......% .I<..8..?....~;L.j.......3...L.....;..
<<< skipped >>>
GET /bao/uploaded/i4/115490177260777840/TB2spqnlpXXXXalXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 20573
Connection: keep-alive
Date: Wed, 27 Apr 2016 15:50:32 GMT
last-modified: Wed, 09 Mar 2016 07:49:39 GMT
Expires: Thu, 27 Apr 2017 15:50:32 GMT
Cache-Control: max-age=31536000
Via: cache43.l2de1[0,200-0,H], cache5.l2de1[0,0], cache2.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 1153660
X-Cache: HIT TCP_MEM_HIT dirn:5:214836914
X-Swift-SaveTime: Tue, 10 May 2016 05:44:43 GMT
X-Swift-CacheTime: 30449149
Timing-Allow-Origin: *
EagleId: d5f4b28714629258928091983e
......JFIF.............C....................................................................C........................................................................................................................C...........................!..1"A..Qa#2q.B......3R.$Cb..4r...%Ss..................................?......................!..1.AQ..."aq....2.....#BRr......CSb...............?.....y...W...^IV..."...&P.-.p"eZ..:x{..\NU......&....W.j..~.....Mr; ....;hJR.)[..lX...W.d........3jM:.L.-g=1.l..4..xB{/Ur... .c......-.Jn.. ..!.R.W.ox.U5o.l.....R./..>.L....NI..?...i#.{.... e#[.s~~.......lO.....2.<.n...h.....|.q...3t1.@....!..F.-.#.....L..[...<X...8..%...........p...../..{..Y.S....#.S.....C.....b.I.x.....6.C\7?.|.J`.[3m.nI.x..I@./....2.n>.N."...K..*p4.@R....A'jy6.... .S.s..O:iO.....l.[..<..c@.. .lJs]B.*TW.T..P.wYi*oh..r.n5{.!s.....W...^..Zz\.._oYu#[r..J....J....kV .$..X.Q....a$.[...R......X....6U......e.6B.m..e.%.:..%,....l......cc...8...."q..}~...H.R9."..D....67..N.=.......I)...y6........d..q81.$..........nK..y.......j.?)&..'..Qs.....c......:....).S....?Np$I.S..`JZ...M.~|`A..S.....(.r........oC_XP?...Q.(Z...C..LA*.H[.........V...%(6....1...vu....Y...Y.1p.....=1.=N.^..k....C.R...Y...B.UDs..r.D.>..(.....:..!....{q~.....t...v.....|O.F..D.:..}\.:..s,.Z.....4W0....5..}..n..MJbR...6..C.......4...).......[.U..Z....._Y9......!q........1..G..do...9JRX.e_...v.....k.AN.)..Li...F..B....i..^.f..*....T,S....m..kKv...6e..4....I9......)....rO...2.n>..........l.gZ.....~`e.O..X.9\....O:..n..R...fCd].2.RO....n..
<<< skipped >>>
GET /bao/uploaded/i4/171550172087131367/TB2Sx0akVXXXXX2XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 23224
Connection: keep-alive
Date: Wed, 02 Mar 2016 21:01:03 GMT
last-modified: Sun, 28 Feb 2016 16:58:10 GMT
Expires: Thu, 02 Mar 2017 21:01:03 GMT
Cache-Control: max-age=31536000
Via: cache28.l2de1[0,200-0,H], cache39.l2de1[0,0], cache6.nl1[0,200-0,H], cache7.nl1[0,0]
Age: 5973429
X-Cache: HIT TCP_MEM_HIT dirn:8:205242413
X-Swift-SaveTime: Sat, 05 Mar 2016 17:41:21 GMT
X-Swift-CacheTime: 31288782
Timing-Allow-Origin: *
EagleId: d5f4b28714629258928741986e
......JFIF.....`.`.....C....................................................................C........................................................................................................................S..........................!.1..A.."Q..2aq#r....$3BRs..........%STc....457EFUb......................................W.........................!1.AQ.."a.2q.....#....BR...$&34r%'6C...ESTbt...5DFcfs...................?....(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4..R.)F..JQ.(..iJ4.~4.z.I.@.....C.)AP....Q.... .X./.....JQ..........R.0|..Z.....V..._r......*S.Xk...k.G[G..4...J..-.......6*.{.JT..(..............J...1_f..G..2)'.=.*..Q....p..y...egJT....~...N...`..s......R.y....V....y....V.....8.....HRG<...'....)Q.J4..R.)F..JQ.*........u(....C.........s......uR.yo..YQw.p-kN.......`..wmf...X.I.>}J-"..f}F|..-.%G....-....2.........e.hb..h....8..q....g..].,.I..E....6..........._....2.."G...D....wL..<.....{.?.:..*...-a...C_.\.. p.g.S.8......#.o?..V......L.. .;..OW...\,.y....$'.......*8h.............T...jA$......f....>:..[..._.K*3.|...:.(d....2{.J.y....tq.....Y...3....O9...G.0...........C.{.pvH...(jN... ....,....."..g....].....).......9.S.!.....vE\.\.Gni...$ht.W..M.m.E.8...h$..._m..gH.f'......\y.f.........domA/c9..a...r.h.]'.....|.J...fI..........,.t.w..4.9T.p.y...C.H$(s.G...;}..*. .^<7F2....<D...... ........<.S.............d.6...O..9>...<....y
<<< skipped >>>
GET /bao/uploaded/i4/164190124733007341/TB27kNMfFXXXXbHXXXXXXXXXXXX_!!13406419-0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16822
Connection: keep-alive
Date: Tue, 19 Jan 2016 04:57:45 GMT
last-modified: Thu, 24 Sep 2015 23:30:48 GMT
Expires: Wed, 18 Jan 2017 04:57:45 GMT
Cache-Control: max-age=31536000
Via: cache58.l2de1[0,200-0,H], cache55.l2de1[14,0], cache1.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 9746427
X-Cache: HIT TCP_HIT dirn:0:396120276
X-Swift-SaveTime: Tue, 09 Feb 2016 12:51:41 GMT
X-Swift-CacheTime: 29693164
Timing-Allow-Origin: *
EagleId: d5f4b28714629258929371995e
......JFIF.....H.H.....C....................................................................C............................................................................".................................................................................3.$.75..e?j'I....H4. vqt..'[).c............e..:.".j.4..v,...d....H.y.BT......n.l..I.`.b...Y.Y(....1...;Al.%${n....Ww.-...;..Yi......N..B$.0.nD......D......Q,t1...I...1....:..h..3<.Y..=....:..T.7....\.t...e.P.@k...N4HA.U...{|.rI....x.S.....v>...Z3..!H0.y...Y....a........WPvNv..Y.....^a.q.&-..A.c...\]eH..$.....\dX.a..o..]..^..`. .*..Sj,..._..$...}7...b}..'l..#I.X$... .{ *ht7..n..T...#.o.....fh...1|u....,ef...'.o.?D._.P...j..6..........bW:...A4w...u......U.PKV<.I...^Z..V.!t.[..no..~.....i.)..*..J..Z...fj.w!.......]jX)...u...<.$3S..q}I25J.g....]...u.__.......n.j..M...`v\..rE...GuM.t)....d..3..K.e..4]$.....t..nh.b.Z"a..p..f...'.`..=n.C.G%)....%.M}...GG.....t..I}mT..&....k...x..1...RN1.....Q,......*..........................!.."#1..23. A$................]7..#..;...gPo~.8.........|.b........l.!.1.....UZ..:!)...P..|a*.oEY......7UK_..XQ.9..\...)a..A.K.bJ.....g..d..R.....K..........U..y..zf......J..............._.qzPG..... Q]..y..L./...Y.pD#...[.lk..q.K}N}.9..@2s..-.S,ll........E..~..Y6:..:D..ak.:...j._.5.../..K.,...Q<...d.......`.k.Y..Z.5..]6..v,u.tOibT\L....z.g.9....fI...r.....OZ.).,..0.]....SSV...n..z.5.0FiC8%z........|s>.dq..O.-....>3...~3.Oc#.....c.4..z....n....W,<E~.....S.....?..q2E..x>.H.n..w_....O...... /.....w...i.w.(.. . ...K.....5q......
<<< skipped >>>
GET /bao/uploaded/i1/137730136379450715/TB2nd8.gVXXXXcBXpXXXXXXXXXX_!!100183773-0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 11931
Connection: keep-alive
Date: Tue, 01 Dec 2015 08:10:37 GMT
last-modified: Thu, 05 Nov 2015 01:40:57 GMT
Expires: Wed, 30 Nov 2016 08:10:37 GMT
Cache-Control: max-age=31536000
Via: cache16.l2de1[0,200-0,H], cache39.l2de1[1,0], cache4.nl1[0,200-0,H], cache7.nl1[0,0]
Age: 13968456
X-Cache: HIT TCP_MEM_HIT dirn:2:308529845
X-Swift-SaveTime: Tue, 23 Feb 2016 22:09:43 GMT
X-Swift-CacheTime: 24228054
Timing-Allow-Origin: *
EagleId: d5f4b28714629258930032009e
......JFIF.............C....................................................................C..............................................................................................................................................................g$."j.tJ.....8.N.S....L..$.....*9..8Q..q..!.#.).W.'.H.....p.N.S......[".....7..._S."^<p.R...rk.j<:sYo..=^...U....|.......J.M_....%....-..|.[.s.Rs..-...O.....Z.:.......[.57..dK...=p|.....-...`a.mY6&H.....,.i.;W.o..;.o.....O.{.V.Y.......;..D.M.3....Z...."JX.Mj......k.:..;..m2P..a...4.....,Nj..e.qs.p.Q......A*:........).. .WL(.T._....=.{.z...i..^{mqH......k.4....M...l...CJ...H.s9tfy......<....H..........s<....J...uq4D*)..-L./.....&...,.y...R!.l.....?/....'....TTL"c....j.^.<7...Y.d ..b}iw.7....<...a..w........U.Z.W-..;...P.,=.J.y:j...Y1%tV...c.Qk..=...8.........v%,-d`E...S.B.....[[L.2,d..~.....k.8........l-l4...&.;JI|..gi.O..q...s)....*`;.Uk.m....<$.....\>...X.c...s.=j.|.z.r.f;.M...X.....u...JXLq?n........i..y./p`..%."_[I.5o=.hrM....o.y0.<.[Q..Y..Z...m...\..^-.{.Hr.B..-n..V.;.zkz9}3...tr0..M[.klo.].[O0..=s...'.<..c9.@.0B4..$4.c...z....q.D...Um....>..v2c..o%CL.]....,.../...L..Ip..Dd..15.|.-....._O.....2&q...8.rU.C.#! .."....R....S...,.b.K.%N8T*^.8i..".A.....U..L.#.0.h8p..8p......!....U[O|..0...$..%.....0`...LI.........).......................... ...!"...#01@...........d?.....X.m....2fZZZZZZZ.|..Q..g*Y.[&VoAL.~.....L.KK]...!F....._.6 ...?.\n...0X..%......x.#M.e...~S........f's.v..q.b}\.G...Vv.J...q..7..a.Ep....l.*.5...T..\E^..,..~E.....b.
<<< skipped >>>
GET /bao/uploaded/i2/129390207462473993/TB2iv6OnVXXXXagXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 34242
Connection: keep-alive
Date: Sat, 30 Apr 2016 19:24:10 GMT
last-modified: Wed, 27 Apr 2016 08:53:59 GMT
Expires: Sun, 30 Apr 2017 19:24:10 GMT
Cache-Control: max-age=31536000
Via: cache44.l2de1[0,200-0,H], cache54.l2de1[0,0], cache3.nl1[0,200-0,H], cache7.nl1[0,0]
Age: 881643
X-Cache: HIT TCP_MEM_HIT dirn:8:359014358
X-Swift-SaveTime: Sat, 30 Apr 2016 19:51:03 GMT
X-Swift-CacheTime: 31534387
Timing-Allow-Origin: *
EagleId: d5f4b28714629258930682014e
......JFIF.....H.H.....C....................................................................C........................................................................................................................D.............................!..1."AQ.#aq...2R....$%3....4BCDb.Ss....................................E..........................!1A.."Q2aq......#B..3Rb...$Cr....Ss.45...............?.........L0(*..._.....L1...4........<..N.`..9RDD..........67..;q.....<tR.m.k....D.Rv}..4"......:v.o|;......w.a...'..SJ.R.....*...=I.)......VDIy.c.UY!.8..x....<.{u.]..\....W..T.~zzV...v...[.,.C....yQ.u..a._. )..h5.9.5..a..!..F............X..k/~aQ..M....b...}..k|L.)...s....."\{.........&..H5u..kk...{|......D..w...OPF.....0ME..g.2./...A1v.a>.).Bi.ULW..d...[.0.....A...yD|........u.....W...o......Q|f..'.>..]..mz.-./...&...W.. ^Z9..L|.^..Lz,'l..d.b...G....~d9.L.Z=OI4...=E-...|;.b.8u>.._.c-Q..t.T.T..4.[..R.}....*...A..q.J"....../..S......?..=0..~k.k........0...k.k..a.......L0)..\.....`.?$..N}..?...W....`....`....`....b..Q.G~\.... ...!...#.d...}....A.2#%A..UTD..6...".....c....l}.... ..].....vbI.uu..3(...dTs._ .)..UJ*.x.M~y.e.Z..Y{F.3.......bo,...of..c........t.{.P...c_.... .{6[.m...:...........b>..7....SK!}.....eHS./....5...e.Un<.M..p.[..7......oO..7..W[..#b.....}..>..........U.......&.D=..L....Fh...u... .......D5U..N.4.k.....\.U.%....."l{.....L....5{_q_1........?."E.N......O....u3.'..\.$t.....d.e.G.E.o..B@%Q.6J".....~G~......bf....2oE.\.........8....&....&.{t........N.wM=..}...d.....f<<...Q&9\N...
<<< skipped >>>
GET /bao/uploaded/i4/117530184305494407/TB2uOV7bXXXXXb1XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 15229
Connection: keep-alive
Date: Thu, 24 Mar 2016 21:27:57 GMT
last-modified: Mon, 21 Mar 2016 17:19:39 GMT
Expires: Fri, 24 Mar 2017 21:27:57 GMT
Cache-Control: max-age=31536000
Via: cache33.l2de1[0,200-0,H], cache36.l2de1[0,0], cache9.nl1[0,200-0,H], cache7.nl1[0,0]
Age: 4071020
X-Cache: HIT TCP_MEM_HIT dirn:11:231958993
X-Swift-SaveTime: Thu, 24 Mar 2016 21:29:50 GMT
X-Swift-CacheTime: 31535887
Timing-Allow-Origin: *
EagleId: d5f4b28714629258978642289e
......JFIF.............C....................................................................C......................................................................................................................A..........................!..1A."Qa.2q.#B...R..3Cbr..$%S..4....................................4......................!1..A.Qa"q.....2...B..#.$Rbr............?.s......6Y......Bp.}.|C..\\.^..aLee.v..|.^....n....(.. 4.o\5......b\.5.X....B3{.....BVu....w..c.I......Y.I..!...E...8.r...[..q...J.HE7....Q...E...!F....Q.P[....Y&...S.QT:.%.....e>P.......>...)"l...[..s."(....xD#r-..)..R{z..s%.yX/n..6Je.F.....d. ...a......1 $>..R.....(.Yf..."..V.........a.3e.."..za...#..I.......Rm..*a........2...lq.!dC...x.9D#...r...).#..YD ..."iD).'.K.....S.......`...r..........b.4.......R....stGd]....9Dw(yW..O..G..)xC...`..x..6. ....&....(.1......q...>.4\za.M....h.. .....M.p..c.B.....4.}N.O....M......@..[.8D.6..&F..jLI.....o0..(z..c./.....4.6M.....A...Q(..-.....D-.......E..$...../....E...aOu.....T.Y..T..&..G(yw'..@..L.../...dB......u.a..m......l10...h......"&..E..7.q..........0..[<g.VF......7f.?.....>..|f.\0 ....q.7....J.Q....e.N. :.TvJ...!$.\I...$.nc.5Ze..oe.|\....R...,.*C.>%Q.3.n..)......K..~...V..%....$K..gn.....D......W..G..z....l=:...*...F.W..~.#.n...K..\.2.jh....`.[.o|...Kc....iE..._.Q..Z=.f.T:.?\.e.{.....>...h.`.......L#......"........9_...B.......%.A.....Y.*......X.....,........(.n..yQ......yU.W><j....GZ......}H.mqk.........A......,...K.6..K..Q/...u...T........T.7...k.e..y..A....q..I..]U..KJZ
<<< skipped >>>
GET /bao/uploaded/i1/134930189550332458/TB2DbJfmXXXXXX3XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 8431
Connection: keep-alive
Date: Sat, 02 Apr 2016 21:16:07 GMT
last-modified: Wed, 30 Mar 2016 07:57:05 GMT
Expires: Sun, 02 Apr 2017 21:16:07 GMT
Cache-Control: max-age=31536000
Via: cache37.l2de1[0,200-0,H], cache55.l2de1[0,0], cache3.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 3294130
X-Cache: HIT TCP_MEM_HIT dirn:1:107943261
X-Swift-SaveTime: Sat, 02 Apr 2016 22:32:42 GMT
X-Swift-CacheTime: 31531405
Timing-Allow-Origin: *
EagleId: d5f4b28714629258979372294e
......JFIF.............C....................................................................C............................................................................".........................................?.........................!.1."AQ.2aq.....BR..#3....$b.Srs.....................................1.......................!.1A.Q.aq."......2B....r............?...x.!i$t.5.g....rO.R..6...5..0I.K%.*?.....g>?Z..... .........t.m>......3...I.X E,j.AN.H.c.......:..Y..^.....(....Qm.=&{...S....h.;......9..^...U...t.u..k..f....mi..&..h..(.v8.3......u..F...?....e.v..p<s..m....hBJ.j.Q.t......9].n..2G...(.sg...=..[61;J.3...8.._0hZ.LA.`|k.T,f.i:4v.Q........[h<d.f...3...f.;.U5.t@.pU........CQ_~....G.....G8.O....O.EWO~..HL ..#.(.Z.ns.."....)....26.U....C'j`%B.g..0..[....=.-..s.D.t..;.4..U..o...J....*h.g#......j.j9lf.-.P.h..&...Z..q^}...).lu.;....s1.BO5..Gsj.r...&1|.U....[y...TEK.......WE..k.}z....Zz....>.......~;.............}..8...<.P.T.I>...Vt..a...d.....>.e>....Ih..f.@......SY.......<sMn..l.%...c...y/....N.......<{...~.V.-.......W..5..\...:......z..l..C.4zB.55K.I!.K........^r8......'...O.6..n.s....[\Y....}...... ..,zk...]?S.....lws.UK..K. f>..l..v..q.._...z.\..'...Qc[ux...U!.R.~L..9.s..i5...X.....o.X|m...nc..4..-....S2@..1.$..;W...oP..>.tS.j_..].c..W3....l.q.g>..7.......t{}.M..L....1...G....wV'......:o]...E.k...........3aWn.S.}....P8.@S.~...M?m.N.o.k'.o$X;Gm.g..Q6....8...=-.h...z.....u.....).$.VGb..9........9.A)..[...Rwm...#.o..(.p..z8.h.PU..2g..T.aJy.g....6M..$T..Oj..H........
<<< skipped >>>
GET /bao/uploaded/i4/162640200136549468/TB2IugjnXXXXXaFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 7564
Connection: keep-alive
Date: Mon, 18 Apr 2016 21:56:25 GMT
last-modified: Sat, 16 Apr 2016 07:37:55 GMT
Expires: Tue, 18 Apr 2017 21:56:25 GMT
Cache-Control: max-age=31536000
Via: cache59.l2de1[0,200-0,H], cache13.l2de1[0,0], cache2.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 1909312
X-Cache: HIT TCP_MEM_HIT dirn:4:18391836
X-Swift-SaveTime: Mon, 18 Apr 2016 23:15:01 GMT
X-Swift-CacheTime: 31531284
Timing-Allow-Origin: *
EagleId: d5f4b28714629258980032297e
......JFIF.............C....................................................................C......................................................................................................................B..........................!.1.AQ.."aq.2B..$.....#Rr....3Sb.......................................;.......................!..1AQ..a."2q...........#Bb.R.$%.r............?..S....P..@(......P..@(......P..@(...,L.!..P.......$.......F;..wR........FP..2.W.%y5..O..P.../Us....:..#....RuL[.F..1......n..|}..K..v..3..lN.^....8..g/.s.^.9..X.JOd_.8..?....[x..G..n...~.O...ZN.Z.....y..u....>G...........BzZ.PV..@Zw............O..._#..9.o)ni........@.sY...$]..b.[FT0.xB...n>B...(.MS.rj..b.........q.K/W...w:.......P..@(......P..@(...x....n...{gp.$I.g...Qwh..q..c....u..MrA*..wxR.Jv....m.Z.I.... \...}......M...q. .....?..Z.'.....6>.7.J.....2v.Fw0........G89.f...K...@..5N....-.........2h..V. 'Zt......H.1...:......r.#.....)C........S.5.1..7.......[.>.y.&.S..M=g.&...,.....N.../E.}...6...40.....R...R........v.H...(..y.....|......B.3...f.=.d....RXo......z.y.=@...^..IV......Z..Y{........,...d'v.jk.P.uO...r.....6.....x......R....r..k..la.............'.q^[..L9... ia#.P .%X9...........<..v..jv-......\Z....|V8.er..";WZ~n @(......P..@(......P.....SiIQAJ..G.9..Y2......"ss]m.&7.$.:...(...ug<..y...ou.............G..U..l...... .JJ..A.)....;.:wX.oN.Q..Q{........w.~.q.WS.......E.R.{.c_.U?.-...q..36.............$...........O.-...p.fm..............g7.Hs.3......[..~...._.........c....m.TY&^..CC.m.....q.......:....o5R...}..}...
<<< skipped >>>
GET /bao/uploaded/i3/163300145892263202/TB2X9PghVXXXXXLXXXXXXXXXXXX_!!110856330-0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 27191
Connection: keep-alive
Date: Wed, 02 Dec 2015 08:13:46 GMT
last-modified: Wed, 02 Dec 2015 06:01:40 GMT
Expires: Thu, 01 Dec 2016 08:13:46 GMT
Cache-Control: max-age=31536000
Via: cache56.l2de1[0,200-0,H], cache51.l2de1[1,0], cache10.nl1[0,200-0,H], cache7.nl1[0,0]
Age: 13881872
X-Cache: HIT TCP_MEM_HIT dirn:8:553993008
X-Swift-SaveTime: Fri, 11 Dec 2015 02:17:10 GMT
X-Swift-CacheTime: 30779796
Timing-Allow-Origin: *
EagleId: d5f4b28714629258980692299e
......JFIF.....H.H.....C....................................................................C.......................................................................................................................?..........................!...."1.A.#2Qa.BqR.$b....%3.4Crs..................................5.......................!1.AQaq."2..........#.3R$Bb.............?...D{R............G&B.D%~..C.}C<....D..x$.G.(D...{...l..r:.3n...I........6....<m..[..|.}M.XQ.....g..V..E....s!.......%.nR.Hc.!n.Q/..!.TI..'r....... m......%.X...Z.H.t%.k%.*..iiV.`..S.`$A$..".V*\..Ps~.v.h..s.F?....m..:f:....LDV..X.Tb.J./B...,......h=.m.z.dr..U...s.x).~...~T0R. #.!... .9_>.R`.....5~..5.[...u%0X....cq...1...d..?.J.q...}..9...........1..<..=v..\......(Ry.X.R>......Hl...C....O..m{8.........GGk=...G.8.Q%Zx.9)8Aj.B..0~VX{.,...S.2.P...f4B...@{..m..g..SF&.........,S.S..Yp...Mb.....G..A.{Z.....>$......~.py8H....3.1e.#.X,...T8S,I:)*A....|z#.0....A.j...xo.......K.....V.R.......#.C(..X..&(.1.... 2. z.%.. .U.'6o....W"h...B..!.P8...........H..!.........X.v.k;[m.r...V.....@I.,S..#B....I.. .G..[I _..5mr...]..........z.&.W.]u...d.......OJ..J..r..c..3)R=fn..A7........n@..N.......q.9].w^[.O...]m&..D..5.T-...J6.=.f..|9..v...)a.}.>.(...2....c....y.D9|^..c.e.....Ug(.r;....Z6c.#.:.....L.........'C......oMb@......}.`5N.c5........H.:..-i..q.v. ...!w.c...;.....nL..........4.....?K.........v....j.4x.N>~.HR6.9.(..0...0.e?.RU.=.#..q..5...ot...5.....B...%...<.......A.u.N..U.S.W'..}C....1Y.P]...i...x>.[..JoCR....s....YR8.Y....4.Q...8
<<< skipped >>>
GET /bao/uploaded/i3/138600177706200491/TB2UOHvlpXXXXa8XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 8815
Connection: keep-alive
Date: Sun, 13 Mar 2016 07:04:22 GMT
last-modified: Thu, 10 Mar 2016 04:09:12 GMT
Expires: Mon, 13 Mar 2017 07:04:22 GMT
Cache-Control: max-age=31536000
Via: cache24.l2de1[0,200-0,H], cache61.l2de1[0,0], cache6.nl1[0,200-0,H], cache7.nl1[1,0]
Age: 5073236
X-Cache: HIT TCP_MEM_HIT dirn:5:277579439
X-Swift-SaveTime: Sun, 13 Mar 2016 07:45:17 GMT
X-Swift-CacheTime: 31533545
Timing-Allow-Origin: *
EagleId: d5f4b28714629258981372307e
......JFIF.....H.H.....C....................................................................C............................................................................"..........................................[...........................!.."1A..Qaq..#2.3B........$CGbr....%'5RSTWctu......47es......................................7.......................!1..AQaq..."3R......B....24r..............?... N.1.X>c.........B4...Dk.!.@.B......!.!.@.B......!.!.@...}(.....my[....*....[3.N. Rwne..mQ..px&0.....zW...j......r.z...1o..5..;)N..B%........YZN..1....."k......1..4....8:oaT.._c.....d..m.9:B.... ......35-..m..*.../|S.....^........".)19P~P.@..- `....,.'.........}7Q&-..)..F.n....V.w..........'........b....^l....m=.....{.n..}J.w.......5...........l..Sj..}..Nx.r...K..o%- p.x....*.z...V....k...K.o..#...'S.]........Pu......N.S..7*.)...$K%..-.........>..k....u..Z..C...sQjNV.So.o$....M.bvZc.Au..}......'..z9..Y>...5^....j...p.IW..(..5n....)%]...VP<Fs..B.U.!..M.(.;..Fb.p.S.U.}.f.....'se.)....G$......F2{.......O...W}m...Xr...N-;.*5W.T8.....p.2r.(s.u!.U..Q.......vib..h....B.h;..`..||Dt...j.W...G..v..k....qL1 =)2..6O`.q..@........R]&]T.^..rn...h.FU...rnZ..iJ.._E....l...sO..D..6.r..lU...Z.......;..r... p.v.n..z(.uFE...,......8...........}.... WOuZ..v..gJ.eo5P..@........S.R]>...n.)JB..[..9:..S ]O........qR..j..(.....;6.d....;6../.............o._I...A~.[...>......W....<....R.EL.'..jZ].....m....O&P5.....E.[..Q/..P.y.'i...Jh6.t........Z.RJOy...3..U.4zE.Z.V...^.....=0...j.2..I.YnW.m..q.P..........-:...2W....';S.4.
<<< skipped >>>
GET /ex?i=mm_26632324_6858394_36942102&cb=jsonp_callback_78067&callback=&userid=&o=&f=&n=&r=&cg=a57a6325ca34a933f3776754c945dab5&pvid=ad323fe342d763752550759c4a9f2a29&u=http://VVV.2345.com/?kqq876038563&fp=1.FgMJdD7CxD-Yty~PpL6IrOJ8hiT2w9R3b24B9pQOmj_oMbwcF7WiW3.gb2312.EwZgLArIiv6ALqg_2oKiDCw_4AH1DYSoWjlC_aoPzdAueoIMqgMk6AQ_4E-6agX3oCMADHoG9pAHIFRygEOaCQ_0A.Q.uci4sw HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ope.tanx.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Tengine
Date: Wed, 11 May 2016 00:17:58 GMT
Content-Type: application/x-javascript;charset=GB2312
Transfer-Encoding: chunked
Connection: close
Expires: Wed, 11 May 2016 00:17:57 GMT
Cache-Control: no-cache
399..jsonp_callback_78067({"pid":"mm_26632324_6858394_36942102","acookie":"0","width":"998","height":"297","stdwidth":"998","stdheight":"297","distype":"1","adboardtype":"6","title":"","clickurl":"","data":"\/\/strip.alicdn.com\/L1\/377\/101011\/2015-09\/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k%3da09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48","icon":"","feedback":["hXXp://df.tanx.com/spf?e=Ku2AXxCecLc6sENrlwpRJ+zKwVodlz/4ZK7JCwfzrFGtaHwtoZ3wckkRoQ+RnQwLPkXYN4TNsdm8cr7YtVtoSoUHbzMUW07KMtWeSj3TFxp6x89zN/vaAp1a4w+6Vqh7Br/LNxx3ABX1xsYWtGN2vY2KstHhq/YaXoM5jf8K7sE=&u=&k=173"],"unregist":"","tproduct":"3","mid":"59420271","isx":"0","crid":"","tsid":"0ab7409a000057327a365c68000a8e48"});..0..
GET /tanx/img?type=acookie_id&id=OWi5D5caaE8CAcLyYNrLinLK&_ts=3XkUk&cad=null&cap=null&cna=OWi5D5caaE8CAcLyYNrLinLK&_lastvisited=OWi5D5caaE8CAcLyYNrLinLK,,2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs,io24at7g,ini44vvg,1,66a369b90e3f4299deff187054eb46a59c0b26c5 HTTP/1.1
Accept: */*
Referer: hXXp://cdn.tanx.com/t/acookie/acbeacon2.html
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: a.tanx.com
Connection: Keep-Alive
Cookie: cna=OWi5D5caaE8CAcLyYNrLinLK
HTTP/1.1 200 OK
Server: Tengine
Date: Wed, 11 May 2016 00:18:04 GMT
Content-Type: image/png
Content-Length: 68
Connection: close
X-Content-Type-Options: nosniff
P3P: CP=CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR
Set-Cookie: cad=AeaRwqx0QXyTkqAdci80Cw==; path=/; expires=Sun, 30 Jan 2101 16:00:00 GMT; domain=.tanx.com; httponly
Set-Cookie: cap=c903; path=/; expires=Sun, 30 Jan 2101 16:00:00 GMT; domain=.tanx.com; httponly
.PNG........IHDR.....................IDATx.c..........1q....IEND.B`...
GET /spf?e=Ku2AXxCecLc6sENrlwpRJ+zKwVodlz/4ZK7JCwfzrFGtaHwtoZ3wckkRoQ+RnQwLPkXYN4TNsdm8cr7YtVtoSoUHbzMUW07KMtWeSj3TFxp6x89zN/vaAp1a4w+6Vqh7Br/LNxx3ABX1xsYWtGN2vY2KstHhq/YaXoM5jf8K7sE=&u=&k=173&tanxssp_t=49595 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?kqq876038563
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: df.tanx.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 11 May 2016 00:18:00 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: close
Server: Tengine
Expires: Wed, 11 May 2016 00:17:59 GMT
Cache-Control: no-cache
Timing-Allow-Origin: *
31..GIF89a...................!.......,...........T..;..0..
GET /lk?url=&pid=mm_26632324_6858394_36942102&templetId=10687&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&number=12&callback=jsonp1io24atk1 HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: textlink.simba.taobao.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 11 May 2016 00:18:01 GMT
Content-Type: text/html; charset=ISO-8859-1
Transfer-Encoding: chunked
Connection: close
Server: Tengine
Vary: Accept-Encoding
Expires: Wed, 11 May 2016 00:18:01 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
Timing-Allow-Origin: *
29f...............j.0..oe..6(..uT..n..h..l.x.p..uc..'.sh....... .....}....9.p...........?....))...no...,.u.....n.........S..CUZ_A.PK..m.;...vm..... ....U..n....zG.....q............}w..;..b.7..>.....-..aA..|..#\m.m.C..mX). .....q.0...Qk.S<;.r".%..\...XN.b.#...............]....V.h....Z......MK..q.R...{].......ra...T.J\.C=C#..O..&...R.=.%....d._v|.}..._.$....P...8...D.y.J.)X..&D]..f.JF/a"$$..&......h..b4..U.x...,..w(1...Os.....e.q.=.$...y...%:].i...Z...g|.C#.../9.s.?PVa..k.3:.X......-)g.......J lF.........(.D....M..S.F........_..3...K....6.(...d.............P2.6.%..[.H.s..jJ....9>....L......WRU..6.c..h.F.0....o..J.Q.......F...jI.OYi.._....r....A..mK"<[."....z........;.....0..
GET /?name=itemdsp&o=j&pid=mm_26632324_6858394_36942102&st_type=5_8&templetId=10687&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&count=41&p4p=jsonp0io24atk1 HTTP/1.1
Accept: */*
Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: tns.simba.taobao.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 11 May 2016 00:18:01 GMT
Content-Type: text/html; charset=GBK
Transfer-Encoding: chunked
Connection: close
Server: Tengine
Vary: Accept-Encoding
Expires: Wed, 11 May 2016 00:18:01 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
Timing-Allow-Origin: *
493.............}.r....{..OE.y:e.y....D..5Y.u...@..'..e.F..w...L.$.....bQ.A`.ke........7I............8.9...c....J.........u.-..u$........e...^`.}...>Rb....b..s|....8.8=:?)n....I&..FHb%<.ut.~z|.S.o.....?....W.v......!..uT.5..l..a..p...i.. .>~...B.....U ~P..7j.>......f...a..c...i..a.s......>......F.y..../c.|...._-.....o5........V.......z.....uS.Y){..<.q~.....}..U....m....m.}._...jM.l.............M..>.....:~.....7.....}.'_...5.7.U.W.{......H......n..F.^..o.....}Xn..k..L).8.....[.. ...|.}.6..!FI..J;..........{.8.LY.-l...a....q.;Z....'3Bhb.....|l.Y$.d..gx........k.x.v.o..y.wS.`..-No.u|b......C.J.7...D....k./........7...........z.N..)..wJ...V.."....iB. .B.\K....Y..f..4.CZ..H....A9 !...x....G.TX(;..7.W.`.P..`...}vu.'..s.du..S..u/?X...E............<..5 ....D.n.!...<...J....l.... .....*6j.....O~.U....u|.h.......}......{...~.].V>..4. -....O.v.r...E.>.....w.._\............e..a....jvv....|y..i..}X........nk>..:...?\)....u.|.T n. .c..............8.4....E.....W..[7......N...a.Y...;.h..{.E..E...........@..p...0.....8..X.. ...........w.9..p...X..\........U. ...`.x..%BR\......'.C......8.........~.z... %..5...........]....V:p...].....=.N.r....h.u....{....=..M.r....5R..*/...a..26b4...S..[...b.....[^...V.o.x(p.z...{8Bx..{.a.........*.9..?Z[.-z..p.!........:>9:8:.."........J).q.....xZ<:qg.~]...`....6%\.>..n%.|....xn.......\E...qZ.~....YoCF........g....z...q...w..2.....q......y........6...n.../._...0.#U....7.>.-.~...*."... ..Z/..dD.s!....)..f~...e..}..4n3...2.e.../...A.>...l.U..J..
<<< skipped >>>
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
%original file name%.exe_224:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
t$(SSh
t$(SSh
~%UVW
~%UVW
t.It It
t.It It
u$SShe
u$SShe
user32.dll
user32.dll
ntdll.dll
ntdll.dll
kernel32.dll
kernel32.dll
wininet.dll
wininet.dll
Kernel32.dll
Kernel32.dll
\CrackCaptchaAPI.dll
\CrackCaptchaAPI.dll
\UUWiseHelper.dll
\UUWiseHelper.dll
\dc.dll
\dc.dll
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
CreateWindowStationA
CreateWindowStationA
CloseWindowStation
CloseWindowStation
GetProcessHeap
GetProcessHeap
ExitWindowsEx
ExitWindowsEx
HttpOpenRequestA
HttpOpenRequestA
HttpSendRequestA
HttpSendRequestA
HttpQueryInfoA
HttpQueryInfoA
EnumWindows
EnumWindows
EnumChildWindows
EnumChildWindows
MapVirtualKeyA
MapVirtualKeyA
GetAsyncKeyState
GetAsyncKeyState
UnloadKeyboardLayout
UnloadKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyboardLayout
ActivateKeyboardLayout
ActivateKeyboardLayout
GetKeyboardLayoutNameA
GetKeyboardLayoutNameA
RegOpenKeyA
RegOpenKeyA
RegDeleteKeyA
RegDeleteKeyA
RegCloseKey
RegCloseKey
RegCreateKeyA
RegCreateKeyA
RegFlushKey
RegFlushKey
LoadKeyboardLayoutA
LoadKeyboardLayoutA
{B6F7542F-B8FE-46a8-9605-98856A687097}
{B6F7542F-B8FE-46a8-9605-98856A687097}
\superec.ProcessMemory.sys
\superec.ProcessMemory.sys
config.iniQQ
config.iniQQ
\superec.ProcessMemory.sys
\superec.ProcessMemory.sys
\superec.ProcessMemory2.sys
\superec.ProcessMemory2.sys
BugReport.dll
BugReport.dll
BugReport.dmp
BugReport.dmp
BugReport.exe
BugReport.exe
BugReport.ini
BugReport.ini
BugReport.log
BugReport.log
bugreports.exe
bugreports.exe
bugreports.ini
bugreports.ini
BugReport.*
BugReport.*
bugreports.*
bugreports.*
hXXp://qq477105024.gotoip55.com/ttjd1.5/
hXXp://qq477105024.gotoip55.com/ttjd1.5/
piaoyh.asp
piaoyh.asp
plyzxl.asp
plyzxl.asp
piaofh.asp
piaofh.asp
10000008
10000008
30426153
30426153
MSXML2.XMLHTTP
MSXML2.XMLHTTP
Microsoft.XMLHTTP
Microsoft.XMLHTTP
MSXML2.ServerXMLHTTP
MSXML2.ServerXMLHTTP
MSXML2.ServerXMLHTTP.6.0
MSXML2.ServerXMLHTTP.6.0
WinHttp.WinHttpRequest.5.1
WinHttp.WinHttpRequest.5.1
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
application/x-www-form-urlencoded
application/x-www-form-urlencoded
\gg.ini
\gg.ini
hXXp://VVV.2345.com/?kqq876038563
hXXp://VVV.2345.com/?kqq876038563
!\\.\PhysicalDrive0
!\\.\PhysicalDrive0
hXXp://qq93ee97690caa.85.net222-6.com/ttjd1.5/
hXXp://qq93ee97690caa.85.net222-6.com/ttjd1.5/
\\.\physicaldrive0
\\.\physicaldrive0
40000000
40000000
00000002
00000002
40000098
40000098
00000008
00000008
cmd /c net user Administrator tt
cmd /c net user Administrator tt
cmd /c ipconfig/release
cmd /c ipconfig/release
ws2_32.dll
ws2_32.dll
hXXp://
hXXp://
hXXps://
hXXps://
http=
http=
HTTP/1.1
HTTP/1.1
Accept: image/gif, image/bmp, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Accept: image/gif, image/bmp, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Content-Type: application/x-www-form-urlencoded
Content-Type: application/x-www-form-urlencoded
hXXp://qq876038563.com/ttqjd1.5/;
hXXp://qq876038563.com/ttqjd1.5/;
\Tian.dll
\Tian.dll
.rdata
.rdata
.data
.data
`=*_ 7
`=*_ 7
shlwapi.dll
shlwapi.dll
C:\Windows\System32\Drivers\etc\hostshXXp://VVV.super-ec.cnhXXp://wghai.com/echXXp://qsyou.com/echXXp://VVV.wghai.comhXXp://bbs.wghai.com/forum-17-1.html/forum-12-1.html/memcp.php/ip.asp/time.asp/gonggao.txt/ec-user6.php/ec-bd.php/ec-jh.php
C:\Windows\System32\Drivers\etc\hostshXXp://VVV.super-ec.cnhXXp://wghai.com/echXXp://qsyou.com/echXXp://VVV.wghai.comhXXp://bbs.wghai.com/forum-17-1.html/forum-12-1.html/memcp.php/ip.asp/time.asp/gonggao.txt/ec-user6.php/ec-bd.php/ec-jh.php
hXXp://VVV.super-ec.cn
hXXp://VVV.super-ec.cn
" class="txt" />Function Getcpuid()
" class="txt" />Function Getcpuid()
Set cpuSet = GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf("Win32_Processor")
Set cpuSet = GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf("Win32_Processor")
getcpuid=cpu.ProcessorId
getcpuid=cpu.ProcessorId
#in_password
#in_password
%*.*f
%*.*f
CNotSupportedException
CNotSupportedException
commctrl_DragListMsg
commctrl_DragListMsg
Afx:%x:%x:%x:%x:%x
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
Afx:%x:%x
COMCTL32.DLL
COMCTL32.DLL
CCmdTarget
CCmdTarget
__MSVCRT_HEAP_SELECT
__MSVCRT_HEAP_SELECT
WinExec
WinExec
KERNEL32.dll
KERNEL32.dll
GetKeyState
GetKeyState
USER32.dll
USER32.dll
GetViewportOrgEx
GetViewportOrgEx
GDI32.dll
GDI32.dll
WINMM.dll
WINMM.dll
WINSPOOL.DRV
WINSPOOL.DRV
RegOpenKeyExA
RegOpenKeyExA
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteA
ShellExecuteA
SHELL32.dll
SHELL32.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
COMCTL32.dll
COMCTL32.dll
WS2_32.dll
WS2_32.dll
GetCPInfo
GetCPInfo
CreateDialogIndirectParamA
CreateDialogIndirectParamA
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetWindowsHookExA
SetViewportOrgEx
SetViewportOrgEx
OffsetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
ScaleViewportExtEx
ScaleViewportExtEx
GetViewportExtEx
GetViewportExtEx
comdlg32.dll
comdlg32.dll
RegCreateKeyExA
RegCreateKeyExA
Tian.dll
Tian.dll
B z!3x%u
B z!3x%u
\SouGoo.ime
\SouGoo.ime
@.reloc
@.reloc
^}•D
^}•D
IMM32.dll
IMM32.dll
imehost.dll
imehost.dll
ImeProcessKey
ImeProcessKey
Windows
Windows
:):3:9:|:
:):3:9:|:
= =$=(=,=0=4=8=
= =$=(=,=0=4=8=
? ?$?(?,?
? ?$?(?,?
66256996
66256996
:@\superec.ProcessMemory.sys
:@\superec.ProcessMemory.sys
\superec.ProcessMemory2.sys
\superec.ProcessMemory2.sys
WINDOWS
WINDOWS
Microsoft Windows 95
Microsoft Windows 95
Microsoft Windows 98
Microsoft Windows 98
Microsoft Windows Millenium Edition
Microsoft Windows Millenium Edition
Microsoft Windows 2003
Microsoft Windows 2003
Microsoft Windows XP
Microsoft Windows XP
Microsoft Windows 2000
Microsoft Windows 2000
Microsoft Windows NT 3.51
Microsoft Windows NT 3.51
Microsoft Windows NT 4.0
Microsoft Windows NT 4.0
Microsoft Windows Vista
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 7
QQSG.EXE
QQSG.EXE
\zk.dll
\zk.dll
!!"#$%&'())?
!!"#$%&'())?
%C%]uSj
%C%]uSj
Ha.QE
Ha.QE
xCmD$L
xCmD$L
s.Nd)
s.Nd)
A_%.ID,
A_%.ID,
n.Nn0 b
n.Nn0 b
.hh=@-
.hh=@-
T8.Sz
T8.Sz
.dTR0
.dTR0
.PWh=j
.PWh=j
nL.nP?
nL.nP?
webH
webH
NQt%F
NQt%F
.XV LV#
.XV LV#
PGPus(.Gz
PGPus(.Gz
.ROH=
.ROH=
]v%UO
]v%UO
uù u
uù u
0k00[ `.kh#
0k00[ `.kh#
.scwX
.scwX
?456789:;
?456789:;
!"#$%&'()* ,-./0123
!"#$%&'()* ,-./0123
CxImage 6.0.0
CxImage 6.0.0
deflate 1.2.3 Copyright 1995-200d
deflate 1.2.3 Copyright 1995-200d
a .WO
a .WO
e processors when executed
e processors when executed
>support g
>support g
X:
X:
UxTheme.dll
UxTheme.dll
;9HttpCli
;9HttpCli
7.PAVCExcep=^
7.PAVCExcep=^
.1.2600.441~
.1.2600.441~
PSAPI.DLLU%f
PSAPI.DLLU%f
%u%x-
%u%x-
88.185.3
88.185.3
20 4.49.
20 4.49.
0.4.10n
0.4.10n
129.6.15.29
129.6.15.29
202.120.
202.120.
\.\%c
\.\%c
g%s#$A
g%s#$A
"LuCBy%d
"LuCBy%d
./*.bmp
./*.bmp
log.tx
log.tx
cpublic.inject.type.54
cpublic.inject.type.54
LL keypadput
LL keypadput
k.ap*
k.ap*
.=.minmax
.=.minmax
x.cfake`?
x.cfake`?
defense.szX
defense.szX
.sel/O
.sel/O
on.Leve
on.Leve
mp7%ss
mp7%ss
tCPo
tCPo
wKeyboardD
wKeyboardD
Scsi%d:
Scsi%d:
H%d_%
H%d_%
1.2.24
1.2.24
%ct t
%ct t
: %s=
: %s=
= (%d/10
= (%d/10
gx=%f, gy
gx=%f, gy
%ld, pass
%ld, pass
xkey
xkey
'%ds=
'%ds=
3%u B
3%u B
orm.de6
orm.de6
`O%dhx%dv qV
`O%dhx%dv qV
FD=%u, "
FD=%u, "
'z %4u
'z %4u
iY;kUnkeY
iY;kUnkeY
%ld%c$
%ld%c$
-t.SSSj
-t.SSSj
MSVCRT
MSVCRT
ntoskrnl.exQ
ntoskrnl.exQ
8)939@9|9
8)939@9|9
#&$&@'!?
#&$&@'!?
9}%U}
9}%U}
3(Ãd
3(Ãd
6,?-.7?`
6,?-.7?`
SAPI.DLLK04e
SAPI.DLLK04e
506:6?6[
506:6?6[
8(83888?
8(83888?
>,?0?4?8?
>,?0?4?8?
.net4x7
.net4x7
.Crz03
.Crz03
hÕ@e
hÕ@e
:;.ofSb
:;.ofSb
R.of'z
R.of'z
B{.zS,y
B{.zS,y
6o.ob#
6o.ob#
Ftpf
Ftpf
PIpE
PIpE
.Sj_^
.Sj_^
.vCb'PK
.vCb'PK
WlCmd
WlCmd
l%u$}0
l%u$}0
Jy%s2;J
Jy%s2;J
x-d}X
x-d}X
_~.SO
_~.SO
'.Sj?
'.Sj?
.Increm
.Increm
WinExe&Copy
WinExe&Copy
.DIBi
.DIBi
uDPtoLPNq`n
uDPtoLPNq`n
fo@@UAE@XZ.on
fo@@UAE@XZ.on
ad.boa
ad.boa
.DD-?J8
.DD-?J8
1,//2/,/
1,//2/,/
7G#V%F
7G#V%F
(.text
(.text
@.tp0
@.tp0
{43C6DBBB-BEAD-4DFB-B6D2-52C5CDB5B70A} = s 'Dm'
{43C6DBBB-BEAD-4DFB-B6D2-52C5CDB5B70A} = s 'Dm'
'Dm.EXE'
'Dm.EXE'
val AppID = s {43C6DBBB-BEAD-4DFB-B6D2-52C5CDB5B70A}
val AppID = s {43C6DBBB-BEAD-4DFB-B6D2-52C5CDB5B70A}
dm.dmsoft = s 'dm.dmsoft'
dm.dmsoft = s 'dm.dmsoft'
CLSID = s '{26037A0E-7CBD-4FFF-9C63-56F2D0770214}'
CLSID = s '{26037A0E-7CBD-4FFF-9C63-56F2D0770214}'
CurVer = s 'dm.dmsoft'
CurVer = s 'dm.dmsoft'
ForceRemove {26037A0E-7CBD-4FFF-9C63-56F2D0770214} = s 'dm.dmsoft'
ForceRemove {26037A0E-7CBD-4FFF-9C63-56F2D0770214} = s 'dm.dmsoft'
ProgID = s 'dm.dmsoft'
ProgID = s 'dm.dmsoft'
stdole2.tlbWWW
stdole2.tlbWWW
~cmdWd
~cmdWd
KeyPress
KeyPress
.aKeyDownWd
.aKeyDownWd
MKeyUpWWWd
MKeyUpWWWd
ShowScrMsgWW
ShowScrMsgWW
msgWd
msgWd
SetShowErrorMsgW
SetShowErrorMsgW
>SGetWindowStateWW
>SGetWindowStateWW
U@SetWindowSizeWWWd
U@SetWindowSizeWWWd
SetWindowStateWWd
SetWindowStateWWd
iRSetKeypadDelayWWd
iRSetKeypadDelayWWd
BkeypadWW
BkeypadWW
SetExportDictWWWd
SetExportDictWWWd
keyWd
keyWd
FindWindowSuperW
FindWindowSuperW
qHKeyDownCharW
qHKeyDownCharW
pOkey_strWd
pOkey_strWd
KeyUpCharWWWd
KeyUpCharWWWd
KeyPressChard
KeyPressChard
KeyPressStrWd
KeyPressStrWd
EnableKeypadPatchWWWd
EnableKeypadPatchWWWd
=PEnableKeypadSyncd
=PEnableKeypadSyncd
EnableRealKeypadd
EnableRealKeypadd
GetKeyStateWd
GetKeyStateWd
[.ReadFiled
[.ReadFiled
WaitKeyW
WaitKeyW
!key_coded
!key_coded
joEnumWindowSuperW
joEnumWindowSuperW
urlW
urlW
=EnableKeypadMsgWd
=EnableKeypadMsgWd
EnableMouseMsgWWd
EnableMouseMsgWWd
method KeyPressWWW
method KeyPressWWW
method KeyDown
method KeyDown
method KeyUpWW
method KeyUpWW
method ShowScrMsgW
method ShowScrMsgW
method SetShowErrorMsg
method SetShowErrorMsg
method GetWindowStateW
method GetWindowStateW
method SetWindowSizeWW
method SetWindowSizeWW
method SetWindowStateW
method SetWindowStateW
method SetKeypadDelayW
method SetKeypadDelayW
method SetExportDictWW
method SetExportDictWW
method FindWindowSuper
method FindWindowSuper
method KeyDownChar
method KeyDownChar
method KeyUpCharWW
method KeyUpCharWW
method KeyPressCharWWW
method KeyPressCharWWW
method KeyPressStr
method KeyPressStr
method EnableKeypadPatchWW
method EnableKeypadPatchWW
method EnableKeypadSyncWWW
method EnableKeypadSyncWWW
method EnableRealKeypadWWW
method EnableRealKeypadWWW
method GetKeyState
method GetKeyState
method WaitKey
method WaitKey
method EnumWindowSuper
method EnumWindowSuper
method EnableKeypadMsg
method EnableKeypadMsg
method EnableMouseMsgW
method EnableMouseMsgW
KERNEL32.DLL
KERNEL32.DLL
MFC42.DLL
MFC42.DLL
MSVCRT.dll
MSVCRT.dll
VERSION.dll
VERSION.dll
dm.dll
dm.dll
\dm.dll
\dm.dll
F9121242478$5$0.0.17$9
F9121242478$5$0.0.17$9
80901002004000001FC444908FE0$10$0.0.26$9
80901002004000001FC444908FE0$10$0.0.26$9
7F1112423F8$0$0.0.20$9
7F1112423F8$0$0.0.20$9
80901002004$1$0.0.6$9
80901002004$1$0.0.6$9
809010020040000010E424888E10$12$0.0.20$9
809010020040000010E424888E10$12$0.0.20$9
43909222384000001FC444908FE0$20$0.0.34$9
43909222384000001FC444908FE0$20$0.0.34$9
$0.0.41$11
$0.0.41$11
F9121242478000001FC444908FE0$50$0.0.37$9
F9121242478000001FC444908FE0$50$0.0.37$9
$0.0.213$11
$0.0.213$11
$0.0.148$11
$0.0.148$11
$0.0.34$10
$0.0.34$10
$0.0.30$10
$0.0.30$10
$0.0.84$10
$0.0.84$10
$0.0.32$11
$0.0.32$11
$0.0.188$11
$0.0.188$11
80901002004000003E44849091E0$15$0.0.23$9
80901002004000003E44849091E0$15$0.0.23$9
$0.0.209$11
$0.0.209$11
$0.0.70$10
$0.0.70$10
$0.0.58$10
$0.0.58$10
$0.0.60$6
$0.0.60$6
$0.0.49$6
$0.0.49$6
$0.0.26$7
$0.0.26$7
$0.0.24$10
$0.0.24$10
$0.0.37$10
$0.0.37$10
$0.0.23$12
$0.0.23$12
$0.0.74$12
$0.0.74$12
$0.0.211$11
$0.0.211$11
$0.0.167$11
$0.0.167$11
$0.0.214$11
$0.0.214$11
$0.0.208$11
$0.0.208$11
$0.0.193$11
$0.0.193$11
$0.0.202$11
$0.0.202$11
$0.0.256$11
$0.0.256$11
$0.0.218$11
$0.0.218$11
$0.0.64$10
$0.0.64$10
$0.0.224$11
$0.0.224$11
$0.0.164$11
$0.0.164$11
$0.0.129$11
$0.0.129$11
$0.0.140$11
$0.0.140$11
$0.0.99$11
$0.0.99$11
$0.0.116$11
$0.0.116$11
$0.0.242$11
$0.0.242$11
$0.0.97$10
$0.0.97$10
C1111262378$3$0.0.16$9
C1111262378$3$0.0.16$9
$0.0.101$10
$0.0.101$10
$0.0.26$4
$0.0.26$4
$0.0.227$11
$0.0.227$11
$0.0.81$11
$0.0.81$11
$0.0.139$10
$0.0.139$10
$0.0.198$11
$0.0.198$11
$0.0.261$11
$0.0.261$11
1/1$0.0.123$11
1/1$0.0.123$11
$0.0.117$11
$0.0.117$11
$0.0.238$11
$0.0.238$11
$0.0.113$11
$0.0.113$11
$0.0.168$10
$0.0.168$10
$0.0.86$13
$0.0.86$13
$0.0.83$10
$0.0.83$10
1$0.0.279$11
1$0.0.279$11
$0.0.173$11
$0.0.173$11
$0.0.217$11
$0.0.217$11
$0.0.177$11
$0.0.177$11
$0.0.215$11
$0.0.215$11
$0.0.50$9
$0.0.50$9
$0.0.72$14
$0.0.72$14
$0.0.119$10
$0.0.119$10
$0.0.98$10
$0.0.98$10
$0.0.57$13
$0.0.57$13
$0.0.67$13
$0.0.67$13
$0.0.110$10
$0.0.110$10
$0.0.141$10
$0.0.141$10
12/12$0.0.188$11
12/12$0.0.188$11
12/12$0.0.160$11
12/12$0.0.160$11
12/12$0.0.191$11
12/12$0.0.191$11
$0.0.138$10
$0.0.138$10
$0.0.120$10
$0.0.120$10
$0.0.53$10
$0.0.53$10
$0.0.82$10
$0.0.82$10
$0.0.147$10
$0.0.147$10
$0.0.179$11
$0.0.179$11
$0.0.141$11
$0.0.141$11
$0.0.11$6
$0.0.11$6
$0.0.31$8
$0.0.31$8
$0.0.22$5
$0.0.22$5
$0.0.130$11
$0.0.130$11
$0.0.50$5
$0.0.50$5
$0.0.121$11
$0.0.121$11
2$0.0.18$3
2$0.0.18$3
$0.0.58$3
$0.0.58$3
$0.0.118$10
$0.0.118$10
$0.0.47$10
$0.0.47$10
$0.0.60$10
$0.0.60$10
$0.0.65$10
$0.0.65$10
$0.0.79$10
$0.0.79$10
$0.0.66$10
$0.0.66$10
$0.0.103$10
$0.0.103$10
$0.0.71$10
$0.0.71$10
$0.0.44$10
$0.0.44$10
$0.0.87$10
$0.0.87$10
$0.0.112$10
$0.0.112$10
$0.0.78$10
$0.0.78$10
$0.0.73$10
$0.0.73$10
$0.0.69$10
$0.0.69$10
$0.0.36$9
$0.0.36$9
$0.0.22$6
$0.0.22$6
$0.0.240$11
$0.0.240$11
$0.0.55$10
$0.0.55$10
$0.0.250$11
$0.0.250$11
$0.0.125$11
$0.0.125$11
$0.0.101$11
$0.0.101$11
$0.0.57$11
$0.0.57$11
$0.0.146$10
$0.0.146$10
0/1$0.0.182$11
0/1$0.0.182$11
1/1$0.0.168$11
1/1$0.0.168$11
$0.0.108$10
$0.0.108$10
$0.0.135$10
$0.0.135$10
$0.0.125$10
$0.0.125$10
0/5$0.0.143$11
0/5$0.0.143$11
5/5$0.0.140$11
5/5$0.0.140$11
$0.0.114$10
$0.0.114$10
1/1$0.0.136$11
1/1$0.0.136$11
$0.0.59$10
$0.0.59$10
$0.0.81$10
$0.0.81$10
$0.0.121$10
$0.0.121$10
$0.0.117$10
$0.0.117$10
$0.0.144$10
$0.0.144$10
$0.0.143$10
$0.0.143$10
5/5$0.0.137$11
5/5$0.0.137$11
$0.0.123$10
$0.0.123$10
$0.0.127$11
$0.0.127$11
$0.0.134$10
$0.0.134$10
$0.0.56$10
$0.0.56$10
10/10$0.0.169$11
10/10$0.0.169$11
$0.0.131$10
$0.0.131$10
$0.0.142$10
$0.0.142$10
$0.0.48$10
$0.0.48$10
10/10$0.0.177$11
10/10$0.0.177$11
$0.0.132$10
$0.0.132$10
$0.0.116$10
$0.0.116$10
$0.0.153$10
$0.0.153$10
$0.0.171$10
$0.0.171$10
$0.0.156$10
$0.0.156$10
$0.0.130$10
$0.0.130$10
$0.0.71$11
$0.0.71$11
$0.0.156$11
$0.0.156$11
$0.0.111$10
$0.0.111$10
$0.0.170$10
$0.0.170$10
$0.0.109$10
$0.0.109$10
20$0.0.247$11
20$0.0.247$11
$0.0.136$10
$0.0.136$10
$0.0.133$10
$0.0.133$10
$0.0.122$10
$0.0.122$10
$0.0.72$10
$0.0.72$10
1/1$0.0.68$11
1/1$0.0.68$11
$0.0.164$10
$0.0.164$10
$0.0.42$10
$0.0.42$10
$0.0.127$10
$0.0.127$10
80901002004000001FC444908FE0000007F1112423F8$100$0.0.46$9
80901002004000001FC444908FE0000007F1112423F8$100$0.0.46$9
$0.0.150$11
$0.0.150$11
$0.0.151$11
$0.0.151$11
$0.0.171$11
$0.0.171$11
$0.0.96$10
$0.0.96$10
$0.0.107$10
$0.0.107$10
$0.0.195$11
$0.0.195$11
$0.0.234$11
$0.0.234$11
$0.0.169$10
$0.0.169$10
$0.0.129$10
$0.0.129$10
$0.0.142$11
$0.0.142$11
$0.0.211$10
$0.0.211$10
$0.0.86$11
$0.0.86$11
$0.0.62$11
$0.0.62$11
$0.0.231$11
$0.0.231$11
$0.0.203$11
$0.0.203$11
$0.0.265$11
$0.0.265$11
$0.0.296$11
$0.0.296$11
$0.0.311$11
$0.0.311$11
$0.0.285$11
$0.0.285$11
3/3$0.0.139$11
3/3$0.0.139$11
$0.0.196$11
$0.0.196$11
$0.0.96$11
$0.0.96$11
$0.0.105$11
$0.0.105$11
$0.0.200$11
$0.0.200$11
$0.0.119$11
$0.0.119$11
$0.0.131$11
$0.0.131$11
$0.0.199$11
$0.0.199$11
$0.0.157$11
$0.0.157$11
$0.0.267$11
$0.0.267$11
$0.0.160$11
$0.0.160$11
$0.0.122$11
$0.0.122$11
$0.0.133$11
$0.0.133$11
$0.0.149$11
$0.0.149$11
$0.0.216$11
$0.0.216$11
$0.0.232$11
$0.0.232$11
$0.0.136$11
$0.0.136$11
$0.0.304$11
$0.0.304$11
$0.0.155$10
$0.0.155$10
$0.0.54$10
$0.0.54$10
$0.0.86$10
$0.0.86$10
$0.0.106$10
$0.0.106$10
$0.0.134$11
$0.0.134$11
$0.0.45$10
$0.0.45$10
$0.0.49$10
$0.0.49$10
$0.0.139$11
$0.0.139$11
43909222384$2$0.0.14$9
43909222384$2$0.0.14$9
$0.0.166$10
$0.0.166$10
$0.0.114$11
$0.0.114$11
$0.0.73$14
$0.0.73$14
$0.0.162$10
$0.0.162$10
$0.0.208$10
$0.0.208$10
$0.0.145$11
$0.0.145$11
$0.0.176$11
$0.0.176$11
$0.0.204$11
$0.0.204$11
$0.0.239$11
$0.0.239$11
$0.0.63$13
$0.0.63$13
$0.0.94$10
$0.0.94$10
$0.0.46$12
$0.0.46$12
80100200C0180310240500800000000000000000000000000000000000000000000004000120240400000000000889112220000000005242084108210420B412A2504A2000000202444889112224448891122040$CE$0.0.84$11
80100200C0180310240500800000000000000000000000000000000000000000000004000120240400000000000889112220000000005242084108210420B412A2504A2000000202444889112224448891122040$CE$0.0.84$11
18$0.0.291$11
18$0.0.291$11
3$0.0.276$11
3$0.0.276$11
6$0.0.280$11
6$0.0.280$11
9$0.0.280$11
9$0.0.280$11
12$0.0.288$11
12$0.0.288$11
15$0.0.290$11
15$0.0.290$11
21$0.0.288$11
21$0.0.288$11
$0.0.192$11
$0.0.192$11
$0.0.297$11
$0.0.297$11
$0.0.46$10
$0.0.46$10
$0.0.328$11
$0.0.328$11
$0.0.102$10
$0.0.102$10
$0.0.112$11
$0.0.112$11
$0.0.167$10
$0.0.167$10
$0.0.61$10
$0.0.61$10
$0.0.68$10
$0.0.68$10
$0.0.111$11
$0.0.111$11
$0.0.35$11
$0.0.35$11
$0.0.77$10
$0.0.77$10
$0.0.115$10
$0.0.115$10
$0.0.132$11
$0.0.132$11
$0.0.62$10
$0.0.62$10
$0.0.221$11
$0.0.221$11
$0.0.158$11
$0.0.158$11
$0.0.124$10
$0.0.124$10
$0.0.52$10
$0.0.52$10
]$0.0.98$11
]$0.0.98$11
3F8889211FC0000000181C3818000000040480801002$0/1$0.0.36$11
3F8889211FC0000000181C3818000000040480801002$0/1$0.0.36$11
$0.0.318$14
$0.0.318$14
$0.0.51$5
$0.0.51$5
$0.0.100$5
$0.0.100$5
$0.0.191$10
$0.0.191$10
$0.0.252$11
$0.0.252$11
$0.0.247$11
$0.0.247$11
$0.0.245$11
$0.0.245$11
$0.0.146$11
$0.0.146$11
$0.0.63$10
$0.0.63$10
$0.0.145$10
$0.0.145$10
$0.0.60$11
$0.0.60$11
$0.0.347$14
$0.0.347$14
$0.2.87$14
$0.2.87$14
$0.0.209$10
$0.0.209$10
$0.0.25$10
$0.0.25$10
$0.0.21$11
$0.0.21$11
$0.0.67$11
$0.0.67$11
$0.0.94$11
$0.0.94$11
$0.0.182$10
$0.0.182$10
$0.0.212$11
$0.0.212$11
$0.0.175$11
$0.0.175$11
$0.0.147$11
$0.0.147$11
$0.0.152$11
$0.0.152$11
$0.0.54$11
$0.0.54$11
$0.0.266$11
$0.0.266$11
$0.0.251$11
$0.0.251$11
$0.0.258$11
$0.0.258$11
$0.0.293$11
$0.0.293$11
$0.0.65$11
$0.0.65$11
$0.0.154$11
$0.0.154$11
24$0.0.293$11
24$0.0.293$11
7F1112223F8$8$0.0.20$9
7F1112223F8$8$0.0.20$9
8090C2E0600$7$0.0.11$9
8090C2E0600$7$0.0.11$9
0E0643C87FC$4$0.0.20$9
0E0643C87FC$4$0.0.20$9
7F121242278$6$0.0.18$9
7F121242278$6$0.0.18$9
791092123F8$9$0.0.18$9
791092123F8$9$0.0.18$9
2$0.0.16$8
2$0.0.16$8
6$0.0.19$8
6$0.0.19$8
1$0.0.11$8
1$0.0.11$8
0$0.0.22$8
0$0.0.22$8
4$0.0.16$8
4$0.0.16$8
5$0.0.18$8
5$0.0.18$8
7$0.0.13$8
7$0.0.13$8
8$0.0.19$8
8$0.0.19$8
3$0.0.15$8
3$0.0.15$8
9$0.0.19$8
9$0.0.19$8
$0.0.48$11
$0.0.48$11
$0.0.255$11
$0.0.255$11
$0.0.333$11
$0.0.333$11
$0.0.278$11
$0.0.278$11
$0.0.260$11
$0.0.260$11
$0.0.253$11
$0.0.253$11
$0.0.287$11
$0.0.287$11
$0.0.365$11
$0.0.365$11
$0.0.310$11
$0.0.310$11
$0.0.33$10
$0.0.33$10
$0.0.42$11
$0.0.42$11
$0.0.79$6
$0.0.79$6
80981002004$1$0.0.7$9
80981002004$1$0.0.7$9
C31112623F8$3$0.0.18$9
C31112623F8$3$0.0.18$9
0E0643D87FC$4$0.0.21$9
0E0643D87FC$4$0.0.21$9
8190C2E0600$7$0.0.12$9
8190C2E0600$7$0.0.12$9
7F1312623F8$8$0.0.22$9
7F1312623F8$8$0.0.22$9
FF8410820F8$b$0.0.18$9
FF8410820F8$b$0.0.18$9
7C104208220$c$0.0.11$7
7C104208220$c$0.0.11$7
1C1442883F0$a$0.0.15$7
1C1442883F0$a$0.0.15$7
$0.0.89$10
$0.0.89$10
$0.0.84$11
$0.0.84$11
$0.0.148$10
$0.0.148$10
$0.0.91$10
$0.0.91$10
$0.0.140$10
$0.0.140$10
$0.0.186$11
$0.0.186$11
$0.0.89$14
$0.0.89$14
$0.0.55$13
$0.0.55$13
$0.0.92$10
$0.0.92$10
$0.0.75$10
$0.0.75$10
$0.0.113$10
$0.0.113$10
$0.0.88$10
$0.0.88$10
$0.0.51$13
$0.0.51$13
$0.0.321$11
$0.0.321$11
$0.0.353$11
$0.0.353$11
$0.0.104$10
$0.0.104$10
$0.0.286$11
$0.0.286$11
$0.0.158$10
$0.0.158$10
$0.0.326$11
$0.0.326$11
$0.0.86$14
$0.0.86$14
$0.0.159$10
$0.0.159$10
$0.0.50$11
$0.0.50$11
$0.0.244$11
$0.0.244$11
$0.0.98$11
$0.0.98$11
$0.0.249$11
$0.0.249$11
$0.0.163$11
$0.0.163$11
$0.0.237$11
$0.0.237$11
$0.0.364$11
$0.0.364$11
$0.0.51$10
$0.0.51$10
$0.0.181$11
$0.0.181$11
$0.0.166$11
$0.0.166$11
$0.0.183$11
$0.0.183$11
$0.0.165$11
$0.0.165$11
$0.0.264$11
$0.0.264$11
$0.0.153$11
$0.0.153$11
$0.0.28$10
$0.0.28$10
$1.0.285$14
$1.0.285$14
$0.0.303$13
$0.0.303$13
$0.0.280$11
$0.0.280$11
$0.0.262$14
$0.0.262$14
$0.0.326$14
$0.0.326$14
$0.0.435$14
$0.0.435$14
$0.1.144$14
$0.1.144$14
$0.0.100$11
$0.0.100$11
$0.0.333$14
$0.0.333$14
$0.0.317$14
$0.0.317$14
$0.0.238$14
$0.0.238$14
$0.0.334$14
$0.0.334$14
$1.0.137$14
$1.0.137$14
$0.0.305$11
$0.0.305$11
$0.0.272$10
$0.0.272$10
$0.0.120$11
$0.0.120$11
$0.0.143$11
$0.0.143$11
$0.0.104$11
$0.0.104$11
$0.0.85$11
$0.0.85$11
$0.0.191$11
$0.0.191$11
$0.0.68$14
$0.0.68$14
$0.0.74$14
$0.0.74$14
$0.0.80$14
$0.0.80$14
$0.0.65$13
$0.0.65$13
$0.0.62$13
$0.0.62$13
$0.0.62$14
$0.0.62$14
$0.0.59$14
$0.0.59$14
$0.0.80$13
$0.0.80$13
$0.0.79$14
$0.0.79$14
$0.0.53$14
$0.0.53$14
$0.0.76$14
$0.0.76$14
$0.0.88$14
$0.0.88$14
$0.0.84$14
$0.0.84$14
$0.0.81$14
$0.0.81$14
$0.0.44$14
$0.0.44$14
$0.0.64$14
$0.0.64$14
$0.0.59$13
$0.0.59$13
$0.0.61$14
$0.0.61$14
$0.0.58$13
$0.0.58$13
$0.0.72$13
$0.0.72$13
$0.0.75$14
$0.0.75$14
$1.1.47$12
$1.1.47$12
$0.0.51$14
$0.0.51$14
$0.0.93$10
$0.0.93$10
$0.0.50$10
$0.0.50$10
$0.0.36$10
$0.0.36$10
$0.0.39$11
$0.0.39$11
$0.0.100$10
$0.0.100$10
$0.0.31$10
$0.0.31$10
$0.0.19$7
$0.0.19$7
$0.0.15$10
$0.0.15$10
$0.0.84$13
$0.0.84$13
$0.0.26$11
$0.0.26$11
$0.0.22$10
$0.0.22$10
$0.0.74$13
$0.0.74$13
$1.0.66$13
$1.0.66$13
$0.0.82$14
$0.0.82$14
$0.0.158$14
$0.0.158$14
$0.0.99$10
$0.0.99$10
$0.0.91$11
$0.0.91$11
$0.0.28$9
$0.0.28$9
$0.0.99$14
$0.0.99$14
$0.0.82$13
$0.0.82$13
$0.0.77$14
$0.0.77$14
$0.0.90$14
$0.0.90$14
$0.0.68$13
$0.0.68$13
$0.0.29$11
$0.0.29$11
$0.0.50$14
$0.0.50$14
$0.0.154$10
$0.0.154$10
$0.0.70$14
$0.0.70$14
$0.0.90$10
$0.0.90$10
$0.0.272$11
$0.0.272$11
$0.0.135$11
$0.0.135$11
$0.0.268$11
$0.0.268$11
$0.0.105$10
$0.0.105$10
$0.0.95$10
$0.0.95$10
$0.0.22$9
$0.0.22$9
$1.0.57$14
$1.0.57$14
$0.0.168$11
$0.0.168$11
$0.0.110$11
$0.0.110$11
$0.0.190$11
$0.0.190$11
$0.0.56$11
$0.0.56$11
$0.0.43$11
$0.0.43$11
$0.0.55$11
$0.0.55$11
$0.0.103$11
$0.0.103$11
$0.0.197$11
$0.0.197$11
$0.0.15$7
$0.0.15$7
$0.0.33$11
$0.0.33$11
$0.0.32$10
$0.0.32$10
$0.0.291$11
$0.0.291$11
$0.0.78$13
$0.0.78$13
$0.0.50$13
$0.0.50$13
$0.0.138$11
$0.0.138$11
$0.1.76$14
$0.1.76$14
$0.0.87$11
$0.0.87$11
$0.0.341$11
$0.0.341$11
2$0.0.284$11
2$0.0.284$11
4$0.0.284$11
4$0.0.284$11
$0.0.78$14
$0.0.78$14
$0.0.76$10
$0.0.76$10
$0.0.54$13
$0.0.54$13
$0.0.184$10
$0.0.184$10
$0.0.128$10
$0.0.128$10
$0.0.66$14
$0.0.66$14
15$0.0.29$8
15$0.0.29$8
$0.0.282$11
$0.0.282$11
$0.0.12$2
$0.0.12$2
$0.0.63$11
$0.0.63$11
$0.0.75$11
$0.0.75$11
$0.0.69$14
$0.0.69$14
$0.0.13$13
$0.0.13$13
_B$0.0.136$10
_B$0.0.136$10
_B$0.0.117$10
_B$0.0.117$10
_B$0.0.149$10
_B$0.0.149$10
_B$0.0.167$10
_B$0.0.167$10
_B$0.0.140$10
_B$0.0.140$10
_B$0.0.119$10
_B$0.0.119$10
$0.0.207$11
$0.0.207$11
_B$0.0.151$10
_B$0.0.151$10
_B$0.0.138$10
_B$0.0.138$10
$0.0.235$11
$0.0.235$11
_B$0.0.156$10
_B$0.0.156$10
$0.0.230$11
$0.0.230$11
006070E0600$/$0.0.10$11
006070E0600$/$0.0.10$11
_B$0.0.161$10
_B$0.0.161$10
_B$0.0.148$10
_B$0.0.148$10
_B$0.0.141$10
_B$0.0.141$10
$0.0.306$11
$0.0.306$11
$0.0.319$14
$0.0.319$14
$0.0.262$11
$0.0.262$11
_B$0.0.169$10
_B$0.0.169$10
$0.0.23$3
$0.0.23$3
_B$0.0.108$10
_B$0.0.108$10
_B$0.0.124$10
_B$0.0.124$10
$0.0.35$5
$0.0.35$5
$0.0.52$2
$0.0.52$2
$0.0.39$6
$0.0.39$6
$0.0.27$5
$0.0.27$5
_B$0.0.121$10
_B$0.0.121$10
$0.0.8$4
$0.0.8$4
$0.0.56$17
$0.0.56$17
5$0.0.51$14
5$0.0.51$14
1$0.0.20$9
1$0.0.20$9
2$0.0.18$9
2$0.0.18$9
3$0.0.21$9
3$0.0.21$9
4$0.0.24$9
4$0.0.24$9
5$0.0.15$7
5$0.0.15$7
6$0.0.25$9
6$0.0.25$9
7$0.0.7$9
7$0.0.7$9
8$0.0.31$9
8$0.0.31$9
$0.0.210$11
$0.0.210$11
$0.0.351$11
$0.0.351$11
$0.0.159$11
$0.0.159$11
$0.0.144$11
$0.0.144$11
$0.0.137$11
$0.0.137$11
$0.0.201$11
$0.0.201$11
$0.0.41$7
$0.0.41$7
$0.0.38$10
$0.0.38$10
$0.0.44$11
$0.0.44$11
$0.0.66$11
$0.0.66$11
$0.0.59$11
$0.0.59$11
$0.0.45$11
$0.0.45$11
$0.0.36$11
$0.0.36$11
$0.0.83$11
$0.0.83$11
80100200400$-$0.0.4$1
80100200400$-$0.0.4$1
$0.0.162$11
$0.0.162$11
$0.0.254$11
$0.0.254$11
$0.0.126$10
$0.0.126$10
$0.0.190$10
$0.0.190$10
$0.0.233$11
$0.0.233$11
$0.0.248$11
$0.0.248$11
0$0.0.18$8
0$0.0.18$8
1$0.0.42$11
1$0.0.42$11
2$0.0.47$11
2$0.0.47$11
3$0.0.51$10
3$0.0.51$10
4$0.0.57$11
4$0.0.57$11
5$0.0.55$11
5$0.0.55$11
6$0.0.62$11
6$0.0.62$11
7$0.0.42$11
7$0.0.42$11
8$0.0.63$10
8$0.0.63$10
$0.0.284$9
$0.0.284$9
$0.0.26$8
$0.0.26$8
$0.0.287$14
$0.0.287$14
1$0.0.41$14
1$0.0.41$14
2$0.0.19$10
2$0.0.19$10
$0.0.99$20
$0.0.99$20
$0.0.29$7
$0.0.29$7
$0.0.27$13
$0.0.27$13
$0.0.9$8
$0.0.9$8
FD0$!$0.0.7$8
FD0$!$0.0.7$8
2405E3D0178F40480$#$0.0.24$8
2405E3D0178F40480$#$0.0.24$8
601261B01B0C900C0$%$0.0.20$8
601261B01B0C900C0$%$0.0.20$8
3F0812010$($0.0.10$10
3F0812010$($0.0.10$10
804810FC0$)$0.0.10$10
804810FC0$)$0.0.10$10
480603F0180480$*$0.0.14$6
480603F0180480$*$0.0.14$6
100203F8080100$ $0.0.11$7
100203F8080100$ $0.0.11$7
80100200400800$-$0.0.5$1
80100200400800$-$0.0.5$1
00407030380800$/$0.0.10$10
00407030380800$/$0.0.10$10
6310A224488610$2$0.0.16$8
6310A224488610$2$0.0.16$8
421022444886E0$3$0.0.15$8
421022444886E0$3$0.0.15$8
080681107F8050$4$0.0.16$8
080681107F8050$4$0.0.16$8
F21222444888E0$5$0.0.18$8
F21222444888E0$5$0.0.18$8
7E1222446880E0$6$0.0.19$8
7E1222446880E0$6$0.0.19$8
C010027C700800$7$0.0.13$8
C010027C700800$7$0.0.13$8
6E1222444886E0$8$0.0.19$8
6E1222444886E0$8$0.0.19$8
701162244487E0$9$0.0.19$8
701162244487E0$9$0.0.19$8
08028088208808$
08028088208808$
90120240480900$=$0.0.10$4
90120240480900$=$0.0.10$4
808820880A0080$>$0.0.9$9
808820880A0080$>$0.0.9$9
60100234480600$?$0.0.11$8
60100234480600$?$0.0.11$8
7E1022745287D0$@$0.0.23$8
7E1022745287D0$@$0.0.23$8
0103E3901E0070020$A$0.0.18$8
0103E3901E0070020$A$0.0.18$8
811FE2444886E0$B$0.0.21$8
811FE2444886E0$B$0.0.21$8
7E102204408C20$C$0.0.15$8
7E102204408C20$C$0.0.15$8
811FE2044087E0$D$0.0.20$8
811FE2044087E0$D$0.0.20$8
811FE2445C8C30$E$0.0.22$8
811FE2445C8C30$E$0.0.22$8
811FE2445C0C00$F$0.0.19$8
811FE2445C0C00$F$0.0.19$8
3C084204448CE0100$G$0.0.17$8
3C084204448CE0100$G$0.0.17$8
811FE040080FF1020$H$0.0.22$8
811FE040080FF1020$H$0.0.22$8
811023FC408810$I$0.0.16$8
811023FC408810$I$0.0.16$8
019012027F8801000$J$0.0.16$9
019012027F8801000$J$0.0.16$9
811FE244160C31020$K$0.0.22$8
811FE244160C31020$K$0.0.22$8
811FE204008010060$L$0.0.16$8
811FE204008010060$L$0.0.16$8
FF1E003C780FF0$M$0.0.28$8
FF1E003C780FF0$M$0.0.28$8
811FE0C4460FF1000$N$0.0.25$8
811FE0C4460FF1000$N$0.0.25$8
811FE244480600$P$0.0.17$8
811FE244480600$P$0.0.17$8
7E10A21441C7E8$Q$0.0.23$9
7E10A21441C7E8$Q$0.0.23$9
811FE2444C0670020$R$0.0.22$8
811FE2444C0670020$R$0.0.22$8
63122244448C60$S$0.0.17$8
63122244448C60$S$0.0.17$8
C01023FC408C00$T$0.0.16$8
C01023FC408C00$T$0.0.16$8
801FC004008FE1000$U$0.0.18$8
801FC004008FE1000$U$0.0.18$8
801F001C0E0E01000$V$0.0.16$8
801F001C0E0E01000$V$0.0.16$8
E003E3C00F8E00$W$0.0.20$8
E003E3C00F8E00$W$0.0.20$8
811CE060738810$X$0.0.18$8
811CE060738810$X$0.0.18$8
801C207C708800$Y$0.0.15$8
801C207C708800$Y$0.0.15$8
C110E264708830$Z$0.0.18$8
C110E264708830$Z$0.0.18$8
FFD00A010$[$0.0.14$10
FFD00A010$[$0.0.14$10
E003001C004$\$0.0.9$9
E003001C004$\$0.0.9$9
80500BFF0$]$0.0.14$10
80500BFF0$]$0.0.14$10
401001000$^$0.0.3$2
401001000$^$0.0.3$2
80100200400801000$_$0.0.6$1
80100200400801000$_$0.0.6$1
501502A03C0080$a$0.0.13$5
501502A03C0080$a$0.0.13$5
801FE0440880E0$b$0.0.16$8
801FE0440880E0$b$0.0.16$8
70110220640$c$0.0.10$5
70110220640$c$0.0.10$5
0E0222447F8010$d$0.0.17$8
0E0222447F8010$d$0.0.17$8
701502A0340$e$0.0.12$5
701502A0340$e$0.0.12$5
110FE244488800$f$0.0.16$8
110FE244488800$f$0.0.16$8
5C1542A8650840$g$0.0.18$7
5C1542A8650840$g$0.0.18$7
811FE0440800F0020$h$0.0.18$8
811FE0440800F0020$h$0.0.18$8
1113E0040$i$0.0.9$8
1113E0040$i$0.0.9$8
004008414FC$j$0.0.11$10
004008414FC$j$0.0.11$10
811FE0140E0130220$k$0.0.20$8
811FE0140E0130220$k$0.0.20$8
811023FC008010$l$0.0.14$8
811023FC008010$l$0.0.14$8
F81003E0400780$m$0.0.16$5
F81003E0400780$m$0.0.16$5
881F0220400780100$n$0.0.15$5
881F0220400780100$n$0.0.15$5
70110220380$o$0.0.10$5
70110220380$o$0.0.10$5
821FC228440700$p$0.0.17$7
821FC228440700$p$0.0.17$7
701102287F0020$q$0.0.16$7
701102287F0020$q$0.0.16$7
881F0120400800$r$0.0.11$5
881F0120400800$r$0.0.11$5
C81502A04C0$s$0.0.12$5
C81502A04C0$s$0.0.12$5
201F8088010$t$0.0.10$7
201F8088010$t$0.0.10$7
801E0020440F80100$u$0.0.14$5
801E0020440F80100$u$0.0.14$5
801C0260180C01000$v$0.0.12$5
801C0260180C01000$v$0.0.12$5
C00703801C0C00$w$0.0.13$5
C00703801C0C00$w$0.0.13$5
881B00806C0880$x$0.0.13$5
881B00806C0880$x$0.0.13$5
821C4270180C01000$y$0.0.15$7
821C4270180C01000$y$0.0.15$7
88170320440$z$0.0.11$5
88170320440$z$0.0.11$5
081EFA010${$0.0.12$10
081EFA010${$0.0.12$10
FFE$|$0.0.12$12
FFE$|$0.0.12$12
805EF8200$}$0.0.12$10
805EF8200$}$0.0.12$10
40100100100200800$~$0.0.6$3
40100100100200800$~$0.0.6$3
$0.0.28$11
$0.0.28$11
$0.0.21$9
$0.0.21$9
$0.0.22$11
$0.0.22$11
$0.0.23$11
$0.0.23$11
$0.0.20$11
$0.0.20$11
$0.0.30$11
$0.0.30$11
$0.0.16$11
$0.0.16$11
$0.0.19$11
$0.0.19$11
V$0.0.23$10
V$0.0.23$10
$0.0.31$11
$0.0.31$11
$0.0.25$11
$0.0.25$11
$0.0.37$11
$0.0.37$11
$0.0.38$11
$0.0.38$11
$0.0.32$9
$0.0.32$9
$0.0.27$11
$0.0.27$11
$0.0.17$11
$0.0.17$11
$0.0.24$11
$0.0.24$11
$0.0.34$11
$0.0.34$11
$0.0.40$11
$0.0.40$11
$0.0.15$11
$0.0.15$11
$0.0.49$11
$0.0.49$11
$0.0.46$11
$0.0.46$11
$0.0.47$11
$0.0.47$11
$0.0.41$9
$0.0.41$9
$0.0.52$11
$0.0.52$11
$0.0.41$10
$0.0.41$10
F$0.0.59$11
F$0.0.59$11
$0.0.40$10
$0.0.40$10
$0.0.48$9
$0.0.48$9
$0.0.53$11
$0.0.53$11
$0.0.58$11
$0.0.58$11
$0.0.51$11
$0.0.51$11
$0.0.61$11
$0.0.61$11
f$0.0.46$11
f$0.0.46$11
\$0.0.42$11
\$0.0.42$11
_$0.0.46$11
_$0.0.46$11
`$0.0.51$11
`$0.0.51$11
g$0.0.40$11
g$0.0.40$11
W$0.0.48$11
W$0.0.48$11
\$0.0.38$11
\$0.0.38$11
d$0.0.55$11
d$0.0.55$11
x$0.0.40$11
x$0.0.40$11
a$0.0.45$11
a$0.0.45$11
$0.0.64$11
$0.0.64$11
D$0.0.56$11
D$0.0.56$11
V$0.0.41$11
V$0.0.41$11
b$0.0.40$11
b$0.0.40$11
I$0.0.47$11
I$0.0.47$11
h$0.0.49$11
h$0.0.49$11
l$0.0.49$11
l$0.0.49$11
e$0.0.47$11
e$0.0.47$11
d$0.0.38$11
d$0.0.38$11
h$0.0.58$11
h$0.0.58$11
i$0.0.48$11
i$0.0.48$11
$0.0.68$11
$0.0.68$11
L$0.0.50$11
L$0.0.50$11
F$0.0.51$11
F$0.0.51$11
P$0.0.51$11
P$0.0.51$11
M$0.0.46$11
M$0.0.46$11
C$0.0.57$11
C$0.0.57$11
A$0.0.44$11
A$0.0.44$11
t$0.0.44$11
t$0.0.44$11
t$0.0.49$11
t$0.0.49$11
\$0.0.49$11
\$0.0.49$11
$0.0.69$11
$0.0.69$11
Q$0.0.46$11
Q$0.0.46$11
N$0.0.61$11
N$0.0.61$11
r$0.0.50$11
r$0.0.50$11
g$0.0.57$11
g$0.0.57$11
o$0.0.60$11
o$0.0.60$11
i$0.0.57$11
i$0.0.57$11
j$0.0.48$11
j$0.0.48$11
m$0.0.47$11
m$0.0.47$11
s$0.0.50$11
s$0.0.50$11
s$0.0.59$11
s$0.0.59$11
S$0.0.44$11
S$0.0.44$11
M$0.0.40$11
M$0.0.40$11
f$0.0.47$11
f$0.0.47$11
]$0.0.54$11
]$0.0.54$11
h$0.0.52$11
h$0.0.52$11
k$0.0.51$11
k$0.0.51$11
E$0.0.52$11
E$0.0.52$11
b$0.0.51$11
b$0.0.51$11
q$0.0.58$11
q$0.0.58$11
n$0.0.50$11
n$0.0.50$11
b$0.0.55$11
b$0.0.55$11
|$0.0.53$11
|$0.0.53$11
y$0.0.51$11
y$0.0.51$11
^$0.0.54$11
^$0.0.54$11
B$0.0.59$11
B$0.0.59$11
l$0.0.51$11
l$0.0.51$11
m$0.0.53$11
m$0.0.53$11
_$0.0.47$11
_$0.0.47$11
@$0.0.52$11
@$0.0.52$11
B$0.0.51$11
B$0.0.51$11
D$0.0.59$11
D$0.0.59$11
A$0.0.46$11
A$0.0.46$11
e$0.0.57$11
e$0.0.57$11
U$0.0.51$11
U$0.0.51$11
V$0.0.58$11
V$0.0.58$11
Q$0.0.57$11
Q$0.0.57$11
L$0.0.56$11
L$0.0.56$11
I$0.0.41$11
I$0.0.41$11
$0.0.70$11
$0.0.70$11
~$0.0.48$11
~$0.0.48$11
$0.0.73$11
$0.0.73$11
a$0.0.54$11
a$0.0.54$11
b$0.0.58$11
b$0.0.58$11
E$0.0.61$11
E$0.0.61$11
S$0.0.52$11
S$0.0.52$11
^$0.0.59$11
^$0.0.59$11
R$0.0.52$11
R$0.0.52$11
a$0.0.50$11
a$0.0.50$11
B$0.0.54$11
B$0.0.54$11
T$0.0.52$11
T$0.0.52$11
d$0.0.65$11
d$0.0.65$11
O$0.0.66$11
O$0.0.66$11
G$0.0.46$11
G$0.0.46$11
e$0.0.55$11
e$0.0.55$11
g$0.0.55$11
g$0.0.55$11
a$0.0.59$11
a$0.0.59$11
E$0.0.55$11
E$0.0.55$11
h$0.0.64$11
h$0.0.64$11
G$0.0.52$11
G$0.0.52$11
}$0.0.61$11
}$0.0.61$11
u$0.0.58$11
u$0.0.58$11
c$0.0.53$11
c$0.0.53$11
c$0.0.56$11
c$0.0.56$11
N$0.0.68$11
N$0.0.68$11
$0.0.76$11
$0.0.76$11
$0.0.72$11
$0.0.72$11
F$0.0.62$11
F$0.0.62$11
Y$0.0.50$11
Y$0.0.50$11
K$0.0.68$11
K$0.0.68$11
C$0.0.54$11
C$0.0.54$11
o$0.0.70$11
o$0.0.70$11
j$0.0.55$11
j$0.0.55$11
I$0.0.65$11
I$0.0.65$11
Y$0.0.58$11
Y$0.0.58$11
r$0.0.59$11
r$0.0.59$11
u$0.0.59$11
u$0.0.59$11
W$0.0.58$11
W$0.0.58$11
f$0.0.56$11
f$0.0.56$11
s$0.0.57$11
s$0.0.57$11
X$0.0.55$11
X$0.0.55$11
J$0.0.64$11
J$0.0.64$11
$0.0.74$11
$0.0.74$11
d$0.0.61$11
d$0.0.61$11
@$0.0.65$11
@$0.0.65$11
o$0.0.49$11
o$0.0.49$11
J$0.0.49$11
J$0.0.49$11
$0.0.77$11
$0.0.77$11
e$0.0.56$11
e$0.0.56$11
t$0.0.69$11
t$0.0.69$11
@$0.0.54$11
@$0.0.54$11
}$0.0.56$11
}$0.0.56$11
{$0.0.74$11
{$0.0.74$11
`$0.0.57$11
`$0.0.57$11
V$0.0.54$11
V$0.0.54$11
@$0.0.49$11
@$0.0.49$11
H$0.0.59$11
H$0.0.59$11
{$0.0.64$11
{$0.0.64$11
b$0.0.54$11
b$0.0.54$11
k$0.0.54$11
k$0.0.54$11
\$0.0.62$11
\$0.0.62$11
g$0.0.59$11
g$0.0.59$11
R$0.0.58$11
R$0.0.58$11
N$0.0.60$11
N$0.0.60$11
B$0.0.60$11
B$0.0.60$11
C$0.0.59$11
C$0.0.59$11
q$0.0.69$11
q$0.0.69$11
v$0.0.65$11
v$0.0.65$11
M$0.0.59$11
M$0.0.59$11
]$0.0.52$11
]$0.0.52$11
]$0.0.60$11
]$0.0.60$11
k$0.0.59$11
k$0.0.59$11
\$0.0.54$11
\$0.0.54$11
J$0.0.71$11
J$0.0.71$11
e$0.0.62$11
e$0.0.62$11
E$0.0.60$11
E$0.0.60$11
l$0.0.59$11
l$0.0.59$11
m$0.0.65$11
m$0.0.65$11
n$0.0.60$11
n$0.0.60$11
P$0.0.63$11
P$0.0.63$11
Z$0.0.56$11
Z$0.0.56$11
[$0.0.62$11
[$0.0.62$11
U$0.0.56$11
U$0.0.56$11
V$0.0.63$11
V$0.0.63$11
H$0.0.68$11
H$0.0.68$11
$0.0.78$11
$0.0.78$11
y$0.0.66$11
y$0.0.66$11
G$0.0.65$11
G$0.0.65$11
H$0.0.54$11
H$0.0.54$11
]$0.0.58$11
]$0.0.58$11
Q$0.0.59$11
Q$0.0.59$11
v$0.0.73$11
v$0.0.73$11
S$0.0.55$11
S$0.0.55$11
O$0.0.62$11
O$0.0.62$11
b$0.0.62$11
b$0.0.62$11
B$0.0.67$11
B$0.0.67$11
t$0.0.64$11
t$0.0.64$11
Y$0.0.65$11
Y$0.0.65$11
m$0.0.56$11
m$0.0.56$11
[$0.0.63$11
[$0.0.63$11
k$0.0.66$11
k$0.0.66$11
H$0.0.69$11
H$0.0.69$11
G$0.0.71$11
G$0.0.71$11
s$0.0.60$11
s$0.0.60$11
q$0.0.65$11
q$0.0.65$11
e$0.0.67$11
e$0.0.67$11
G$0.0.68$11
G$0.0.68$11
J$0.0.61$11
J$0.0.61$11
$0.0.79$11
$0.0.79$11
Z$0.0.69$11
Z$0.0.69$11
f$0.0.63$11
f$0.0.63$11
H$0.0.71$11
H$0.0.71$11
i$0.0.61$11
i$0.0.61$11
c$0.0.71$11
c$0.0.71$11
j$0.0.57$11
j$0.0.57$11
]$0.0.72$11
]$0.0.72$11
K$0.0.66$11
K$0.0.66$11
A$0.0.63$11
A$0.0.63$11
Q$0.0.73$11
Q$0.0.73$11
7E10A2645087E0$0$0.0.22$8
7E10A2645087E0$0$0.0.22$8
411FE0040$1$0.0.11$8
411FE0040$1$0.0.11$8
\zks.dll
\zks.dll
.txt|*.txt
.txt|*.txt
477105024 123456 1
477105024 123456 1
windows
windows
1400|2200
1400|2200
].txt
].txt
9.tdj.h
9.tdj.h
hCRTkP
hCRTkP
hCRTrS
hCRTrS
hCRTgS
hCRTgS
hCRTbS
hCRTbS
CRTr
CRTr
CRTg
CRTg
CRTb
CRTb
lFtP
lFtP
tcpO
tcpO
tcpOt1
tcpOt1
tcpOtQ
tcpOtQ
tcpOtN
tcpOtN
tcpOt.
tcpOt.
operator
operator
GetProcessWindowStation
GetProcessWindowStation
Multipage Encode, Unsupported operation for this format
Multipage Encode, Unsupported operation for this format
Page %d
Page %d
Save PSD not supported
Save PSD not supported
Save RAW not supported
Save RAW not supported
Save WMF not supported
Save WMF not supported
Unsupported WBMP type
Unsupported WBMP type
1.5.0
1.5.0
compression type not supported
compression type not supported
Portable Graymap/Pixmap (PNM)
Portable Graymap/Pixmap (PNM)
? %s %s %d %ld %ld
? %s %s %d %ld %ld
error: BMP format does not support color space
error: BMP format does not support color space
tileno = %d; len = %d; partno = %d; numparts = %d
tileno = %d; len = %d; partno = %d; numparts = %d
prec[%d] = %d; sgnd[%d] = %d; hsamp[%d] = %d; vsamp[%d] = %d
prec[%d] = %d; sgnd[%d] = %d; hsamp[%d] = %d; vsamp[%d] = %d
tilewidth = %d; tileheight = %d; tilexoff = %d; tileyoff = %d;
tilewidth = %d; tileheight = %d; tilexoff = %d; tileyoff = %d;
width = %d; height = %d; xoff = %d; yoff = %d;
width = %d; height = %d; xoff = %d; yoff = %d;
caps = 0xx;
caps = 0xx;
prcwidth[%d] = %d, prcheight[%d] = %d
prcwidth[%d] = %d, prcheight[%d] = %d
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx;
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx;
prg = %d; numlyrs = %d;
prg = %d; numlyrs = %d;
numdlvls = %d; qmfbid = %d; mctrans = %d
numdlvls = %d; qmfbid = %d; mctrans = %d
csty = 0xx;
csty = 0xx;
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx; qmfbid = %d;
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx; qmfbid = %d;
compno = %d; csty = 0xx; numdlvls = %d;
compno = %d; csty = 0xx; numdlvls = %d;
compno = %d; roisty = %d; roishift = %d
compno = %d; roisty = %d; roishift = %d
expn[%d] = 0xx; mant[%d] = 0xx;
expn[%d] = 0xx; mant[%d] = 0xx;
qntsty = %d; numguard = %d; numstepsizes = %d
qntsty = %d; numguard = %d; numstepsizes = %d
compno = %d; qntsty = %d; numguard = %d; numstepsizes = %d
compno = %d; qntsty = %d; numguard = %d; numstepsizes = %d
seqno = %d;
seqno = %d;
ind=%d; len = %d;
ind=%d; len = %d;
le[%d] = %d
le[%d] = %d
rs[%d] = %d; re[%d] = %d;
rs[%d] = %d; re[%d] = %d;
cs[%d] = %d; ce[%d] = %d;
cs[%d] = %d; ce[%d] = %d;
po[%d] = %d;
po[%d] = %d;
hoff[%d] = %d; voff[%d] = %d
hoff[%d] = %d; voff[%d] = %d
regid = %d;
regid = %d;
len = %d;
len = %d;
type = 0xx (%s);
type = 0xx (%s);
Creator: JasPer Version %s
Creator: JasPer Version %s
lyrno=d cmptno=d rlvlno=d bandno=d prcno=d cblkno=d passno=d
lyrno=d cmptno=d rlvlno=d bandno=d prcno=d cblkno=d passno=d
lyrno = d
lyrno = d
success %d goodthresh %f
success %d goodthresh %f
MbP?maxlen=ld actuallen=ld thresh=%f
MbP?maxlen=ld actuallen=ld thresh=%f
min rdslope = %f max rdslope = %f
min rdslope = %f max rdslope = %f
cblk ] ] ] ]
cblk ] ] ] ]
prc ] ] ] ] (] ])
prc ] ] ] ] (] ])
band ] ] ] ]
band ] ] ] ]
rlvl ] ] ] ]
rlvl ] ] ] ]
tcmpt ] ] ] ]
tcmpt ] ] ] ]
invalid code block width %d
invalid code block width %d
invalid code block height %d
invalid code block height %d
warning: ignoring invalid option %s
warning: ignoring invalid option %s
warning: invalid intermediate layer rates specifier ignored (%s)
warning: invalid intermediate layer rates specifier ignored (%s)
ignoring bad rate specifier %s
ignoring bad rate specifier %s
ignoring invalid progression order %s
ignoring invalid progression order %s
ignoring invalid mode %s
ignoring invalid mode %s
unsupported image type
unsupported image type
error: too few guard bits (need at least %d)
error: too few guard bits (need at least %d)
CODE BLOCK %d
CODE BLOCK %d
CODE BLOCK GROUP %d
CODE BLOCK GROUP %d
BAND %d
BAND %d
xs =%d, ys = %d, xe = %d, ye = %d, w = %d, h = %d
xs =%d, ys = %d, xe = %d, ye = %d, w = %d, h = %d
RESOLUTION LEVEL %d
RESOLUTION LEVEL %d
ICC Profile CS x
ICC Profile CS x
error: unsupported compression type
error: unsupported compression type
box type %s
box type %s
warning: palettized images not fully supported
warning: palettized images not fully supported
error: encoding method not supported
error: encoding method not supported
error: RLE encoding method not supported
error: RLE encoding method not supported
error: unsupported color space
error: unsupported color space
unsupported BMP encoding
unsupported BMP encoding
error: unsupported BMP encoding
error: unsupported BMP encoding
THE BMP FORMAT IS NOT FULLY SUPPORTED!
THE BMP FORMAT IS NOT FULLY SUPPORTED!
no palettized image support for BMP format
no palettized image support for BMP format
%s%ld
%s%ld
warning: support for signed sample data requires use of nonstandard extension to PNM format
warning: support for signed sample data requires use of nonstandard extension to PNM format
data=%s
data=%s
component tlx=%ld tly=%ld sampperx=%ld samppery=%ld width=%ld height=%ld prec=%d sgnd=%d
component tlx=%ld tly=%ld sampperx=%ld samppery=%ld width=%ld height=%ld prec=%d sgnd=%d
error: PNM support required
error: PNM support required
warning: ignoring unsupported options
warning: ignoring unsupported options
(%f, %f, %f)
(%f, %f, %f)
entry[%d] = %f
entry[%d] = %f
gamma = %f
gamma = %f
number of entires = %d
number of entires = %d
maclen = %d
maclen = %d
sccode = %d
sccode = %d
uclangcode = %d; uclen = %d
uclangcode = %d; uclen = %d
ascii = "%s"
ascii = "%s"
string = "%s"
string = "%s"
numintabents=%d, numouttabents=%d
numintabents=%d, numouttabents=%d
e[%d][%d]=%f
e[%d][%d]=%f
numinchans=%d, numoutchans=%d, clutlen=%d
numinchans=%d, numoutchans=%d, clutlen=%d
x:
x:
1.900.1
1.900.1
packet offset=ld prg=%d cmptno=d rlvlno=d prcno=d lyrno=d
packet offset=ld prg=%d cmptno=d rlvlno=d prcno=d lyrno=d
coding pass failed passtype=%d segtype=%d
coding pass failed passtype=%d segtype=%d
csid=%d
csid=%d
method=%d; pri=%d; approx=%d
method=%d; pri=%d; approx=%d
channo=%d; type=%d; assoc=%d
channo=%d; type=%d; assoc=%d
cmptno=%d; map=%d; pcol=%d
cmptno=%d; map=%d; pcol=%d
numchans = %d
numchans = %d
LUT[%d][%d]=%d
LUT[%d][%d]=%d
numents=%d; numchans=%d
numents=%d; numchans=%d
type=%c%s%c (0xx); length=%d
type=%c%s%c (0xx); length=%d
%s: Out of memory in %s
%s: Out of memory in %s
?%s: decoder table overflow
?%s: decoder table overflow
%d.%d.%d
%d.%d.%d
%d %d
%d %d
%d,%d
%d,%d
%d %d %d
%d %d %d
/.badpixels
/.badpixels
%s is not a valid PGM file!
%s is not a valid PGM file!
%s has the wrong dimensions!
%s has the wrong dimensions!
Scaling with darkness %d, saturation %d, and
Scaling with darkness %d, saturation %d, and
%s: Cannot use camera p->white balance.
%s: Cannot use camera p->white balance.
Median filter pass %d...
Median filter pass %d...
11124811248488
11124811248488
012347800000005896
012347800000005896
%d:%d:%d %d:%d:%d
%d:%d:%d %d:%d:%d
@0134567028
@0134567028
023457000000006000
023457000000006000
012346000000000000
012346000000000000
.Ad530flex
.Ad530flex
%d:%d:%d
%d:%d:%d
%*s %s %d %d:%d:%d %d
%*s %s %d %d:%d:%d %d
v%d %dx%d
v%d %dx%d
A%s %s
A%s %s
Converting to %s colorspace...
Converting to %s colorspace...
?d:d:d d:d:d
?d:d:d d:d:d
12435867
12435867
?Unknown option "-%c".
?Unknown option "-%c".
Non-numeric argument to "-%c"
Non-numeric argument to "-%c"
114111111422
114111111422
%f %f %f
%f %f %f
Ixpress %d-Mp
Ixpress %d-Mp
50132467
50132467
Failed to read metadata from %s
Failed to read metadata from %s
Reading metadata from %s ...
Reading metadata from %s ...
%s: You must link dcraw with libjpeg!!
%s: You must link dcraw with libjpeg!!
%dx%d
%dx%d
1.2.5
1.2.5
Corrupt JPEG data: found marker 0xx instead of RST%d
Corrupt JPEG data: found marker 0xx instead of RST%d
Warning: unknown JFIF revision number %d.d
Warning: unknown JFIF revision number %d.d
Corrupt JPEG data: %u extraneous bytes before marker 0xx
Corrupt JPEG data: %u extraneous bytes before marker 0xx
Inconsistent progression sequence for component %d coefficient %d
Inconsistent progression sequence for component %d coefficient %d
Unknown Adobe color transform code %d
Unknown Adobe color transform code %d
Obtained XMS handle %u
Obtained XMS handle %u
Freed XMS handle %u
Freed XMS handle %u
Unrecognized component IDs %d %d %d, assuming YCbCr
Unrecognized component IDs %d %d %d, assuming YCbCr
JFIF extension marker: RGB thumbnail image, length %u
JFIF extension marker: RGB thumbnail image, length %u
JFIF extension marker: palette thumbnail image, length %u
JFIF extension marker: palette thumbnail image, length %u
JFIF extension marker: JPEG-compressed thumbnail image, length %u
JFIF extension marker: JPEG-compressed thumbnail image, length %u
Opened temporary file %s
Opened temporary file %s
Closed temporary file %s
Closed temporary file %s
Ss=%d, Se=%d, Ah=%d, Al=%d
Ss=%d, Se=%d, Ah=%d, Al=%d
Component %d: dc=%d ac=%d
Component %d: dc=%d ac=%d
Start Of Scan: %d components
Start Of Scan: %d components
Component %d: %dhx%dv q=%d
Component %d: %dhx%dv q=%d
Start Of Frame 0xx: width=%u, height=%u, components=%d
Start Of Frame 0xx: width=%u, height=%u, components=%d
Smoothing not supported with nonstandard sampling ratios
Smoothing not supported with nonstandard sampling ratios
RST%d
RST%d
At marker 0xx, recovery action %d
At marker 0xx, recovery action %d
Selected %d colors for quantization
Selected %d colors for quantization
Quantizing to %d colors
Quantizing to %d colors
Quantizing to %d = %d*%d*%d colors
Quantizing to %d = %d*%d*%d colors
%4u %4u %4u %4u %4u %4u %4u %4u
%4u %4u %4u %4u %4u %4u %4u %4u
Unexpected marker 0xx
Unexpected marker 0xx
Miscellaneous marker 0xx, length %u
Miscellaneous marker 0xx, length %u
with %d x %d thumbnail image
with %d x %d thumbnail image
JFIF extension marker: type 0xx, length %u
JFIF extension marker: type 0xx, length %u
Warning: thumbnail image size does not match data length %u
Warning: thumbnail image size does not match data length %u
JFIF APP0 marker: version %d.d, density %dx%d %d
JFIF APP0 marker: version %d.d, density %dx%d %d
= = = = = = = =
= = = = = = = =
Obtained EMS handle %u
Obtained EMS handle %u
Freed EMS handle %u
Freed EMS handle %u
Define Restart Interval %u
Define Restart Interval %u
Define Quantization Table %d precision %d
Define Quantization Table %d precision %d
Define Huffman Table 0xx
Define Huffman Table 0xx
Define Arithmetic Table 0xx: 0xx
Define Arithmetic Table 0xx: 0xx
Unknown APP14 marker (not Adobe), length %u
Unknown APP14 marker (not Adobe), length %u
Unknown APP0 marker (not JFIF), length %u
Unknown APP0 marker (not JFIF), length %u
Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d
Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d
Unsupported marker type 0xx
Unsupported marker type 0xx
Failed to create temporary file %s
Failed to create temporary file %s
Unsupported JPEG process: SOF type 0xx
Unsupported JPEG process: SOF type 0xx
Cannot quantize to more than %d colors
Cannot quantize to more than %d colors
Cannot quantize to fewer than %d colors
Cannot quantize to fewer than %d colors
Cannot quantize more than %d color components
Cannot quantize more than %d color components
Insufficient memory (case %d)
Insufficient memory (case %d)
Not a JPEG file: starts with 0xx 0xx
Not a JPEG file: starts with 0xx 0xx
Quantization table 0xx was not defined
Quantization table 0xx was not defined
Huffman table 0xx was not defined
Huffman table 0xx was not defined
Backing store not supported
Backing store not supported
Arithmetic table 0xx was not defined
Arithmetic table 0xx was not defined
Cannot transcode due to multiple use of quantization table %d
Cannot transcode due to multiple use of quantization table %d
Maximum supported image dimension is %u pixels
Maximum supported image dimension is %u pixels
Empty JPEG image (DNL not supported)
Empty JPEG image (DNL not supported)
Bogus DQT index %d
Bogus DQT index %d
Bogus DHT index %d
Bogus DHT index %d
Bogus DAC value 0x%x
Bogus DAC value 0x%x
Bogus DAC index %d
Bogus DAC index %d
Unsupported color conversion request
Unsupported color conversion request
Too many color components: %d, max %d
Too many color components: %d, max %d
Buffer passed to JPEG library is too small
Buffer passed to JPEG library is too small
JPEG parameter struct mismatch: library thinks size is %u, caller expects %u
JPEG parameter struct mismatch: library thinks size is %u, caller expects %u
Improper call to JPEG library in state %d
Improper call to JPEG library in state %d
Invalid scan script at entry %d
Invalid scan script at entry %d
Invalid progressive parameters at scan script entry %d
Invalid progressive parameters at scan script entry %d
Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d
Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d
Unsupported JPEG data precision %d
Unsupported JPEG data precision %d
Invalid memory pool code %d
Invalid memory pool code %d
Wrong JPEG library version: library is %d, caller expects %d
Wrong JPEG library version: library is %d, caller expects %d
Component index %d: mismatching sampling ratio %d:%d, %d:%d, %c
Component index %d: mismatching sampling ratio %d:%d, %d:%d, %c
DCT scaled block size %dx%d not supported
DCT scaled block size %dx%d not supported
Invalid component ID %d in SOS
Invalid component ID %d in SOS
Bogus message code %d
Bogus message code %d
%ld%c
%ld%c
?0123456789ABCDEFlibpng warning: %s
?0123456789ABCDEFlibpng warning: %s
libpng error: %s
libpng error: %s
Buffer error in compressed datastream in %s chunk
Buffer error in compressed datastream in %s chunk
Data error in compressed datastream in %s chunk
Data error in compressed datastream in %s chunk
Incomplete compressed datastream in %s chunk
Incomplete compressed datastream in %s chunk
Unknown zTXt compression type %d
Unknown zTXt compression type %d
gamma = (%d/100000)
gamma = (%d/100000)
gx=%d, gy=%d, bx=%d, by=%d
gx=%d, gy=%d, bx=%d, by=%d
wx=%d, wy=%d, rx=%d, ry=%d
wx=%d, wy=%d, rx=%d, ry=%d
incorrect gamma=(%d/100000)
incorrect gamma=(%d/100000)
Ignoring iCCP chunk with declared size = %u and actual length = %u
Ignoring iCCP chunk with declared size = %u and actual length = %u
NULL row buffer for row %ld, pass %d
NULL row buffer for row %ld, pass %d
Unknown compression type %d
Unknown compression type %d
zero length keyword
zero length keyword
keyword length must be 1 - 79 characters
keyword length must be 1 - 79 characters
Zero length keyword
Zero length keyword
extra interior spaces removed from keyword
extra interior spaces removed from keyword
leading spaces removed from keyword
leading spaces removed from keyword
trailing spaces removed from keyword
trailing spaces removed from keyword
invalid keyword character 0xX
invalid keyword character 0xX
Out of memory while procesing keyword
Out of memory while procesing keyword
%s: Must set "PlanarConfiguration" before writing data
%s: Must set "PlanarConfiguration" before writing data
%s: No space for %s arrays
%s: No space for %s arrays
%s: Must set "ImageWidth" before writing data
%s: Must set "ImageWidth" before writing data
%s: File not open for writing
%s: File not open for writing
%s: No space for output buffer
%s: No space for output buffer
%s: No space to expand strip arrays
%s: No space to expand strip arrays
%d: Sample out of range, max %d
%d: Sample out of range, max %d
Integer overflow in %s
Integer overflow in %s
%s: Invalid InkNames value; expecting %d names, found %d
%s: Invalid InkNames value; expecting %d names, found %d
%s: Bad value %u for "%s" tag
%s: Bad value %u for "%s" tag
%s: Invalid %stag "%s" (not supported by codec)
%s: Invalid %stag "%s" (not supported by codec)
%s: Bad field type %d for "%s"
%s: Bad field type %d for "%s"
%s: Failed to allocate space for list of custom values
%s: Failed to allocate space for list of custom values
%s: Bad value %d for "%s" tag
%s: Bad value %d for "%s" tag
%s: Sorry, cannot nest SubIFDs
%s: Sorry, cannot nest SubIFDs
Nonstandard tile width %d, convert file
Nonstandard tile width %d, convert file
Nonstandard tile length %d, convert file
Nonstandard tile length %d, convert file
%s: Cannot modify tag "%s" while writing
%s: Cannot modify tag "%s" while writing
%s: Unknown %stag %u
%s: Unknown %stag %u
%s: Error fetching directory link
%s: Error fetching directory link
%s: Error fetching directory count
%s: Error fetching directory count
%s: Read error at scanline %lu, strip %lu; got %lu bytes, expected %lu
%s: Read error at scanline %lu, strip %lu; got %lu bytes, expected %lu
%s: Read error at scanline %lu; got %lu bytes, expected %lu
%s: Read error at scanline %lu; got %lu bytes, expected %lu
%s: Seek error at scanline %lu, strip %lu
%s: Seek error at scanline %lu, strip %lu
%s: Read error at row %ld, col %ld, tile %ld; got %lu bytes, expected %lu
%s: Read error at row %ld, col %ld, tile %ld; got %lu bytes, expected %lu
%s: Read error at row %ld, col %ld; got %lu bytes, expected %lu
%s: Read error at row %ld, col %ld; got %lu bytes, expected %lu
%s: Seek error at row %ld, col %ld, tile %ld
%s: Seek error at row %ld, col %ld, tile %ld
%s: No space for data buffer at scanline %ld
%s: No space for data buffer at scanline %ld
%s: Data buffer too small to hold strip %lu
%s: Data buffer too small to hold strip %lu
%s: Read error on strip %lu; got %lu bytes, expected %lu
%s: Read error on strip %lu; got %lu bytes, expected %lu
%s: Invalid strip byte count %lu, strip %lu
%s: Invalid strip byte count %lu, strip %lu
%s: Data buffer too small to hold tile %ld
%s: Data buffer too small to hold tile %ld
"%s": Bad mode
"%s": Bad mode
Not a TIFF file, bad version number %d (0x%x)
Not a TIFF file, bad version number %d (0x%x)
This is a BigTIFF file. This format not supported
This is a BigTIFF file. This format not supported
Not a TIFF file, bad magic number %d (0x%x)
Not a TIFF file, bad magic number %d (0x%x)
%s: Out of memory (TIFF structure)
%s: Out of memory (TIFF structure)
Sorry, can not handle images with %d-bit samples
Sorry, can not handle images with %d-bit samples
Sorry, LogL data must have %s=%d
Sorry, LogL data must have %s=%d
Sorry, can not handle LogLuv images with %s=%d
Sorry, can not handle LogLuv images with %s=%d
Sorry, LogLuv data must have %s=%d or %d
Sorry, LogLuv data must have %s=%d or %d
Sorry, can not handle image with %s=%d
Sorry, can not handle image with %s=%d
Sorry, can not handle contiguous data with %s=%d, and %s=%d and Bits/Sample=%d
Sorry, can not handle contiguous data with %s=%d, and %s=%d and Bits/Sample=%d
Sorry, can not handle RGB image with %s=%d
Sorry, can not handle RGB image with %s=%d
Sorry, can not handle separated image with %s=%d
Sorry, can not handle separated image with %s=%d
Missing needed %s tag
Missing needed %s tag
Failed to allocate memory for %s (%ld elements of %ld bytes each)
Failed to allocate memory for %s (%ld elements of %ld bytes each)
Error writing data for field "%s"
Error writing data for field "%s"
%s: Error writing SubIFD directory link
%s: Error writing SubIFD directory link
M"%s": Information lost writing value (%g) as (unsigned) RATIONAL
M"%s": Information lost writing value (%g) as (unsigned) RATIONAL
AsShotPreProfileMatrix
AsShotPreProfileMatrix
AsShotICCProfile
AsShotICCProfile
AsShotWhiteXY
AsShotWhiteXY
AsShotNeutral
AsShotNeutral
InteroperabilityIFDOffset
InteroperabilityIFDOffset
Internal error, unknown tag 0x%x
Internal error, unknown tag 0x%x
Tag %d
Tag %d
Compression algorithm does not support random access
Compression algorithm does not support random access
Compression scheme %u %s encoding is not implemented
Compression scheme %u %s encoding is not implemented
%s %s encoding is not implemented
%s %s encoding is not implemented
Compression scheme %u %s decoding is not implemented
Compression scheme %u %s decoding is not implemented
%s %s decoding is not implemented
%s %s decoding is not implemented
%s: Cannot determine size of unknown tag type %d
%s: Cannot determine size of unknown tag type %d
%s: TIFF directory is missing required "%s" field
%s: TIFF directory is missing required "%s" field
incorrect count for field "%s" (%u, expecting %u); tag trimmed
incorrect count for field "%s" (%u, expecting %u); tag trimmed
incorrect count for field "%s" (%u, expecting %u); tag ignored
incorrect count for field "%s" (%u, expecting %u); tag ignored
%s: Can not read TIFF directory
%s: Can not read TIFF directory
%s: Can not read TIFF directory count
%s: Can not read TIFF directory count
%s: Seek error accessing TIFF directory
%s: Seek error accessing TIFF directory
Error fetching data for field "%s"
Error fetching data for field "%s"
%s: Rational with zero denominator (num = %u)
%s: Rational with zero denominator (num = %u)
unexpected count for field "%s", %u, expected 2; ignored
unexpected count for field "%s", %u, expected 2; ignored
cannot read TIFF_ANY type %d for field "%s"
cannot read TIFF_ANY type %d for field "%s"
Cannot handle different per-sample values for field "%s"
Cannot handle different per-sample values for field "%s"
%s: cannot handle zero strip size
%s: cannot handle zero strip size
%s: cannot handle zero tile size
%s: cannot handle zero tile size
%s: cannot handle zero scanline size
%s: cannot handle zero scanline size
%s: Wrong "%s" field, ignoring and calculating from imagelength
%s: Wrong "%s" field, ignoring and calculating from imagelength
%s: Bogus "%s" field, ignoring and calculating from imagelength
%s: Bogus "%s" field, ignoring and calculating from imagelength
%s: TIFF directory is missing required "%s" field, calculating from imagelength
%s: TIFF directory is missing required "%s" field, calculating from imagelength
%s: cannot handle zero number of %s
%s: cannot handle zero number of %s
Registering anonymous field with tag %d (0x%x) failed
Registering anonymous field with tag %d (0x%x) failed
%s: unknown field with tag %d (0x%x) encountered
%s: unknown field with tag %d (0x%x) encountered
%s: wrong data type %d for "%s"; tag ignored
%s: wrong data type %d for "%s"; tag ignored
%s: invalid TIFF directory; tags are not sorted in ascending order
%s: invalid TIFF directory; tags are not sorted in ascending order
%s: Failed to read directory at offset %u
%s: Failed to read directory at offset %u
%s compression support is not configured
%s compression support is not configured
LogL16Decode: Not enough data at row %d (short %d pixels)
LogL16Decode: Not enough data at row %d (short %d pixels)
LogLuvDecode24: Not enough data at row %d (short %d pixels)
LogLuvDecode24: Not enough data at row %d (short %d pixels)
LogLuvDecode32: Not enough data at row %d (short %d pixels)
LogLuvDecode32: Not enough data at row %d (short %d pixels)
?%s: No space for SGILog translation buffer
?%s: No space for SGILog translation buffer
No support for converting user data format to LogL
No support for converting user data format to LogL
No support for converting user data format to LogLuv
No support for converting user data format to LogLuv
Inappropriate photometric interpretation %d for SGILog compression; %s
Inappropriate photometric interpretation %d for SGILog compression; %s
SGILog compression supported only for %s, or raw data
SGILog compression supported only for %s, or raw data
Unknown data format %d for LogLuv compression
Unknown data format %d for LogLuv compression
Unknown encoding %d for LogLuv compression
Unknown encoding %d for LogLuv compression
%s: No space for LogLuv state block
%s: No space for LogLuv state block
%s: %s
%s: %s
%s: zlib error: %s
%s: zlib error: %s
%s: Not enough data at scanline %d (short %d bytes)
%s: Not enough data at scanline %d (short %d bytes)
%s: Decoding error at scanline %d, %s
%s: Decoding error at scanline %d, %s
%s: Encoder error: %s
%s: Encoder error: %s
%s: Bad code word at line %u of %s %u (x %u)
%s: Bad code word at line %u of %s %u (x %u)
%s: Uncompressed data (not supported) at line %u of %s %u (x %u)
%s: Uncompressed data (not supported) at line %u of %s %u (x %u)
%s: %s at line %u of %s %u (got %u, expected %u)
%s: %s at line %u of %s %u (got %u, expected %u)
%s: Premature EOF at line %u of %s %u (x %u)
%s: Premature EOF at line %u of %s %u (x %u)
Row pixels integer overflow (rowpixels %u)
Row pixels integer overflow (rowpixels %u)
%s: No space for Group 3/4 reference line
%s: No space for Group 3/4 reference line
C Fax DCS: %s
C Fax DCS: %s
Fax SubAddress: %s
Fax SubAddress: %s
(%u = 0x%x)
(%u = 0x%x)
%sEOL padding
%sEOL padding
%s2-d encoding
%s2-d encoding
%suncompressed data
%suncompressed data
%s: No space for state block
%s: No space for state block
JpegRestartInterval: %u
JpegRestartInterval: %u
JpegProc: %u
JpegProc: %u
OJPEG encoding not supported; use new-style JPEG compression instead
OJPEG encoding not supported; use new-style JPEG compression instead
Unknown marker type %d in JPEG data
Unknown marker type %d in JPEG data
Subsampling values [%d,%d] are not allowed in TIFF
Subsampling values [%d,%d] are not allowed in TIFF
Subsampling inside JPEG data does not match subsampling tag values [%d,%d] (nor any other values allowed in TIFF); assuming subsampling inside JPEG data is correct and desubsampling inside JPEG decompression
Subsampling inside JPEG data does not match subsampling tag values [%d,%d] (nor any other values allowed in TIFF); assuming subsampling inside JPEG data is correct and desubsampling inside JPEG decompression
Subsampling inside JPEG data [%d,%d] does not match subsampling tag values [%d,%d]; assuming subsampling inside JPEG data is correct
Subsampling inside JPEG data [%d,%d] does not match subsampling tag values [%d,%d]; assuming subsampling inside JPEG data is correct
Subsampling tag is not set, yet subsampling inside JPEG data [%d,%d] does not match default values [2,2]; assuming subsampling inside JPEG data is correct
Subsampling tag is not set, yet subsampling inside JPEG data [%d,%d] does not match default values [2,2]; assuming subsampling inside JPEG data is correct
SamplesPerPixel %d not supported for this compression scheme
SamplesPerPixel %d not supported for this compression scheme
JPEG strip/tile size exceeds expected dimensions, expected %dx%d, got %dx%d
JPEG strip/tile size exceeds expected dimensions, expected %dx%d, got %dx%d
Decompressor will try reading with sampling %d,%d.
Decompressor will try reading with sampling %d,%d.
Improper JPEG sampling factors %d,%d
Improper JPEG sampling factors %d,%d
Apparently should be %d,%d.
Apparently should be %d,%d.
Improper JPEG strip/tile size, expected %dx%d, got %dx%d
Improper JPEG strip/tile size, expected %dx%d, got %dx%d
RowsPerStrip must be multiple of %d for JPEG
RowsPerStrip must be multiple of %d for JPEG
JPEG tile width must be multiple of %d
JPEG tile width must be multiple of %d
JPEG tile height must be multiple of %d
JPEG tile height must be multiple of %d
BitsPerSample %d not allowed for JPEG
BitsPerSample %d not allowed for JPEG
PhotometricInterpretation %d not allowed for JPEG
PhotometricInterpretation %d not allowed for JPEG
ThunderDecode: %s data at scanline %ld (%lu != %lu)
ThunderDecode: %s data at scanline %ld (%lu != %lu)
LZWDecode: Bogus encoding, loop in the code table; scanline %d
LZWDecode: Bogus encoding, loop in the code table; scanline %d
LZWDecode: Not enough data at scanline %d (short %ld bytes)
LZWDecode: Not enough data at scanline %d (short %ld bytes)
LZWDecode: Wrong length of decoded string: data probably corrupted at scanline %d
LZWDecode: Wrong length of decoded string: data probably corrupted at scanline %d
LZWDecode: Corrupted LZW table at scanline %d
LZWDecode: Corrupted LZW table at scanline %d
LZWDecode: Strip %d not terminated with EOI code
LZWDecode: Strip %d not terminated with EOI code
LZWDecodeCompat: Corrupted LZW table at scanline %d
LZWDecodeCompat: Corrupted LZW table at scanline %d
LZWDecodeCompat: Wrong length of decoded string: data probably corrupted at scanline %d
LZWDecodeCompat: Wrong length of decoded string: data probably corrupted at scanline %d
LZWDecodeCompat: Not enough data at scanline %d (short %ld bytes)
LZWDecodeCompat: Not enough data at scanline %d (short %ld bytes)
DumpModeDecode: Not enough data for scanline %d
DumpModeDecode: Not enough data for scanline %d
Horizontal differencing "Predictor" not supported with %d-bit samples
Horizontal differencing "Predictor" not supported with %d-bit samples
Floating point "Predictor" not supported with %d data format
Floating point "Predictor" not supported with %d data format
"Predictor" value %d not supported
"Predictor" value %d not supported
Out of memory allocating %d byte temp buffer.
Out of memory allocating %d byte temp buffer.
%u (0x%x)
%u (0x%x)
deflate 1.2.5 Copyright 1995-2010 Jean-loup Gailly and Mark Adler
deflate 1.2.5 Copyright 1995-2010 Jean-loup Gailly and Mark Adler
inflate 1.2.5 Copyright 1995-2010 Mark Adler
inflate 1.2.5 Copyright 1995-2010 Mark Adler
?#%X.y
?#%X.y
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
\\.\Scsi%d:
\\.\Scsi%d:
\\.\PhysicalDrive%d
\\.\PhysicalDrive%d
,./1234567
,./1234567
Referer:%s
Referer:%s
Cookie: %s
Cookie: %s
CInternetFileOperator
CInternetFileOperator
InternetOpen(%s) failed
InternetOpen(%s) failed
InternetOpenUrl(%s) failed(err=%d, header=%s)
InternetOpenUrl(%s) failed(err=%d, header=%s)
HttpQueryInfo(%s, %d) failed(err=%d)
HttpQueryInfo(%s, %d) failed(err=%d)
Request URL(%s) return %s
Request URL(%s) return %s
HttpQueryInfo(%s, ContextType) failed(err=%d)
HttpQueryInfo(%s, ContextType) failed(err=%d)
ReadInternetFile(%s, ContextType=%s) failed
ReadInternetFile(%s, ContextType=%s) failed
Alloc cookie memory failed(len=%d)
Alloc cookie memory failed(len=%d)
InternetReadFile(%d) failed(err=%d)
InternetReadFile(%d) failed(err=%d)
Alloc file memory failed(datalen=%d, retlen=%d)
Alloc file memory failed(datalen=%d, retlen=%d)
FIELD_ID_NEW_PASSWORD
FIELD_ID_NEW_PASSWORD
FIELD_ID_FILE_SERVER_PORT
FIELD_ID_FILE_SERVER_PORT
FIELD_ID_MAIN_SERVER_PORT
FIELD_ID_MAIN_SERVER_PORT
FIELD_ID_FILE_URL
FIELD_ID_FILE_URL
FIELD_ID_FILE_URL_LEN
FIELD_ID_FILE_URL_LEN
FIELD_ID_KEY
FIELD_ID_KEY
FIELD_ID_PASSWORD
FIELD_ID_PASSWORD
ip=%s
ip=%s
C:\work\VCodeServer\Common\include\IPacketDataWriterImpl1_0.h
C:\work\VCodeServer\Common\include\IPacketDataWriterImpl1_0.h
Login_Req
Login_Req
Login_Rsp
Login_Rsp
AppReportVCodeRight_Req
AppReportVCodeRight_Req
AppReportVCodeRight_Rsp
AppReportVCodeRight_Rsp
[%7lu]Get packet define failed(seq=%lu, cmd=%lu)
[%7lu]Get packet define failed(seq=%lu, cmd=%lu)
[%7lu]Get packet define and session data failed(seq=%lu, cmd=%lu)
[%7lu]Get packet define and session data failed(seq=%lu, cmd=%lu)
[%7lu]Set offset error(seq=%lu, cmd=%lu)
[%7lu]Set offset error(seq=%lu, cmd=%lu)
[%7lu]MAC error(seq=%lu, cmd=%lu)
[%7lu]MAC error(seq=%lu, cmd=%lu)
[%7lu]Packet fixed length error(dwFixLen=%d)
[%7lu]Packet fixed length error(dwFixLen=%d)
[%7lu]Packet head VCC Verify error(src=%d, comp=%d, seq=%lu, cmd=%lu)
[%7lu]Packet head VCC Verify error(src=%d, comp=%d, seq=%lu, cmd=%lu)
[%7lu]Command(%d) not support(seq=%lu)
[%7lu]Command(%d) not support(seq=%lu)
[%7lu]Packet length(%d) error(seq=%lu, cmd=%lu)
[%7lu]Packet length(%d) error(seq=%lu, cmd=%lu)
[%7lu]Packet type(%d) error(seq=%lu, cmd=%lu, srcdest=%d)
[%7lu]Packet type(%d) error(seq=%lu, cmd=%lu, srcdest=%d)
[%7lu]Get Memory Failed(seq=%lu, cmd=%lu)
[%7lu]Get Memory Failed(seq=%lu, cmd=%lu)
[%7lu]Packet ID not found(srcdest=%d, cmdID=%d)
[%7lu]Packet ID not found(srcdest=%d, cmdID=%d)
verify code of encrypt key error
verify code of encrypt key error
verify code of MAC key error
verify code of MAC key error
Field(%s) offset(%d) is greater than data length(%d)
Field(%s) offset(%d) is greater than data length(%d)
Decrypt field(%s) failed
Decrypt field(%s) failed
Offset(%d) > Len(%d) [packect=%s, field=%s]
Offset(%d) > Len(%d) [packect=%s, field=%s]
EncryptData error [packect=%s, field=%s]
EncryptData error [packect=%s, field=%s]
[%7lu]Packet ID not found(PacketID=%d, cmd=%lu, srcdest=%d)
[%7lu]Packet ID not found(PacketID=%d, cmd=%lu, srcdest=%d)
[%7lu]Session ID not found(cmd=%lu, srcdest=%d, sessionid=%d)
[%7lu]Session ID not found(cmd=%lu, srcdest=%d, sessionid=%d)
open.baidu.com
open.baidu.com
time.nist.gov
time.nist.gov
asia.pool.ntp.org
asia.pool.ntp.org
cn.ntp.org.cn
cn.ntp.org.cn
time.dama2.com
time.dama2.com
WSASocket Failed ,code=%d
WSASocket Failed ,code=%d
WSACreateEvent() Failed , code=%d
WSACreateEvent() Failed , code=%d
Connect fail(err=%d, server=%d, port=%d, socket=%d, time=%d)
Connect fail(err=%d, server=%d, port=%d, socket=%d, time=%d)
Connect server(%d:%d) success(socket=%d)
Connect server(%d:%d) success(socket=%d)
Connect server(%d:%d) failed(socket=%d, time=%d)
Connect server(%d:%d) failed(socket=%d, time=%d)
Connect server(%d:%d) success(socket=%d): connect return: %d
Connect server(%d:%d) success(socket=%d): connect return: %d
send fail(err=%d, socket=%d)
send fail(err=%d, socket=%d)
Receive fail(err=%d, socket=%d)
Receive fail(err=%d, socket=%d)
WSAEventSelect() Failed ,code=%d
WSAEventSelect() Failed ,code=%d
WSAEnumNetworkEvents(%d,%d) Failed ,code=%d
WSAEnumNetworkEvents(%d,%d) Failed ,code=%d
events.lNetworkEvents(%d) & %d != 0 (socket=%d, err=%d)
events.lNetworkEvents(%d) & %d != 0 (socket=%d, err=%d)
events.lNetworkEvents & FD_CLOSE != 0 (socket=%d, err=%d)
events.lNetworkEvents & FD_CLOSE != 0 (socket=%d, err=%d)
WSAEnumNetworkEvents(%d,%d) exception ,ret=%d, lNetworkEvents=%d, LastError=%d
WSAEnumNetworkEvents(%d,%d) exception ,ret=%d, lNetworkEvents=%d, LastError=%d
Synchronize time success by %s:%d
Synchronize time success by %s:%d
GET /special/time/ HTTP/1.0
GET /special/time/ HTTP/1.0
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Host: open.baidu.com
Host: open.baidu.com
window.baidu_time(
window.baidu_time(
HTTP/
HTTP/
Exit %s(used %dms)
Exit %s(used %dms)
%u.%u.%u.%u
%u.%u.%u.%u
RespCode=%d(seq=%lu)
RespCode=%d(seq=%lu)
user name is empty(seq=%lu, cmd=%lu)
user name is empty(seq=%lu, cmd=%lu)
CrackCaptchaClient.ini
CrackCaptchaClient.ini
%s\%s
%s\%s
Software ID error(%s)
Software ID error(%s)
Login
Login
Enter %s
Enter %s
InnerLogin
InnerLogin
%s login(softname=%s)
%s login(softname=%s)
byRespCode=%d
byRespCode=%d
%s logoff(softname=%s)
%s logoff(softname=%s)
RegisterUser(%s) success
RegisterUser(%s) success
ReadUserInfo(%s) success
ReadUserInfo(%s) success
start decode: url=%s, len=%d, timeout=%d, type=%d
start decode: url=%s, len=%d, timeout=%d, type=%d
Internet add task failed(ProcessID=%u)
Internet add task failed(ProcessID=%u)
start decode: datalen=%d, ext=%s, len=%d, timeout=%d, type=%d
start decode: datalen=%d, ext=%s, len=%d, timeout=%d, type=%d
start GetResult: processID=%u, uTimeout=%u
start GetResult: processID=%u, uTimeout=%u
GetResult Error: processID=%u
GetResult Error: processID=%u
GetResult Success: processID=%u, VCode=%s, id=%u
GetResult Success: processID=%u, VCode=%s, id=%u
vcode buffer len(%d)
vcode buffer len(%d)
GetDecodeResult success(uProcessID=%d, vcodeid=%lu, VCode=%s)
GetDecodeResult success(uProcessID=%d, vcodeid=%lu, VCode=%s)
ReportDecodeCorrectness success(vcodeid=%lu)
ReportDecodeCorrectness success(vcodeid=%lu)
QueryUserBalance success(user=%s, balance=%d)
QueryUserBalance success(user=%s, balance=%d)
Recharge success(user=%s, cardno=%s)
Recharge success(user=%s, cardno=%s)
FetchVCodeImage success(processid=%d)
FetchVCodeImage success(processid=%d)
ProcessID(%d) not in WorkerFetchResult
ProcessID(%d) not in WorkerFetchResult
GetFetchVCodeImageResult finish(processid=%d, uVCodeID=%lu, err=%d, RespCode=%d)
GetFetchVCodeImageResult finish(processid=%d, uVCodeID=%lu, err=%d, RespCode=%d)
RefreshVCode Reader empty(processid=%d)
RefreshVCode Reader empty(processid=%d)
RefreshVCode: Cookie is empty(processid=%d)
RefreshVCode: Cookie is empty(processid=%d)
RefreshVCode no data(processid=%d)
RefreshVCode no data(processid=%d)
RefreshVCode no data(processid=%d, file is downloading)
RefreshVCode no data(processid=%d, file is downloading)
RollbackVCode success(count=%d)
RollbackVCode success(count=%d)
stat buffer len(%d)
stat buffer len(%d)
QueryStatistics success(stat=%s)
QueryStatistics success(stat=%s)
Get Memory Failed, BlockCount=%d
Get Memory Failed, BlockCount=%d
[%d]connected to server(ip=%d, port=%d)
[%d]connected to server(ip=%d, port=%d)
[%d]Unpack error(seq=%lu, cmd=%lu)
[%d]Unpack error(seq=%lu, cmd=%lu)
[%d]received: seq=%lu, cmd=%lu, rsp=%d
[%d]received: seq=%lu, cmd=%lu, rsp=%d
[%d]RequestDecode no record: seq=%lu, cmd=%lu, rsp=%d
[%d]RequestDecode no record: seq=%lu, cmd=%lu, rsp=%d
[%d]GetDecodeResult no ResultSeq2DecSeq: seq=%lu, cmd=%lu, rsp=%d
[%d]GetDecodeResult no ResultSeq2DecSeq: seq=%lu, cmd=%lu, rsp=%d
[%d]GetDecodeResult no record: seq=%lu, cmd=%lu, rsp=%d
[%d]GetDecodeResult no record: seq=%lu, cmd=%lu, rsp=%d
[%d]SetReqSeqNoData failed(seq=%lu, cmd=%lu, rsp=%d)
[%d]SetReqSeqNoData failed(seq=%lu, cmd=%lu, rsp=%d)
[%d]Data sent(len=%d)
[%d]Data sent(len=%d)
[%d]socket closed
[%d]socket closed
nolog.ini
nolog.ini
CrackCaptcha.log
CrackCaptcha.log
CrackCaptcha_bak.log
CrackCaptcha_bak.log
d-d-d d:d:d.d
d-d-d d:d:d.d
[%d]request: seq=%lu, cmd=%lu
[%d]request: seq=%lu, cmd=%lu
[%d]Pack error
[%d]Pack error
[%d]Add Send Data error
[%d]Add Send Data error
Create Packet Writer failed(cmd=%lu)
Create Packet Writer failed(cmd=%lu)
socket connector connect failed(%s)
socket connector connect failed(%s)
Inner login failed
Inner login failed
server1.dama2.com
server1.dama2.com
server.dama2.com
server.dama2.com
RetFileNameLen(%d)
RetFileNameLen(%d)
Get Var memory failed(len=%d)
Get Var memory failed(len=%d)
SOCKFILE://%s/%s
SOCKFILE://%s/%s
[%d]call PacketBuiler.Pack failed(seq=%lu,cmd=%lu)
[%d]call PacketBuiler.Pack failed(seq=%lu,cmd=%lu)
call BlockingClientSocket.Connect failed(ip=%s)
call BlockingClientSocket.Connect failed(ip=%s)
call BlockingClientSocket.Send failed(len=%d)
call BlockingClientSocket.Send failed(len=%d)
call BlockingClientSocket.Receive failed(recvlen=%d, left=%d)
call BlockingClientSocket.Receive failed(recvlen=%d, left=%d)
recv data(len= %d)
recv data(len= %d)
Packet Length error(recvlen=%d)
Packet Length error(recvlen=%d)
call PackBuilder.Unpack failed
call PackBuilder.Unpack failed
RespCode=%d
RespCode=%d
File Server IP error(filename=%s)
File Server IP error(filename=%s)
Start download file(%s)
Start download file(%s)
failed to download file(%s, used %dms)
failed to download file(%s, used %dms)
succeed to download file(%s, used %dms)
succeed to download file(%s, used %dms)
Get Var Memory failed(len=%d)
Get Var Memory failed(len=%d)
call DownloadFile(%s) failed
call DownloadFile(%s) failed
call FileOp.DownloadFile(%s) failed
call FileOp.DownloadFile(%s) failed
\Install.exe
\Install.exe
CreateFile(%s) failed(err=%d)
CreateFile(%s) failed(err=%d)
WriteFile(%s,len=%d) failed(err=%d)
WriteFile(%s,len=%d) failed(err=%d)
download file from internet failed(%s)
download file from internet failed(%s)
Failed to DownloadFile(%s, resp=%d)
Failed to DownloadFile(%s, resp=%d)
Picture file name Count = 0(%s)
Picture file name Count = 0(%s)
Picture (%s) is invalid(%s)
Picture (%s) is invalid(%s)
Picture Count = 0(%s)
Picture Count = 0(%s)
failed to encode dest image (%s)
failed to encode dest image (%s)
Send HeatBeat init failed(resp=%d, usedtime=%dms)
Send HeatBeat init failed(resp=%d, usedtime=%dms)
Send HeatBeat failed(resp=%d, usedtime=%dms)
Send HeatBeat failed(resp=%d, usedtime=%dms)
Send HeatBeat success(seq=%d, usedtime=%dms)
Send HeatBeat success(seq=%d, usedtime=%dms)
worker socket sleep timeout:%d
worker socket sleep timeout:%d
WSAEnumNetworkEvents(s=%d, event=%d) failed(err=%d)
WSAEnumNetworkEvents(s=%d, event=%d) failed(err=%d)
close event waited[events.lNetworkEvents & FD_CLOSE)=%d, err=%d]
close event waited[events.lNetworkEvents & FD_CLOSE)=%d, err=%d]
[%7lu]send(sock=%d, len=%d) failed(err=%d)
[%7lu]send(sock=%d, len=%d) failed(err=%d)
[%7lu]recv(sock=%d, len=%d) failed(err=%d)
[%7lu]recv(sock=%d, len=%d) failed(err=%d)
OnSocketDataReceived return %d
OnSocketDataReceived return %d
CrackCaptchaAPI.log
CrackCaptchaAPI.log
CrackCaptchaAPI_bak.log
CrackCaptchaAPI_bak.log
Failed to CreateFile(%s): error=%d
Failed to CreateFile(%s): error=%d
Failed to GetFileSize(%s): dwLen=%d
Failed to GetFileSize(%s): dwLen=%d
Failed to ReadFile(%s): error=%d
Failed to ReadFile(%s): error=%d
Failed to ReadFile(%s): Len=0
Failed to ReadFile(%s): Len=0
Failed to EncodeImage(%s)
Failed to EncodeImage(%s)
C:\work\VCodeServer\Release\CrackCaptchaAPI.pdb
C:\work\VCodeServer\Release\CrackCaptchaAPI.pdb
InternetOpenUrlA
InternetOpenUrlA
WININET.dll
WININET.dll
IPHLPAPI.DLL
IPHLPAPI.DLL
SHLWAPI.dll
SHLWAPI.dll
PeekNamedPipe
PeekNamedPipe
CrackCaptchaAPI.dll
CrackCaptchaAPI.dll
Login2
Login2
ReportResult
ReportResult
zcÃ
zcÃ
IEC hXXp://VVV.iec.ch
IEC hXXp://VVV.iec.ch
.IEC 61966-2.1 Default RGB colour space - sRGB
.IEC 61966-2.1 Default RGB colour space - sRGB
CRT curv
CRT curv
.?AUILogInterface@@
.?AUILogInterface@@
.?AVCServerFileOperateThread@@
.?AVCServerFileOperateThread@@
7"7'7.737
7"7'7.737
0$1 161&282
0$1 161&282
0&0 080>0
0&0 080>0
1!1-161?1
1!1-161?1
3$3-373B3}3
3$3-373B3}3
6 6$6(6,6064686
6 6$6(6,6064686
5054585
5054585
9$9-9697?
9$9-9697?
> >$>(>,>0>
> >$>(>,>0>
1-191E1Q1}1
1-191E1Q1}1
:-:1:5:9:=:
:-:1:5:9:=:
4 4@4\4`4
4 4@4\4`4
5 5@5`5|5
5 5@5`5|5
SSSSh
SSSSh
ByScreen.JPG
ByScreen.JPG
C:\Users\Administrator\Desktop\UUWiseHelper_http\
C:\Users\Administrator\Desktop\UUWiseHelper_http\
\UUWiseHelper.pdb
\UUWiseHelper.pdb
RegOpenKeyExW
RegOpenKeyExW
urlmon.dll
urlmon.dll
dbghelp.dll
dbghelp.dll
gdiplus.dll
gdiplus.dll
UUWiseHelper.DLL
UUWiseHelper.DLL
uu_easyRecognizeUrlA
uu_easyRecognizeUrlA
uu_easyRecognizeUrlW
uu_easyRecognizeUrlW
uu_loginA
uu_loginA
uu_loginW
uu_loginW
uu_recognizeByCodeTypeAndUrlA
uu_recognizeByCodeTypeAndUrlA
uu_recognizeByCodeTypeAndUrlW
uu_recognizeByCodeTypeAndUrlW
uu_reportError
uu_reportError
= =(=0=
= =(=0=
6 6
6 6
deflate 1.1.3 Copyright 1995-1998 Jean-loup Gailly
deflate 1.1.3 Copyright 1995-1998 Jean-loup Gailly
inflate 1.1.3 Copyright 1995-1998 Mark Adler
inflate 1.1.3 Copyright 1995-1998 Mark Adler
GdiplusShutdown
GdiplusShutdown
WSOCK32.dll
WSOCK32.dll
MSVCP60.dll
MSVCP60.dll
dc.dll
dc.dll
ReportError
ReportError
ReportError_A
ReportError_A
VBYB_ReportError
VBYB_ReportError
VB_ReportError
VB_ReportError
debug.ini
debug.ini
ReportError:%s
ReportError:%s
Error:%s
Error:%s
%s|!|%s
%s|!|%s
\dms.pdb
\dms.pdb
%u%u,
%u%u,
dclog.txt
dclog.txt
port
port
settimeout:%d
settimeout:%d
[%d]%s
[%d]%s
reg2:%s
reg2:%s
checkok:%s %s
checkok:%s %s
check fail:%s %s %s
check fail:%s %s %s
check:%s %s
check:%s %s
getcjfail:%s %s
getcjfail:%s %s
getcj:%s %s
getcj:%s %s
%s%uout
%s%uout
%s%uin
%s%uin
put img ok:%s
put img ok:%s
put img fail:%s
put img fail:%s
put img:%s %s %d
put img:%s %s %d
get result ok:%s,%s
get result ok:%s,%s
get result fail:%s
get result fail:%s
get result:%s
get result:%s
notifyfail ok:%s
notifyfail ok:%s
notifyfail fail:%s,%s
notifyfail fail:%s,%s
notifyfail:%s
notifyfail:%s
getimgok:%s,%s
getimgok:%s,%s
getimg:%s
getimg:%s
getinfo fail:%s
getinfo fail:%s
getinfo:%s,%s
getinfo:%s,%s
setresult:%s,%s
setresult:%s,%s
HTTP/1.1 200 OK
HTTP/1.1 200 OK
recv:%d
recv:%d
send:%d
send:%d
GET /ip.txt HTTP/1.1
GET /ip.txt HTTP/1.1
Host: %s
Host: %s
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:6.0.2) Gecko/20100101 Firefox/6.0.2
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:6.0.2) Gecko/20100101 Firefox/6.0.2
select:%d
select:%d
ioctlsocket:%d
ioctlsocket:%d
socket:%d
socket:%d
api.qqchaoren.net
api.qqchaoren.net
14.17.65.24
14.17.65.24
14.17.65.23
14.17.65.23
dama2.qqchaoren.net
dama2.qqchaoren.net
dama1.qqchaoren.net
dama1.qqchaoren.net
connect total:%s %d
connect total:%s %d
:%s %d
:%s %d
connect discard:%s %d
connect discard:%s %d
[d-d-d d:d:d](u)
[d-d-d d:d:d](u)
recv timeout:
recv timeout:
recvfail:%d
recvfail:%d
server close:%d
server close:%d
recv:%d
recv:%d
send:%d
send:%d
sendfail:%d
sendfail:%d
connect timeout:
connect timeout:
connectok:%s %hu
connectok:%s %hu
127.0.0.1
127.0.0.1
1.1.3
1.1.3
1'1,1
1'1,1
9 9$9(9,9094989
9 9$9(9,9094989
QQSG.exe
QQSG.exe
ESPI11.dll
ESPI11.dll
Connect.dll
Connect.dll
hXXp://VVV.qqchaoren.net/
hXXp://VVV.qqchaoren.net/
hXXp://VVV.uudama.com/
hXXp://VVV.uudama.com/
hXXp://VVV.dama2.com/
hXXp://VVV.dama2.com/
Zone.ini
Zone.ini
\*.jpg
\*.jpg
477105025 123456 1
477105025 123456 1
h.rdata
h.rdata
H.data
H.data
.reloc
.reloc
d:\dk\rwm\objfre_wxp_x86\i386\rwm.pdb
d:\dk\rwm\objfre_wxp_x86\i386\rwm.pdb
ntoskrnl.exe
ntoskrnl.exe
6g6x6
6g6x6
@\\.\
@\\.\
imm32.dll
imm32.dll
Keyboard Layout
Keyboard Layout
Keyboard Layout\Preload
Keyboard Layout\Preload
dm.dmsoft
dm.dmsoft
oledlg.dll
oledlg.dll
CLID.dll
CLID.dll
program internal error number is %d.
program internal error number is %d.
oleaut32.dll
oleaut32.dll
.?AVCCmdTarget@@
.?AVCCmdTarget@@
.PAVCException@@
.PAVCException@@
.?AVCCmdUI@@
.?AVCCmdUI@@
.PAVCObject@@
.PAVCObject@@
.PAVCSimpleException@@
.PAVCSimpleException@@
.PAVCUserException@@
.PAVCUserException@@
.PAVCMemoryException@@
.PAVCMemoryException@@
.?AVCNotSupportedException@@
.?AVCNotSupportedException@@
.?AVCTestCmdUI@@
.?AVCTestCmdUI@@
6d6F6l6y6
6d6F6l6y6
5]5i5
5]5i5
MFC42u.DLL
MFC42u.DLL
ZwQueryKey
ZwQueryKey
ZwQueryValueKey
ZwQueryValueKey
ZwOpenKeyEx
ZwOpenKeyEx
ZwOpenKey
ZwOpenKey
\\.\%c%c%d
\\.\%c%c%d
7Â8M8X8
7Â8M8X8
KeyDown
KeyDown
KeyUp
KeyUp
SetShowErrorMsg
SetShowErrorMsg
GetWindowState
GetWindowState
SetWindowSize
SetWindowSize
SetWindowState
SetWindowState
SetKeypadDelay
SetKeypadDelay
FindWindowSuper
FindWindowSuper
KeyDownChar
KeyDownChar
KeyUpChar
KeyUpChar
KeyPressChar
KeyPressChar
KeyPressStr
KeyPressStr
EnableKeypadPatch
EnableKeypadPatch
EnableKeypadSync
EnableKeypadSync
EnableRealKeypad
EnableRealKeypad
WaitKey
WaitKey
EnumWindowSuper
EnumWindowSuper
EnableKeypadMsg
EnableKeypadMsg
EnableMouseMsg
EnableMouseMsg
EnumIniKey
EnumIniKey
EnumIniKeyPwd
EnumIniKeyPwd
hXXp://VVV.dwz.cn/qqsgttfz
hXXp://VVV.dwz.cn/qqsgttfz
:2999-4-20
:2999-4-20
(QQSG.exe)|QQSG.exe
(QQSG.exe)|QQSG.exe
1.2.18
1.2.18
MSWHEEL_ROLLMSG
MSWHEEL_ROLLMSG
iphlpapi.dll
iphlpapi.dll
MPR.dll
MPR.dll
MSVFW32.dll
MSVFW32.dll
AVIFIL32.dll
AVIFIL32.dll
RASAPI32.dll
RASAPI32.dll
GetWindowsDirectoryA
GetWindowsDirectoryA
RegisterHotKey
RegisterHotKey
UnregisterHotKey
UnregisterHotKey
MSIMG32.dll
MSIMG32.dll
InternetCrackUrlA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetCanonicalizeUrlA
.PAVCNotSupportedException@@
.PAVCNotSupportedException@@
.PAVCFileException@@
.PAVCFileException@@
(*.prn)|*.prn|
(*.prn)|*.prn|
(*.*)|*.*||
(*.*)|*.*||
Shell32.dll
Shell32.dll
Mpr.dll
Mpr.dll
Advapi32.dll
Advapi32.dll
User32.dll
User32.dll
Gdi32.dll
Gdi32.dll
(&07-034/)7 '
(&07-034/)7 '
?? / %d]
?? / %d]
%d / %d]
%d / %d]
: %d]
: %d]
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.txt)|*.txt|
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|BMP
(*.JPG)|*.JPG|BMP
(*.BMP)|*.BMP|GIF
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
(*.CUR)|*.CUR|
%s:%d
%s:%d
out.prn
out.prn
%d.%d
%d.%d
%d / %d
%d / %d
%d/%d
%d/%d
(%d-%d):
(%d-%d):
VVV.dywt.com.cn
VVV.dywt.com.cn
x86 Family %s Model %s Stepping %s
x86 Family %s Model %s Stepping %s
X-X-X-X
X-X-X-X
X-X-X-X-X-X
X-X-X-X-X-X
(*.htm;*.html)|*.htm;*.html
(*.htm;*.html)|*.htm;*.html
(*.avi)|*.avi
(*.avi)|*.avi
WPFT532.CNV
WPFT532.CNV
WPFT632.CNV
WPFT632.CNV
EXCEL32.CNV
EXCEL32.CNV
write32.wpc
write32.wpc
Windows Write
Windows Write
mswrd632.wpc
mswrd632.wpc
Word for Windows 6.0
Word for Windows 6.0
wword5.cnv
wword5.cnv
Word for Windows 5.0
Word for Windows 5.0
mswrd832.cnv
mswrd832.cnv
mswrd632.cnv
mswrd632.cnv
Word 6.0/95 for Windows & Macintosh
Word 6.0/95 for Windows & Macintosh
html32.cnv
html32.cnv
;3 #>6.&
;3 #>6.&
'2, / 0&7!4-)1#
'2, / 0&7!4-)1#
HTTP/1.0
HTTP/1.0
%s
%s
Reply-To: %s
Reply-To: %s
From: %s
From: %s
To: %s
To: %s
Subject: %s
Subject: %s
Date: %s
Date: %s
Cc: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
%a, %d %b %Y %H:%M:%S
SMTP
SMTP
%d%d%d
%d%d%d
rundll32.exe shell32.dll,
rundll32.exe shell32.dll,
.PAVCOleException@@
.PAVCOleException@@
.PAVCResourceException@@
.PAVCResourceException@@
.PAVCOleDispatchException@@
.PAVCOleDispatchException@@
.PAVCArchiveException@@
.PAVCArchiveException@@
right-curly-bracket
right-curly-bracket
left-curly-bracket
left-curly-bracket
0123456789
0123456789
c:\%original file name%.exe
c:\%original file name%.exe
#include "l.chs\afxres.rc" // Standard components
#include "l.chs\afxres.rc" // Standard components
1, 0, 0, 1
1, 0, 0, 1
imedllhost09.ime
imedllhost09.ime
3, 1233, 0, 0
3, 1233, 0, 0
.SQWR
.SQWR
mscoree.dll
mscoree.dll
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
WUSER32.DLL
WUSER32.DLL
2.0.0.0
2.0.0.0
CrackCaptchAPI.dll
CrackCaptchAPI.dll
(.dmp)
(.dmp)
%d-%d-%d
%d-%d-%d
/Api/config.aspx
/Api/config.aspx
hXXp://s1.uudati.com:
hXXp://s1.uudati.com:
hXXp://s1.taskok.com:
hXXp://s1.taskok.com:
hXXp://s1.uudama.com:
hXXp://s1.uudama.com:
hXXp://s1.uuwise.com:
hXXp://s1.uuwise.com:
1.1.1.4
1.1.1.4
WiseClientAPI-1.0.0.1
WiseClientAPI-1.0.0.1
/Api/DecodeImg.aspx
/Api/DecodeImg.aspx
xxxxxxxxxxx
xxxxxxxxxxx
hXXp://proxy.uuwise.net:
hXXp://proxy.uuwise.net:
hXXp://proxy.uudama.net:
hXXp://proxy.uudama.net:
hXXp://proxy.taskok.com:
hXXp://proxy.taskok.com:
hXXp://proxy.uuwise.com:
hXXp://proxy.uuwise.com:
hXXp://proxy.uudama.com:
hXXp://proxy.uudama.com:
%d%d%d%d%d
%d%d%d%d%d
/Api/VerifyAPIFile.aspx
/Api/VerifyAPIFile.aspx
/Api/UserLogin.aspx
/Api/UserLogin.aspx
/Api/UserReg.aspx
/Api/UserReg.aspx
/Api/PayCard.aspx
/Api/PayCard.aspx
/Api/ReportError.aspx
/Api/ReportError.aspx
/Api/UserPoint.aspx
/Api/UserPoint.aspx
|1.1.1.4|
|1.1.1.4|
/Api/DecodeResult.aspx
/Api/DecodeResult.aspx
ID/KEY/
ID/KEY/
ByTypeBytes.JPG
ByTypeBytes.JPG
User-Agent:WiseClient-1.1.1.4;
User-Agent:WiseClient-1.1.1.4;
WiseClient-1.1.1.4
WiseClient-1.1.1.4
ServerPort
ServerPort
UUExtConfig.ini
UUExtConfig.ini
-:-:-.%d
-:-:-.%d
tCRYPTDLL.DLL
tCRYPTDLL.DLL
time-b.nist.gov
time-b.nist.gov
time-a.nist.gov
time-a.nist.gov
time-nw.nist.gov
time-nw.nist.gov
time.windows.com
time.windows.com
\\.\PHYSICALDRIVE0
\\.\PHYSICALDRIVE0
Microsoft Windows Millennium Edition
Microsoft Windows Millennium Edition
Microsoft Windows 98
Microsoft Windows 98
Microsoft Windows 95
Microsoft Windows 95
%s (Build %d)
%s (Build %d)
Service Pack 6a (Build %d)
Service Pack 6a (Build %d)
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q246009
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q246009
Web Edition
Web Edition
Service Pack %d (Build %d)
Service Pack %d (Build %d)
Microsoft Windows NT
Microsoft Windows NT
Microsoft Windows 2000
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows XP
Microsoft Windows Server 2003,
Microsoft Windows Server 2003,
Microsoft Windows XP Professional x64 Edition
Microsoft Windows XP Professional x64 Edition
Microsoft Windows Server 2003 "R2"
Microsoft Windows Server 2003 "R2"
Windows Server 2008
Windows Server 2008
Windows Vista
Windows Vista
Windows Server 2008 R2
Windows Server 2008 R2
Windows 7
Windows 7
ox-x-x-x-x-x
ox-x-x-x-x-x
\Tencent\Users\*.*
\Tencent\Users\*.*
nKERNEL32.DLL
nKERNEL32.DLL
!"#$%&'()* ,-.
!"#$%&'()* ,-.
UUWiseHelper.dll
UUWiseHelper.dll
uuwise.com
uuwise.com
1, 1, 1, 4
1, 1, 1, 4
1.0.0.1
1.0.0.1
!"#$%&'()* ,-
!"#$%&'()* ,-
24, 0, 0, 1
24, 0, 0, 1
hXXp://VVV.sz789.net/
hXXp://VVV.sz789.net/
Windows
Windows
1.0.0.0
1.0.0.0
(hXXp://VVV.eyuyan.com)
(hXXp://VVV.eyuyan.com)
{84288AAD-BA02-4EF2-85EC-3FAD4D11354D}
{84288AAD-BA02-4EF2-85EC-3FAD4D11354D}
{26037A0E-7CBD-4FFF-9C63-56F2D0770214}
{26037A0E-7CBD-4FFF-9C63-56F2D0770214}
{7BF80980-BF32-101A-8BBB-00AA00300CAB}
{7BF80980-BF32-101A-8BBB-00AA00300CAB}
(*.*)
(*.*)
1.5.2012.8
1.5.2012.8