Skip to main content

Trojan.Win32.Delphi_7705d253d8


not-a-virus:AdWare.Win32.Agent.jkde (Kaspersky), Gen:Variant.Strictor.97737 (B) (Emsisoft), Trojan.Win32.Delphi.FD, Trojan.Win32.Sasfis.FD, VirTool.Win32.DelfInject.FD, GenericInjector.YR (Lavasoft MAS)Behaviour: Trojan, VirTool, Adware

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

MD5: 7705d253d8fe25432eebfa472e167ee3

SHA1: b7c87a571995ea5aab53794814a33fc1109a5a95

SHA256: 01154f5a765acff58326b7f9887007bf98a963362eba6f932cbe3fffa5ba45ac

SSDeep: 49152:KDWrFS/4lmaBW0qPDAJkVgndTXFk6OgDU8aDNw7Op2BpZ1SSEzmUgG:mGFJmaBybAmedTXu6T2xwSI7v pgG

Size: 2133392 bytes

File type: EXE

Platform: WIN32

Entropy: Packed

PEID: UPolyXv05_v6

Company: no certificate found

Created at: 2015-09-14 10:10:15

Analyzed on: WindowsXP SP3 32-bit

Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Dynamic Analysis

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

%original file name%.exe:1332

The Trojan injects its code into the following process(es):

OKS.exe:916
picbus.exe:928
picview.exe:1064

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process picbus.exe:928 makes changes in the file system.


The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\xanimate[2].js (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\u=1875430050,2580979778&fm=76[1].jpg (8719 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\tongji5[1].htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\details[1].css (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\web_avatar[1].jpg (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAAZOHCX.2281 (667 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\mask[2].css (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\a[1].js (477 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\CAOD4PGZ.2172 (667 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\base[1].js (359 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\web_close[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\u=990497764,1232924695&fm=76[1].jpg (5851 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ie6_png[1].js (198 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\base[2].css (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\gac[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX1.tmp (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\u=1315327375,467324658&fm=76[1].jpg (12718 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\b[2].js (414 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\jquery-1.11.2.min[2].js (3251 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (2988 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\17323[1].htm (921 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\640x107[1].png (1826 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\t00aa2[2].js (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\mask[1].css (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAMRQPAH.htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\640x107[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\autoscroll[2].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\CAZIQH3F.gif (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\web_title[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\imgload[2].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\hongbao[1].js (338 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CABIQ7VT.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\logo[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hongb[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\content[1].js (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yigao[1].txt (181 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\b[1].js (820 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\u=3059151468,3543266969&fm=76[1].jpg (479 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX2.tmp (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\u=1516739037,2004201896&fm=76[1].jpg (10060 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\share_icons[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\content[2].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\m[1].js (9301 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\u=1856364587,2693382950&fm=76[1].jpg (13084 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\CALRZP48.1891 (656 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\u=1568043101,2080188669&fm=76[1].jpg (11912 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\details[1].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\qr_code[1].jpg (2476 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\a[2].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\c[1].js (3559 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX4.tmp (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\CAIDYDQH.htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\go[1].htm (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\CAMB0BF0.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250 (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\CAVQ0FB1.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737392 (536 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\m[2].js (10413 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\autoscroll[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\ewm[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\head[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\gac[2].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ac_placeholder[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\share_icons[1].png (915 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\web_title[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\t00aa2[1].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\jquery-1.11.2.min[1].js (2688 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\li_bg[1].png (2066 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@baidu[1].txt (198 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\base[2].js (957 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\base[1].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CA0TQRST.gif (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\c[2].js (3960 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\hongbao[2].js (329 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\web_bg[1].gif (3890 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX3.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\CAAJO1UJ.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250 (599 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\DD_belatedPNG[2].js (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\li_bg[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\imgload[1].js (889 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\CA9GAD1N.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391 (863 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\DD_belatedPNG[1].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\u=728057772,766315808&fm=76[1].jpg (13117 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@baidu[2].txt (198 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\emar[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\xanimate[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\g[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\btn_hidden[1].jpg (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\17323[1].html (1426 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\to_top_v2[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\excanvas[2].js (1276 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\excanvas[1].js (1322 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\CA0PUZCT.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250 (1 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\mask[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\640x107[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\CAAJO1UJ.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\autoscroll[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\hongbao[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\li_bg[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\content[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\a[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\b[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\imgload[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\base[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\DD_belatedPNG[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\CALRZP48.1891 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\share_icons[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\t00aa2[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\jquery-1.11.2.min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\xanimate[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\gac[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@baidu[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\CAOD4PGZ.2172 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\details[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\base[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\m[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\excanvas[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\c[1].js (0 bytes)

The process %original file name%.exe:1332 makes changes in the file system.


The Trojan creates and/or writes to the following file(s):

%Program Files%\picview_201602291116\201602291116\data\WinFileMenu.xml (862 bytes)
%Program Files%\picview_201602291116\201602291116\data\WinOperMenu.xml (1 bytes)
%Program Files%\picview_201602291116\201602291116\data\6.ico (784 bytes)
%Program Files%\picview_201602291116\201602291116\data\0.ico (9 bytes)
%Program Files%\picview_201602291116\201602291116\data\1.ico (784 bytes)
%Program Files%\picview_201602291116\201602291116\data\window_btn_close.png (2 bytes)
%Program Files%\picview_201602291116\201602291116\data\window_popup.png (1 bytes)
%Program Files%\picview_201602291116\201602291116\data\9.ico (784 bytes)
%Program Files%\picview_201602291116\201602291116\DuiLib_u.dll (14184 bytes)
%Program Files%\picview_201602291116\201602291116\data\img.ico (9 bytes)
%Program Files%\picview_201602291116\201602291116\data\4.ico (784 bytes)
%Program Files%\picview_201602291116\201602291116\data\logo.png (2 bytes)
%Program Files%\picview_201602291116\201602291116\data\3.ico (784 bytes)
%Program Files%\picview_201602291116\201602291116\data\7.ico (784 bytes)
%Program Files%\picview_201602291116\201602291116\data\bar_btn.png (1 bytes)
%Program Files%\picview_201602291116\201602291116\data\btn_close1.png (2 bytes)
%Program Files%\picview_201602291116\201602291116\data\8.ico (784 bytes)
%Program Files%\picview_201602291116\201602291116\data\2.ico (784 bytes)
%Program Files%\picview_201602291116\201602291116\msvcr100.dll (25824 bytes)
%Program Files%\picview_201602291116\201602291116\data\popup_s.png (1 bytes)
%Program Files%\picview_201602291116\201602291116\data\WinMainFrame.xml (2 bytes)
%Program Files%\picview_201602291116\201602291116\data\window_btn_max.png (1 bytes)
%Program Files%\picview_201602291116\201602291116\OKS.exe (13368 bytes)
%Program Files%\picview_201602291116\201602291116\picview.exe (20416 bytes)
%Program Files%\picview_201602291116\201602291116\data\tongjiData.ini (168 bytes)
%Program Files%\picview_201602291116\201602291116\data\10.ico (784 bytes)
%Program Files%\picview_201602291116\201602291116\SysConfig.ini (59 bytes)
%Program Files%\picview_201602291116\201602291116\data\user2.ini (24 bytes)
%Program Files%\picview_201602291116\201602291116\data\bar_bg.png (1 bytes)
%Program Files%\picview_201602291116\201602291116\data\window_popup_pass.png (1 bytes)
%Program Files%\picview_201602291116\201602291116\data\11.ico (784 bytes)
%Program Files%\picview_201602291116\201602291116\data\FrmTrayMenu.xml (484 bytes)
%Program Files%\picview_201602291116\201602291116\TPSC.dll (6360 bytes)
%Program Files%\picview_201602291116\201602291116\data\window_btn_mini.png (1 bytes)
%Program Files%\picview_201602291116\201602291116\data\FrmAdvert.xml (185 bytes)
%Program Files%\picview_201602291116\201602291116\Unins.exe (16288 bytes)
%Program Files%\picview_201602291116\201602291116\msvcp100.dll (14184 bytes)
%Program Files%\picview_201602291116\201602291116\data\FrmTrayWebAD.xml (682 bytes)
%Program Files%\picview_201602291116\201602291116\picbus.exe (6360 bytes)
%Program Files%\picview_201602291116\201602291116\data\5.ico (784 bytes)
%Program Files%\picview_201602291116\201602291116\data\window_btn_default.png (1 bytes)

The process picview.exe:1064 makes changes in the file system.


The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\c[2].swf (547 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\index[1].html (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\blank_5307b88[1].png (949 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\oXMLStore[1].xml (106 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\ac[1].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\head_0511e83[1].css (3821 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\core[1].php (763 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\c[1].swf (547 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\oojs[1].js (65 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\room2014_z_4dae78b[1].png (43498 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAMJWHAJ.html?s&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416 (902 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\roomFunction2014_dd2507b[1].js (2553 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\wh[4].js (4683 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\head_061c6e7[1].js (3445 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\o[1].htm (1394 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\room2014_72f51c4[1].css (6370 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\yellow_warn_0473de0[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\oojs[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fp[2].htm (114 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\roomInit_f54bbdd[1].js (22 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@show.bianya[1].txt (210 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\wh[1].js (5629 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\icon_original_95e3302[1].png (450 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\yellow_warn2_b8d73e7[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\CAS1YFKH.gif (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\socket_48ba6f2[1].js (1649 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\tj4[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\stat[1].php (1177 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (6168 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\bd-logo5[1].png (1545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\loading[1].gif (875 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\room2014_z_4dae78b[1].png (29281 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\wh[3].js (2916 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\anticheat[2].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\o[1].swf (157 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@channel.fanxing.kugou[1].txt (211 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\CAEJOXYR.gif (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\20140827184515870962[1].jpg (21919 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\kg_6abcd20[1].js (2779 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\oojs[2].js (928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\stat[1].php (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fp[2].htm (114 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\roomActivity_059de9b[1].js (1118 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\tj7[1].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\core[1].php (763 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tongji3[1].htm (704 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\bd-logo5[1].png (1545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\lab.min_c0c155c[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\wh[2].js (4782 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fp[1].htm (114 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\roomFunction_a35552b[1].js (6437 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\video_6f4f75f[1].gif (575 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tongji2[1].htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\20151130161134_14413[1].flv (312425 bytes)
%Documents and Settings%\%current user%\UserData\KTOR0Z81\oXMLStore[1].xml (106 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\footer_logo_16e645b[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\CA5OWN9L.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416 (902 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\o[1].htm (1394 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\kguser[1].js (2569 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\stat[2].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\fla7.tmp (276056 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\DD_belatedPNG_79c3052[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ac[1].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\KgAck[1].js (461 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\20151130161134_14413[2].flv (244346 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\CPROID[1].xml (310 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAI7G1AB.htm (1264 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\tongji4[1].htm (128 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\blank[1].png (949 bytes)
%Documents and Settings%\%current user%\Desktop\图片查看器.lnk (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX5.tmp (137 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\footer2_fd36cbe[1].png (3040 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tj2[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAGTURWD.htm (1264 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\bg2013_2015_f530136[1].png (31813 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\1028630[1].htm (55643 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\roombg_3eb04e4[1].png (30481 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@pos.baidu[1].txt (814 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@360.rbc[1].txt (139 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\fla6.tmp (215120 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\o[1].swf (157 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\successIcon_754795c[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\template.min[1].css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\tj1[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\T1vgAyBXJb1RCvBVdK.jpg_85x85[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\template.min[2].css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ac[2].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\roomBase_f6883f0[1].js (504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fp[1].htm (114 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\20150807142332126222[1].gif (239 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\18[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\swfobject_dc734ee[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fx_loading_c785dd3[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\footer1_369dc54[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\0f000nTH6UlUciFfpq-CKs[1].swf (1803 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\bigScrollBg_8972341[1].jpg (2386 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ac[1].js (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@pos.baidu[2].txt (406 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\template.min[3].css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\0f000jioG2SODfD3KlS1j6[1].swf (1803 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fxtpl_loading_c785dd3[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\jquery.min_21c00b7[1].js (7330 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\template.min[2].css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\anticheat[1].js (1 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\core[1].php (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ac[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\wh[3].js (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\oXMLStore[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\template.min[2].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ac[2].js (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.aaa[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\c[1].swf (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\oojs[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012014041520140416\index.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\wh[2].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\oojs[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\wh[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ac[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@pos.baidu[2].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@pos.baidu[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\o[1].swf (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012014041520140416 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\template.min[2].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\bd-logo5[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\anticheat[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\template.min[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\20151130161134_14413[1].flv (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\room2014_z_4dae78b[1].png (0 bytes)

Registry activity

The process OKS.exe:916 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1E 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A9 46 77 BD C2 25 5D FB 36 D4 CB B5 CE 43 68 C6"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process picbus.exe:928 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "picbus.exe"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1F 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1442047107"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DA 4B F3 A9 B9 57 16 E4 BF 32 37 DC EC 63 18 D5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process %original file name%.exe:1332 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D0 C0 9C B2 BF 05 11 D3 D8 8C 77 3B 30 EC C3 13"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

The process picview.exe:1064 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\.bmp]
"(Default)" = "PicView.bmp"

[HKCU\Software\Classes\PicView.jpg]
"(Default)" = "PicView.jpg"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png]
"Progid" = "PicVi䱥聛"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Classes\PicView.jpeg]
"(Default)" = "PicView.jpeg"

[HKCU\Software\Classes\PicView.png\DefaultIcon]
"(Default)" = "%Program Files%\picview_201602291116\201602291116\Data\img.ico"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Classes\PicView.png]
"(Default)" = "PicView.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp]
"Progid" = "PicVie"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\.jpg]
"(Default)" = "PicView.jpg"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKCU\Software\Classes\PicView.jpg\DefaultIcon]
"(Default)" = "%Program Files%\picview_201602291116\201602291116\Data\img.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
"Progid" = "PicVie"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
"Progid" = "PicVi聥"

[HKCU\Software\Classes\PicView.jpeg\Shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\PicView.jpg\Shell\Open\Command]
"(Default)" = "%Program Files%\picview_201602291116\201602291116\picview.exe %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKCU\Software\Classes\PicView.png\Shell\Open]
"(Default)" = "使用图片查看器打开"

[HKCU\Software\Classes\PicView.jpeg\DefaultIcon]
"(Default)" = "%Program Files%\picview_201602291116\201602291116\Data\img.ico"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016022920160301]
"CacheOptions" = "11"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Classes\.jpeg]
"(Default)" = "PicView.jpeg"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "picview.exe"

[HKCU\Software\Classes\PicView.jpeg\Shell\Open]
"(Default)" = "使用图片查看器打开"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\picview_201602291116\201602291116]
"picbus.exe" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\Classes\PicView.bmp]
"(Default)" = "PicView.bmp"

[HKCU\Software\Classes\.png]
"(Default)" = "PicView.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg]
"Progid" = "PicVie"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\picview_201602291116\201602291116]
"OKS.exe" = "TPCKQ-1"

[HKCU\Software\Classes\PicView.jpeg\Shell\Open\Command]
"(Default)" = "%Program Files%\picview_201602291116\201602291116\picview.exe %1"

[HKCU\Software\Classes\PicView.jpg\Shell\Open]
"(Default)" = "使用图片查看器打开"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1D 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1442214472"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
"Progid" = "PicVie"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016022920160301]
"CachePrefix" = ":2016022920160301:"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9F D7 96 B9 BC DA A5 5D 6E E5 D2 32 66 DB 82 44"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg]
"Progid" = "PicVie"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016022920160301]
"CachePath" = "%USERPROFILE%\Local Settings\History\History.IE5\MSHist012016022920160301\"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Classes\PicView.bmp\Shell]
"(Default)" = "Open"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Classes\PicView.jpg\Shell]
"(Default)" = "Open"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
"Progid" = "PicVie"

[HKCU\Software\Classes\PicView.png\Shell\Open\Command]
"(Default)" = "%Program Files%\picview_201602291116\201602291116\picview.exe %1"

[HKCU\Software\Classes\PicView.bmp\DefaultIcon]
"(Default)" = "%Program Files%\picview_201602291116\201602291116\Data\img.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016022920160301]
"CacheRepair" = "0"

[HKCU\Software\Classes\PicView.bmp\Shell\Open\Command]
"(Default)" = "%Program Files%\picview_201602291116\201602291116\picview.exe %1"

[HKCU\Software\Classes\PicView.png\Shell]
"(Default)" = "Open"

[HKCU\Software\Classes\PicView.bmp\Shell\Open]
"(Default)" = "使用图片查看器打开"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016022920160301]
"CacheLimit" = "8192"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\OpenWithProgids]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\OpenWithProgids]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014041520140416]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithProgids]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\OpenWithProgids]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5 File path
38752b25c7704e54a3f311fd4a7071ddc:\Program Files\picview_201602291116\201602291116\DuiLib_u.dll
08a1ec669437b08272b181f0c11b986ec:\Program Files\picview_201602291116\201602291116\OKS.exe
682e6361651fe16d1b2a56ccf2e2e3b3c:\Program Files\picview_201602291116\201602291116\TPSC.dll
c1343749f65d8c8d5aef532a21e0259cc:\Program Files\picview_201602291116\201602291116\Unins.exe
17b8f8501fbaecc8cb1451a7d066191bc:\Program Files\picview_201602291116\201602291116\msvcp100.dll
69069ca4029767927409eaf669778d07c:\Program Files\picview_201602291116\201602291116\msvcr100.dll
9d23ec46fd72d180b7dfc2dcd2f86652c:\Program Files\picview_201602291116\201602291116\picbus.exe
99110c8fc740befa3fae0951967a820ac:\Program Files\picview_201602291116\201602291116\picview.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.

Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    %original file name%.exe:1332

  2. Delete the original Trojan file.
  3. Delete or disinfect the following files created/modified by the Trojan:

    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\xanimate[2].js (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\u=1875430050,2580979778&fm=76[1].jpg (8719 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\tongji5[1].htm (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\details[1].css (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\web_avatar[1].jpg (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAAZOHCX.2281 (667 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\mask[2].css (14 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\a[1].js (477 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\CAOD4PGZ.2172 (667 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\base[1].js (359 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\web_close[1].jpg (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\u=990497764,1232924695&fm=76[1].jpg (5851 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ie6_png[1].js (198 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\base[2].css (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\gac[1].js (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\VGX1.tmp (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\u=1315327375,467324658&fm=76[1].jpg (12718 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\b[2].js (414 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\jquery-1.11.2.min[2].js (3251 bytes)
    %Documents and Settings%\%current user%\Cookies\index.dat (2988 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\17323[1].htm (921 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\640x107[1].png (1826 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\t00aa2[2].js (10 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\mask[1].css (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAMRQPAH.htm (24 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\640x107[1].png (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\autoscroll[2].js (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\CAZIQH3F.gif (49 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\web_title[1].gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\imgload[2].js (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\hongbao[1].js (338 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CABIQ7VT.htm (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\logo[1].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hongb[1].gif (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\content[1].js (1 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@yigao[1].txt (181 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\b[1].js (820 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\u=3059151468,3543266969&fm=76[1].jpg (479 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\VGX2.tmp (13 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\u=1516739037,2004201896&fm=76[1].jpg (10060 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\share_icons[1].png (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\content[2].js (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\m[1].js (9301 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\u=1856364587,2693382950&fm=76[1].jpg (13084 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\CALRZP48.1891 (656 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\u=1568043101,2080188669&fm=76[1].jpg (11912 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\details[1].css (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\qr_code[1].jpg (2476 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\a[2].js (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\c[1].js (3559 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\VGX4.tmp (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\CAIDYDQH.htm (24 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\go[1].htm (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\CAMB0BF0.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250 (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\CAVQ0FB1.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737392 (536 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\m[2].js (10413 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\autoscroll[1].js (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\ewm[1].jpg (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\head[1].jpg (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\gac[2].js (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ac_placeholder[1].jpg (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\share_icons[1].png (915 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\web_title[1].png (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\t00aa2[1].js (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\jquery-1.11.2.min[1].js (2688 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\li_bg[1].png (2066 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@baidu[1].txt (198 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\base[2].js (957 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\base[1].css (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CA0TQRST.gif (49 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\c[2].js (3960 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\hongbao[2].js (329 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\web_bg[1].gif (3890 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\VGX3.tmp (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\CAAJO1UJ.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250 (599 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\DD_belatedPNG[2].js (12 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\li_bg[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\imgload[1].js (889 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\CA9GAD1N.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391 (863 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\DD_belatedPNG[1].js (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\u=728057772,766315808&fm=76[1].jpg (13117 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@baidu[2].txt (198 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\emar[1].gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\xanimate[1].js (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\g[1].png (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\btn_hidden[1].jpg (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\17323[1].html (1426 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\to_top_v2[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\excanvas[2].js (1276 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\excanvas[1].js (1322 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\CA0PUZCT.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250 (1 bytes)
    %Program Files%\picview_201602291116\201602291116\data\WinFileMenu.xml (862 bytes)
    %Program Files%\picview_201602291116\201602291116\data\WinOperMenu.xml (1 bytes)
    %Program Files%\picview_201602291116\201602291116\data\6.ico (784 bytes)
    %Program Files%\picview_201602291116\201602291116\data\0.ico (9 bytes)
    %Program Files%\picview_201602291116\201602291116\data\1.ico (784 bytes)
    %Program Files%\picview_201602291116\201602291116\data\window_btn_close.png (2 bytes)
    %Program Files%\picview_201602291116\201602291116\data\window_popup.png (1 bytes)
    %Program Files%\picview_201602291116\201602291116\data\9.ico (784 bytes)
    %Program Files%\picview_201602291116\201602291116\DuiLib_u.dll (14184 bytes)
    %Program Files%\picview_201602291116\201602291116\data\img.ico (9 bytes)
    %Program Files%\picview_201602291116\201602291116\data\4.ico (784 bytes)
    %Program Files%\picview_201602291116\201602291116\data\logo.png (2 bytes)
    %Program Files%\picview_201602291116\201602291116\data\3.ico (784 bytes)
    %Program Files%\picview_201602291116\201602291116\data\7.ico (784 bytes)
    %Program Files%\picview_201602291116\201602291116\data\bar_btn.png (1 bytes)
    %Program Files%\picview_201602291116\201602291116\data\btn_close1.png (2 bytes)
    %Program Files%\picview_201602291116\201602291116\data\8.ico (784 bytes)
    %Program Files%\picview_201602291116\201602291116\data\2.ico (784 bytes)
    %Program Files%\picview_201602291116\201602291116\msvcr100.dll (25824 bytes)
    %Program Files%\picview_201602291116\201602291116\data\popup_s.png (1 bytes)
    %Program Files%\picview_201602291116\201602291116\data\WinMainFrame.xml (2 bytes)
    %Program Files%\picview_201602291116\201602291116\data\window_btn_max.png (1 bytes)
    %Program Files%\picview_201602291116\201602291116\OKS.exe (13368 bytes)
    %Program Files%\picview_201602291116\201602291116\picview.exe (20416 bytes)
    %Program Files%\picview_201602291116\201602291116\data\tongjiData.ini (168 bytes)
    %Program Files%\picview_201602291116\201602291116\data\10.ico (784 bytes)
    %Program Files%\picview_201602291116\201602291116\SysConfig.ini (59 bytes)
    %Program Files%\picview_201602291116\201602291116\data\user2.ini (24 bytes)
    %Program Files%\picview_201602291116\201602291116\data\bar_bg.png (1 bytes)
    %Program Files%\picview_201602291116\201602291116\data\window_popup_pass.png (1 bytes)
    %Program Files%\picview_201602291116\201602291116\data\11.ico (784 bytes)
    %Program Files%\picview_201602291116\201602291116\data\FrmTrayMenu.xml (484 bytes)
    %Program Files%\picview_201602291116\201602291116\TPSC.dll (6360 bytes)
    %Program Files%\picview_201602291116\201602291116\data\window_btn_mini.png (1 bytes)
    %Program Files%\picview_201602291116\201602291116\data\FrmAdvert.xml (185 bytes)
    %Program Files%\picview_201602291116\201602291116\Unins.exe (16288 bytes)
    %Program Files%\picview_201602291116\201602291116\msvcp100.dll (14184 bytes)
    %Program Files%\picview_201602291116\201602291116\data\FrmTrayWebAD.xml (682 bytes)
    %Program Files%\picview_201602291116\201602291116\picbus.exe (6360 bytes)
    %Program Files%\picview_201602291116\201602291116\data\5.ico (784 bytes)
    %Program Files%\picview_201602291116\201602291116\data\window_btn_default.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\c[2].swf (547 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\index[1].html (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\blank_5307b88[1].png (949 bytes)
    %Documents and Settings%\%current user%\UserData\2Z89WTQV\oXMLStore[1].xml (106 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\ac[1].js (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\head_0511e83[1].css (3821 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\core[1].php (763 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\c[1].swf (547 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\oojs[1].js (65 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\room2014_z_4dae78b[1].png (43498 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAMJWHAJ.html?s&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416 (902 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\roomFunction2014_dd2507b[1].js (2553 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\wh[4].js (4683 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\head_061c6e7[1].js (3445 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\o[1].htm (1394 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\room2014_72f51c4[1].css (6370 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\yellow_warn_0473de0[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\oojs[1].js (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fp[2].htm (114 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\roomInit_f54bbdd[1].js (22 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@show.bianya[1].txt (210 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\wh[1].js (5629 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\icon_original_95e3302[1].png (450 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\yellow_warn2_b8d73e7[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\CAS1YFKH.gif (49 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\socket_48ba6f2[1].js (1649 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\tj4[1].htm (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\stat[1].php (1177 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\bd-logo5[1].png (1545 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\loading[1].gif (875 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\room2014_z_4dae78b[1].png (29281 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\wh[3].js (2916 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\anticheat[2].js (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\o[1].swf (157 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@channel.fanxing.kugou[1].txt (211 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\CAEJOXYR.gif (49 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\20140827184515870962[1].jpg (21919 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\kg_6abcd20[1].js (2779 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\oojs[2].js (928 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\stat[1].php (1177 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fp[2].htm (114 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\roomActivity_059de9b[1].js (1118 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\tj7[1].htm (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\core[1].php (763 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tongji3[1].htm (704 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\bd-logo5[1].png (1545 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\lab.min_c0c155c[1].js (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\wh[2].js (4782 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fp[1].htm (114 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\roomFunction_a35552b[1].js (6437 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\video_6f4f75f[1].gif (575 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tongji2[1].htm (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\20151130161134_14413[1].flv (312425 bytes)
    %Documents and Settings%\%current user%\UserData\KTOR0Z81\oXMLStore[1].xml (106 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\footer_logo_16e645b[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\CA5OWN9L.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416 (902 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\o[1].htm (1394 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\kguser[1].js (2569 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\stat[2].gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\fla7.tmp (276056 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\DD_belatedPNG_79c3052[1].js (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ac[1].js (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\KgAck[1].js (461 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\20151130161134_14413[2].flv (244346 bytes)
    %Documents and Settings%\%current user%\UserData\YJM90VAL\CPROID[1].xml (310 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAI7G1AB.htm (1264 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\tongji4[1].htm (128 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\blank[1].png (949 bytes)
    %Documents and Settings%\%current user%\Desktop\图片查看器.lnk (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\stat[1].gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\VGX5.tmp (137 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\footer2_fd36cbe[1].png (3040 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tj2[1].htm (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAGTURWD.htm (1264 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\bg2013_2015_f530136[1].png (31813 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\1028630[1].htm (55643 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\roombg_3eb04e4[1].png (30481 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@pos.baidu[1].txt (814 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@360.rbc[1].txt (139 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\fla6.tmp (215120 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\o[1].swf (157 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\successIcon_754795c[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\template.min[1].css (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\tj1[1].htm (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\T1vgAyBXJb1RCvBVdK.jpg_85x85[1].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\template.min[2].css (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ac[2].js (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\roomBase_f6883f0[1].js (504 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fp[1].htm (114 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\20150807142332126222[1].gif (239 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\18[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\swfobject_dc734ee[1].js (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fx_loading_c785dd3[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\footer1_369dc54[1].png (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\0f000nTH6UlUciFfpq-CKs[1].swf (1803 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\bigScrollBg_8972341[1].jpg (2386 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ac[1].js (1 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@pos.baidu[2].txt (406 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\template.min[3].css (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\0f000jioG2SODfD3KlS1j6[1].swf (1803 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fxtpl_loading_c785dd3[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\jquery.min_21c00b7[1].js (7330 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\template.min[2].css (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\anticheat[1].js (1 bytes)

  4. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  5. Reboot the computer.
*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

Company Name:
Product Name: mspic
Product Version: 1.15.914.2
Legal Copyright: Copyright (C) 2015
Legal Trademarks:
Original Filename: mspic.exe
Internal Name: mspic.exe
File Version: 1.15.914.2
File Description: mspic ins
Comments:
Language: English (United States)

Company Name: Product Name: mspic Product Version: 1.15.914.2Legal Copyright: Copyright (C) 2015Legal Trademarks: Original Filename: mspic.exeInternal Name: mspic.exeFile Version: 1.15.914.2File Description: mspic ins Comments: Language: English (United States)

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text409676526768004.585099bccf691b359e11f4ecbecdc8c97ed5d
.rdata8192022688230403.354232e6426a1838c51792768d0608258b864
.data1064962138051202.6724c2474d593db577799383c3b357d06910
.rsrc131072200978420101125.46818314691ff750e2df1a71c7136ae53f17c
.reloc214220813342138241.69757d17705cfc4ff389bb009660ca1743e3e

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL IP
hxxp://tongji.hiv-hiv.com/default/index.html?v=03AD446F3A574AFE0281630A166E51D7FAB141130AE0C8AAD6E453962939C4CD189605251DC32B837AF9D107201FD8A478B90BD175458A857845A26B90C627E59C5E41535A47A5C2E41FF1EA05222EDE106.75.130.196
hxxp://update.163vv.com/tj2.ashx?v=1.15.914.2
hxxp://update.163vv.com/tj4.ashx?v=1.15.914.2
hxxp://update.163vv.com/tj1.ashx?v=1.15.914.2
hxxp://update.163vv.com/tj7.ashx?v=1.15.914.2
hxxp://tongji.hiv-hiv.com/api/tongji3106.75.130.196
hxxp://tongji.hiv-hiv.com/api/tongji4?param=v1106.75.130.196
hxxp://tongji.hiv-hiv.com/api/tongji5106.75.130.196
hxxp://eurpo.b9.aicdn.com/article/kankan/go.html
hxxp://eurpo.b9.aicdn.com/article/a/201511/17323.html
hxxp://eurpo.b9.aicdn.com/css/base.css
hxxp://eurpo.b9.aicdn.com/css/details.css
hxxp://eurpo.b9.aicdn.com/css/mask.css
hxxp://eurpo.b9.aicdn.com/js/excanvas.js
hxxp://tongji.hiv-hiv.com/api/tongji2106.75.130.196
hxxp://ecomcbjs.wshifen.com//js/m.js
hxxp://tongji.hiv-hiv.com/API/GetAdvConfig?param=v1106.75.130.196
hxxp://eurpo.b9.aicdn.com/sc/gac.js
hxxp://eurpo.b9.aicdn.com/js/DD_belatedPNG.js
hxxp://eurpo.b9.aicdn.com/js/ie6_png.js
hxxp://eurpo.b9.aicdn.com/js/a.js?v=13
hxxp://eurpo.b9.aicdn.com/js/t00aa2.js
hxxp://eurpo.b9.aicdn.com/images/logo.jpg
hxxp://wmjs.wshifen.com/cpro/ui/c.js
hxxp://eurpo.b9.aicdn.com/images/ac_placeholder.jpg
hxxp://eurpo.b9.aicdn.com/images/640x107.png
hxxp://eurpo.b9.aicdn.com/images/share_icons.png
hxxp://cb.e.shifen.com/acom?di=1172330&dri=0&dis=0&dai=1&ps=794x288&dcb=BAIDU_SSP_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737392
hxxp://cb.e.shifen.com/acom?di=u2480739&dri=0&dis=0&dai=1&ps=74x308&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391
hxxp://js.union001.com/PClick.aspx?AID=19948&KEY=AF54BBD2867C2DE15DDD9A452A155309CABFB4C7433B7CCA3F16B8C72F291D02
hxxp://cb.e.shifen.com/acom?di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250
hxxp://eurpo.b9.aicdn.com/images/li_bg.png
hxxp://cb.e.shifen.com/acom?di=u2355460&dri=0&dis=0&dai=3&ps=1233x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250
hxxp://eurpo.b9.aicdn.com/images/btn_hidden.jpg
hxxp://eurpo.b9.aicdn.com/images/qr_code.jpg
hxxp://eurpo.b9.aicdn.com/images/ewm.jpg
hxxp://eurpo.b9.aicdn.com/images/hongb.gif
hxxp://eurpo.b9.aicdn.com/js/b.js
hxxp://eurpo.b9.aicdn.com/images/g.png
hxxp://eurpo.b9.aicdn.com/images/web_title.png
hxxp://eurpo.b9.aicdn.com/images/to_top_v2.jpg
hxxp://eurpo.b9.aicdn.com/images/web_title.gif
hxxp://eurpo.b9.aicdn.com/images/head.jpg
hxxp://eurpo.b9.aicdn.com/images/web_avatar.jpg
hxxp://cb.e.shifen.com/acom?rdid=2480739&dc=2&di=u2480739&dri=0&dis=0&dai=1&ps=74x308&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391&qn=bc8e12d50064a9a9&tt=1456737391050.438.1891.1891
hxxp://eurpo.b9.aicdn.com/images/web_close.jpg
hxxp://eurpo.b9.aicdn.com/js/jquery-1.11.2.min.js
hxxp://eurpo.b9.aicdn.com/images/web_bg.gif
hxxp://cb.e.shifen.com/acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172
hxxp://eurpo.b9.aicdn.com/js/imgload.js
hxxp://kgnop1.kugou.com/room/qidiancpm?sUnionId=17614
hxxp://eurpo.b9.aicdn.com/js/base.js
hxxp://eurpo.b9.aicdn.com/js/autoscroll.js
hxxp://eurpo.b9.aicdn.com/js/xanimate.js
hxxp://cbjslog.e.shifen.com/log?type=ssplog&id=-1&error=responseEmpty&status=renderFail&async=-1&from=ssp&tm=1456737392722&.stamp=0.5117792924746438
hxxp://eurpo.b9.aicdn.com/js/content.js
hxxp://cb.e.shifen.com/acom?sz=300x250&rdid=2355460&dc=2&di=u2355460&dri=0&dis=0&dai=3&ps=1233x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=3a3da2ebe2e4ff2e&tt=1456737391050.1875.2281.2281
hxxp://eurpo.b9.aicdn.com/js/hongbao.js
hxxp://eurpo.b9.aicdn.com/js/jquery.pin.min.js
hxxp://gpla1.wac.v2cdn.net/1028630
hxxp://wmjs.wshifen.com/cpro/ui/noexpire/css/2.0.1/template.min.css
hxxp://wmjs.wshifen.com/cpro/ui/noexpire/js/2.0.1/oojs.js
hxxp://wn.pos.e.shifen.com/adx.php?c=d25pZD05ZWY5YzM2OGY2ODVmYjM2AHM9OWVmOWMzNjhmNjg1ZmIzNgB0PTE0NTY3Mzc1MDQAc2U9MQBidT00AHByaWNlPVZ0UU00QUFBMFNwN2pFcGdXNUlBOHFzVHlnTWZuTTdtb0JoMWRBAGNoYXJnZV9wcmljZT0xAHNoYXJpbmdfcHJpY2U9MTAwMAB3aW5fZHNwPTQAY2htZD0xAGJkaWQ9NzUyMjQzMzE5NEUxNDgzQkU0MEFBMTlCQzMxQ0ZBQ0YAY3Byb2lkPQBiY2htZD0wAHY9MQBpPTAyNWFlZjY1
hxxp://wn.pos.e.shifen.com/adx.php?c=d25pZD00ZmM0YzU2NzA0NmIwODdjAHM9NGZjNGM1NjcwNDZiMDg3YwB0PTE0NTY3Mzc1MDMAc2U9MQBidT01AHByaWNlPVZ0UU0zd0FPUDlON2pFcGdXNUlBOHVETGcyMlhzaG01MmpFWmJRAGNoYXJnZV9wcmljZT0xAHNoYXJpbmdfcHJpY2U9MTAwMAB3aW5fZHNwPTUAY2htZD0xAGJkaWQ9NzUyMjQzMzE5NEUxNDgzQkU0MEFBMTlCQzMxQ0ZBQ0YAY3Byb2lkPQBiY2htZD0wAHY9MQBpPTJmMGNiODFj
hxxp://cm.yigao.com/sspcm/cm?dsp_id=100692&dsp_uid=0118.26.150.149
hxxp://t1.n.shifen.com/it/u=1516739037,2004201896&fm=76
hxxp://t1.n.shifen.com/it/u=3059151468,3543266969&fm=76
hxxp://t1.n.shifen.com/it/u=1568043101,2080188669&fm=76
hxxp://t1.n.shifen.com/it/u=1315327375,467324658&fm=76
hxxp://t1.n.shifen.com/it/u=1856364587,2693382950&fm=76
hxxp://t1.n.shifen.com/it/u=990497764,1232924695&fm=76
hxxp://kgnop-ssl.kugou.com/v1/kguser.js
hxxp://cm.pos.e.shifen.com/emar?yguid=61b5dd9346a5421099a85a5027961cfc&ver=1
hxxp://t1.n.shifen.com/it/u=728057772,766315808&fm=76
hxxp://t1.n.shifen.com/it/u=1875430050,2580979778&fm=76
hxxp://serveraddr.serviceweb.kugou.com/KgAck.js42.62.68.44
hxxp://kgnop1.kugou.com/staticPub/css/common/head_0511e83.css
hxxp://kgnop1.kugou.com/fxstatic/images/yellow_warn_0473de0.png
hxxp://kgnop1.kugou.com/fxstatic/images/yellow_warn2_b8d73e7.png
hxxp://kgnop1.kugou.com/staticPub/css/room/room2014_72f51c4.css
hxxp://kgnop1.kugou.com/fxstatic/images/starLevel/pc/18.png
hxxp://kgnop1.kugou.com/fxstatic/images/sprite/css/room/room2014_z_4dae78b.png
hxxp://kgnop1.kugou.com/fxroombg/20140827184515870962.jpg
hxxp://kgnop1.kugou.com/fxstatic/images/userfile/successIcon_754795c.png
hxxp://kgnop1.kugou.com/fxstatic/images/room/2014/bigScrollBg_8972341.jpg
hxxp://kgnop1.kugou.com/v2/fxuserlogo/T1vgAyBXJb1RCvBVdK.jpg_85x85.jpg
hxxp://kgnop1.kugou.com/staticPub/js/lab.min_c0c155c.js
hxxp://kgnop1.kugou.com/fxstatic/images/blank_5307b88.png
hxxp://kgnop1.kugou.com/clanBadge/20150807/20150807142332126222.gif
hxxp://kgnop1.kugou.com/fxstatic/images/blank.png
hxxp://kgnop1.kugou.com/fxstatic/images/footer1_369dc54.png
hxxp://kgnop1.kugou.com/fxstatic/images/fx_loading_c785dd3.gif
hxxp://kgnop1.kugou.com/staticPub/js/lib/kg_6abcd20.js
hxxp://kgnop1.kugou.com/staticPub/js/DD_belatedPNG_79c3052.js
hxxp://kgnop1.kugou.com/fxstatic/images/room/2014/icon_original_95e3302.png
hxxp://kgnop1.kugou.com/fxstatic/images/footer2_fd36cbe.png
hxxp://kgnop1.kugou.com/fxstatic/images/footer_logo_16e645b.gif
hxxp://kgnop1.kugou.com/fxstatic/images/bg2013_2015_f530136.png
hxxp://kgnop1.kugou.com/staticPub/js/room/swfobject_dc734ee.js
hxxp://kgnop1.kugou.com/staticPub/js/lib/jquery.min_21c00b7.js
hxxp://kgnop1.kugou.com/fxstatic/images/loading.gif
hxxp://kgnop1.kugou.com/staticPub/js/room/roomBase_f6883f0.js
hxxp://kgnop1.kugou.com/staticPub/js/room/socket_48ba6f2.js
hxxp://kgnop1.kugou.com/staticPub/js/head_061c6e7.js
hxxp://kgnop1.kugou.com/staticPub/js/room/roomFunction_a35552b.js
hxxp://kgnop1.kugou.com/staticPub/js/room/roomFunction2014_dd2507b.js
hxxp://kgnop1.kugou.com/fxstatic/images/roombg_3eb04e4.png
hxxp://kgnop1.kugou.com/staticPub/js/room/roomActivity_059de9b.js
hxxp://kgnop1.kugou.com/staticPub/js/room/roomInit_f54bbdd.js
hxxp://kgnop1.kugou.com/fxstatic/images/room/video_6f4f75f.gif?333
hxxp://kgnop1.kugou.com/fxstatic/images/fxtpl_loading_c785dd3.gif
hxxp://eurpo.b9.aicdn.com/gg/huyan.html
hxxp://eurpo.b9.aicdn.com/gg/huyan.html?s
hxxp://all.cnzz.com.danuoyi.tbcache.com/stat.php?id=1254817266
hxxp://oz.cnzz.com/stat.htm?id=1254817266&r=&lg=en-us&ntime=1456732646&cnzz_eid=223312916-1456732646-&showp=1276x846&t=&h=1&rnd=411469173198.11.132.200
hxxp://oz.cnzz.com/stat.htm?id=1254817266&r=&lg=en-us&ntime=none&cnzz_eid=223312916-1456732646-&showp=1276x846&t=&h=1&rnd=289534767198.11.132.200
hxxp://cb.e.shifen.com/acom?di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415659&ari=1&dbv=0&drs=3&pcs=296x249&pss=300x253&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=1254817266&t=z
hxxp://cb.e.shifen.com/acom?di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415691&ari=1&dbv=0&drs=3&pcs=300x250&pss=300x250&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html?s&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416
hxxp://cb.e.shifen.com/wh/o.htm?ltr=
hxxp://cb.e.shifen.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415659&ari=1&dbv=0&drs=3&pcs=296x249&pss=300x253&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=2f8bbc640f2a4043&tt=1456737415628.141.1360.1360
hxxp://cb.e.shifen.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415691&ari=1&dbv=0&drs=3&pcs=300x250&pss=300x250&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html?s&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=ee6118cd6aef5aef&tt=1456737415675.94.1344.1344
hxxp://ecomcbjs.wshifen.com/tpl/wh.js
hxxp://wn.pos.e.shifen.com/adx.php?c=d25pZD1jY2Y4YjJiYmYyYzQxYTVhAHM9Y2NmOGIyYmJmMmM0MWE1YQB0PTE0NTY3Mzc1MjgAc2U9MQBidT01AHByaWNlPVZ0UU0tQUFFYkNCN2pFcGdXNUlBOGh0MWtkekdpb2V5enR4UGV3AGNoYXJnZV9wcmljZT0yMjkAc2hhcmluZ19wcmljZT0yMjkwMDAAd2luX2RzcD01AGNobWQ9MQBiZGlkPTc1MjI0MzMxOTRFMTQ4M0JFNDBBQTE5QkMzMUNGQUNGAGNwcm9pZD0AYmNobWQ9MAB2PTEAaT1mNmNlMTgzMQ
hxxp://wn.pos.e.shifen.com/adx.php?c=d25pZD1lNzg3ZTEyNWUwMWE4YzZiAHM9ZTc4N2UxMjVlMDFhOGM2YgB0PTE0NTY3Mzc1MjgAc2U9MQBidT01AHByaWNlPVZ0UU0tQUFFVHI1N2pFcGdXNUlBOHA4OVNDM2JCVHc1c2l3TkxBAGNoYXJnZV9wcmljZT0xNDIAc2hhcmluZ19wcmljZT0xNDIwMDAAd2luX2RzcD01AGNobWQ9MQBiZGlkPTc1MjI0MzMxOTRFMTQ4M0JFNDBBQTE5QkMzMUNGQUNGAGNwcm9pZD0AYmNobWQ9MAB2PTEAaT1jOTJjMDliOQ
hxxp://cb.e.shifen.com/wh/c.swf?v=3
hxxp://cb.e.shifen.com/wh/o.swf?v=1
hxxp://ecomcbjs.wshifen.com/tpl/ac.js
hxxp://wmjs.wshifen.com/cpro/ui/noexpire/img/2.0.0/bd-logo5.png
hxxp://wmpic.wshifen.com/media/v1/0f000jioG2SODfD3KlS1j6.swf
hxxp://wmpic.wshifen.com/media/v1/0f000nTH6UlUciFfpq-CKs.swf
hxxp://eclick.e.shifen.com/fp.htm?br=6&fp=DA5E4CCCE874547210C07EDF3C9427B9&fp2=DA5E4CCCE874547210C07EDF3C9427B9&ci=&bi=7522433194E1483BE40AA19BC31CFACF:FG=1&im=0&wf=1&ct=1000&bp=&m=&t=0&ft=&_=1456737420394
hxxp://wmjs.wshifen.com/cpro/ui/noexpire/js/rs/business/anticheat.js?v=1.0.0
hxxp://eclick.e.shifen.com/fp.htm?br=6&fp=DA5E4CCCE874547210C07EDF3C9427B9&fp2=DA5E4CCCE874547210C07EDF3C9427B9&ci=&bi=7522433194E1483BE40AA19BC31CFACF:FG=1&im=0&wf=1&ct=1797&bp=&m=&t=0&ft=&_=1456737421128
hxxp://eclick.e.shifen.com/fp.htm?ci=7522433194E1483BE40AA19BC31CFACF:FG=1&cn=7522433194E1483BE40AA19BC31CFACF:FG=1&cu=&cl=&cf=&ce=&ff=c&cuid=&cuid2=&de=&bp=&nip=&_=1456737421206
hxxp://eclick.e.shifen.com/fp.htm?ci=7522433194E1483BE40AA19BC31CFACF:FG=1&cn=7522433194E1483BE40AA19BC31CFACF:FG=1&cu=7522433194E1483BE40AA19BC31CFACF:FG=1&cl=&cf=&ce=&ff=c&cuid=&cuid2=&de=&bp=&nip=&_=1456737421894
hxxp://youzu.xdwscache.ourglb0.net/usr/uploads/201511/20151130161134_14413.flv
hxxp://t10.baidu.com/it/u=1516739037,2004201896&fm=76180.97.33.30
hxxp://t12.baidu.com/it/u=1568043101,2080188669&fm=76180.97.33.30
hxxp://r221.fafala123.com/js/a.js?v=13193.240.182.34
hxxp://r221.fafala123.com/css/base.css193.240.182.34
hxxp://r221.fafala123.com/images/web_title.gif193.240.182.34
hxxp://s4.fx.kgimg.com/staticPub/js/DD_belatedPNG_79c3052.js112.90.229.29
hxxp://s3.fx.kgimg.com/clanBadge/20150807/20150807142332126222.gif112.90.228.6
hxxp://r221.fafala123.com/js/content.js193.240.182.34
hxxp://r221.fafala123.com/js/imgload.js193.240.182.34
hxxp://r221.fafala123.com/images/web_avatar.jpg193.240.182.34
hxxp://s4.fx.kgimg.com/staticPub/js/lab.min_c0c155c.js112.90.229.29
hxxp://r221.fafala123.com/js/excanvas.js193.240.182.34
hxxp://cpro.baidustatic.com/cpro/ui/c.js
hxxp://updatever.hiv-hiv.com/tj1.ashx?v=1.15.914.2114.119.41.118
hxxp://t12.baidu.com/it/u=1856364587,2693382950&fm=76180.97.33.30
hxxp://dup.baidustatic.com/tpl/wh.js
hxxp://r221.fafala123.com/images/to_top_v2.jpg193.240.182.34
hxxp://s4.fx.kgimg.com/staticPub/js/room/roomInit_f54bbdd.js112.90.229.29
hxxp://s2.fx.kgimg.com/fxstatic/images/userfile/successIcon_754795c.png112.90.229.29
hxxp://s4.fx.kgimg.com/staticPub/js/room/roomActivity_059de9b.js112.90.229.29
hxxp://pos.baidu.com/acom?di=1172330&dri=0&dis=0&dai=1&ps=794x288&dcb=BAIDU_SSP_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737392115.239.210.141
hxxp://dup.baidustatic.com/tpl/ac.js
hxxp://r221.fafala123.com/images/hongb.gif193.240.182.34
hxxp://360.rbc.cn/PClick.aspx?AID=19948&KEY=AF54BBD2867C2DE15DDD9A452A155309CABFB4C7433B7CCA3F16B8C72F291D02115.238.73.171
hxxp://updatever.hiv-hiv.com/tj7.ashx?v=1.15.914.2114.119.41.118
hxxp://t10.baidu.com/it/u=728057772,766315808&fm=76180.97.33.30
hxxp://pos.baidu.com/acom?di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415659&ari=1&dbv=0&drs=3&pcs=296x249&pss=300x253&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416115.239.210.141
hxxp://s1.fx.kgimg.com/fxstatic/images/fxtpl_loading_c785dd3.gif112.90.228.7
hxxp://r221.fafala123.com/css/mask.css193.240.182.34
hxxp://r221.fafala123.com/js/hongbao.js193.240.182.34
hxxp://t10.baidu.com/it/u=1875430050,2580979778&fm=76180.97.33.30
hxxp://s2.fx.kgimg.com/fxstatic/images/yellow_warn2_b8d73e7.png112.90.229.29
hxxp://s5.fx.kgimg.com/staticPub/css/common/head_0511e83.css112.90.228.6
hxxp://s2.fx.kgimg.com/fxstatic/images/footer_logo_16e645b.gif112.90.229.29
hxxp://r221.fafala123.com/js/jquery-1.11.2.min.js193.240.182.34
hxxp://s4.fx.kgimg.com/staticPub/js/room/roomFunction2014_dd2507b.js112.90.229.29
hxxp://pos.baidu.com/acom?di=u2480739&dri=0&dis=0&dai=1&ps=74x308&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391115.239.210.141
hxxp://ubmcmm.baidustatic.com/media/v1/0f000nTH6UlUciFfpq-CKs.swf
hxxp://r221.fafala123.com/images/qr_code.jpg193.240.182.34
hxxp://eclick.baidu.com/fp.htm?ci=7522433194E1483BE40AA19BC31CFACF:FG=1&cn=7522433194E1483BE40AA19BC31CFACF:FG=1&cu=&cl=&cf=&ce=&ff=c&cuid=&cuid2=&de=&bp=&nip=&_=1456737421206123.125.115.164
hxxp://www.fafala123.com/article/a/201511/17323.html193.240.182.34
hxxp://r221.fafala123.com/js/DD_belatedPNG.js193.240.182.34
hxxp://r221.fafala123.com/js/xanimate.js193.240.182.34
hxxp://s3.fx.kgimg.com/fxstatic/images/room/2014/icon_original_95e3302.png112.90.228.6
hxxp://cm.pos.baidu.com/emar?yguid=61b5dd9346a5421099a85a5027961cfc&ver=161.135.185.179
hxxp://r221.fafala123.com/js/b.js193.240.182.34
hxxp://updatever.hiv-hiv.com/tj2.ashx?v=1.15.914.2114.119.41.118
hxxp://eclick.baidu.com/fp.htm?ci=7522433194E1483BE40AA19BC31CFACF:FG=1&cn=7522433194E1483BE40AA19BC31CFACF:FG=1&cu=7522433194E1483BE40AA19BC31CFACF:FG=1&cl=&cf=&ce=&ff=c&cuid=&cuid2=&de=&bp=&nip=&_=1456737421894123.125.115.164
hxxp://r221.fafala123.com/images/ac_placeholder.jpg193.240.182.34
hxxp://t10.baidu.com/it/u=3059151468,3543266969&fm=76180.97.33.30
hxxp://r221.fafala123.com/images/btn_hidden.jpg193.240.182.34
hxxp://r221.fafala123.com/images/web_title.png193.240.182.34
hxxp://s4.fx.kgimg.com/staticPub/js/room/socket_48ba6f2.js112.90.229.29
hxxp://wn.pos.baidu.com/adx.php?c=d25pZD1jY2Y4YjJiYmYyYzQxYTVhAHM9Y2NmOGIyYmJmMmM0MWE1YQB0PTE0NTY3Mzc1MjgAc2U9MQBidT01AHByaWNlPVZ0UU0tQUFFYkNCN2pFcGdXNUlBOGh0MWtkekdpb2V5enR4UGV3AGNoYXJnZV9wcmljZT0yMjkAc2hhcmluZ19wcmljZT0yMjkwMDAAd2luX2RzcD01AGNobWQ9MQBiZGlkPTc1MjI0MzMxOTRFMTQ4M0JFNDBBQTE5QkMzMUNGQUNGAGNwcm9pZD0AYmNobWQ9MAB2PTEAaT1mNmNlMTgzMQ180.149.131.90
hxxp://pos.baidu.com/acom?rdid=2480739&dc=2&di=u2480739&dri=0&dis=0&dai=1&ps=74x308&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391&qn=bc8e12d50064a9a9&tt=1456737391050.438.1891.1891115.239.210.141
hxxp://static.flv.uuzuonline.com/usr/uploads/201511/20151130161134_14413.flv87.245.198.83
hxxp://wn.pos.baidu.com/adx.php?c=d25pZD05ZWY5YzM2OGY2ODVmYjM2AHM9OWVmOWMzNjhmNjg1ZmIzNgB0PTE0NTY3Mzc1MDQAc2U9MQBidT00AHByaWNlPVZ0UU00QUFBMFNwN2pFcGdXNUlBOHFzVHlnTWZuTTdtb0JoMWRBAGNoYXJnZV9wcmljZT0xAHNoYXJpbmdfcHJpY2U9MTAwMAB3aW5fZHNwPTQAY2htZD0xAGJkaWQ9NzUyMjQzMzE5NEUxNDgzQkU0MEFBMTlCQzMxQ0ZBQ0YAY3Byb2lkPQBiY2htZD0wAHY9MQBpPTAyNWFlZjY1180.149.131.90
hxxp://r221.fafala123.com/js/jquery.pin.min.js193.240.182.34
hxxp://pos.baidu.com/acom?di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415691&ari=1&dbv=0&drs=3&pcs=300x250&pss=300x250&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html?s&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416115.239.210.141
hxxp://s5.fx.kgimg.com/staticPub/css/room/room2014_72f51c4.css112.90.228.6
hxxp://wn.pos.baidu.com/adx.php?c=d25pZD1lNzg3ZTEyNWUwMWE4YzZiAHM9ZTc4N2UxMjVlMDFhOGM2YgB0PTE0NTY3Mzc1MjgAc2U9MQBidT01AHByaWNlPVZ0UU0tQUFFVHI1N2pFcGdXNUlBOHA4OVNDM2JCVHc1c2l3TkxBAGNoYXJnZV9wcmljZT0xNDIAc2hhcmluZ19wcmljZT0xNDIwMDAAd2luX2RzcD01AGNobWQ9MQBiZGlkPTc1MjI0MzMxOTRFMTQ4M0JFNDBBQTE5QkMzMUNGQUNGAGNwcm9pZD0AYmNobWQ9MAB2PTEAaT1jOTJjMDliOQ180.149.131.90
hxxp://eclick.baidu.com/fp.htm?br=6&fp=DA5E4CCCE874547210C07EDF3C9427B9&fp2=DA5E4CCCE874547210C07EDF3C9427B9&ci=&bi=7522433194E1483BE40AA19BC31CFACF:FG=1&im=0&wf=1&ct=1000&bp=&m=&t=0&ft=&_=1456737420394123.125.115.164
hxxp://www.fafala123.com/article/kankan/go.html193.240.182.34
hxxp://r221.fafala123.com/css/details.css193.240.182.34
hxxp://show.bianya.cc/gg/huyan.html?s193.240.182.34
hxxp://ubmcmm.baidustatic.com/media/v1/0f000jioG2SODfD3KlS1j6.swf
hxxp://cbjs.baidu.com//js/m.js
hxxp://t11.baidu.com/it/u=1315327375,467324658&fm=76180.97.33.30
hxxp://s2.fx.kgimg.com/fxstatic/images/blank_5307b88.png112.90.229.29
hxxp://tc.hiv-hiv.com/api/tongji4?param=v1106.75.130.196
hxxp://s2.fx.kgimg.com/fxstatic/images/fx_loading_c785dd3.gif112.90.229.29
hxxp://pos.baidu.com/wh/o.swf?v=1115.239.210.141
hxxp://as.hiv-hiv.com/API/GetAdvConfig?param=v1106.75.130.196
hxxp://s4.fx.kgimg.com/staticPub/js/room/swfobject_dc734ee.js112.90.229.29
hxxp://r221.fafala123.com/images/head.jpg193.240.182.34
hxxp://cpro.baidustatic.com/cpro/ui/noexpire/js/2.0.1/oojs.js
hxxp://s3.fx.kgimg.com/fxstatic/images/footer2_fd36cbe.png112.90.228.6
hxxp://load.hiv-hiv.com/api/tongji2106.75.130.196
hxxp://pos.baidu.com/wh/o.htm?ltr=115.239.210.141
hxxp://s1.fx.kgimg.com/fxstatic/images/room/video_6f4f75f.gif?333112.90.228.7
hxxp://r221.fafala123.com/js/base.js193.240.182.34
hxxp://s4.fx.kgimg.com/staticPub/js/head_061c6e7.js112.90.229.29
hxxp://cbjslog.baidu.com/log?type=ssplog&id=-1&error=responseEmpty&status=renderFail&async=-1&from=ssp&tm=1456737392722&.stamp=0.5117792924746438123.125.112.62
hxxp://r221.fafala123.com/images/share_icons.png193.240.182.34
hxxp://c.cnzz.com/core.php?web_id=1254817266&t=z188.254.86.249
hxxp://pos.baidu.com/acom?di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250115.239.210.141
hxxp://asad.lczchina.com/api/tongji5106.75.130.196
hxxp://s1.fx.kgimg.com/fxstatic/images/yellow_warn_0473de0.png112.90.228.7
hxxp://s1.fx.kgimg.com/fxstatic/images/bg2013_2015_f530136.png112.90.228.7
hxxp://s3.fx.kgimg.com/fxstatic/images/blank.png112.90.228.6
hxxp://cpro.baidustatic.com/cpro/ui/noexpire/js/rs/business/anticheat.js?v=1.0.0
hxxp://pos.baidu.com/acom?di=u2355460&dri=0&dis=0&dai=3&ps=1233x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250115.239.210.141
hxxp://r221.fafala123.com/js/autoscroll.js193.240.182.34
hxxp://s4.fx.kgimg.com/staticPub/js/lib/kg_6abcd20.js112.90.229.29
hxxp://t11.baidu.com/it/u=990497764,1232924695&fm=76180.97.33.30
hxxp://s3.fx.kgimg.com/fxroombg/20140827184515870962.jpg112.90.228.6
hxxp://eclick.baidu.com/fp.htm?br=6&fp=DA5E4CCCE874547210C07EDF3C9427B9&fp2=DA5E4CCCE874547210C07EDF3C9427B9&ci=&bi=7522433194E1483BE40AA19BC31CFACF:FG=1&im=0&wf=1&ct=1797&bp=&m=&t=0&ft=&_=1456737421128123.125.115.164
hxxp://r221.fafala123.com/js/t00aa2.js193.240.182.34
hxxp://s95.cnzz.com/stat.php?id=12548172661.99.192.16
hxxp://wn.pos.baidu.com/adx.php?c=d25pZD00ZmM0YzU2NzA0NmIwODdjAHM9NGZjNGM1NjcwNDZiMDg3YwB0PTE0NTY3Mzc1MDMAc2U9MQBidT01AHByaWNlPVZ0UU0zd0FPUDlON2pFcGdXNUlBOHVETGcyMlhzaG01MmpFWmJRAGNoYXJnZV9wcmljZT0xAHNoYXJpbmdfcHJpY2U9MTAwMAB3aW5fZHNwPTUAY2htZD0xAGJkaWQ9NzUyMjQzMzE5NEUxNDgzQkU0MEFBMTlCQzMxQ0ZBQ0YAY3Byb2lkPQBiY2htZD0wAHY9MQBpPTJmMGNiODFj180.149.131.90
hxxp://pos.baidu.com/acom?sz=300x250&rdid=2355460&dc=2&di=u2355460&dri=0&dis=0&dai=3&ps=1233x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=3a3da2ebe2e4ff2e&tt=1456737391050.1875.2281.2281115.239.210.141
hxxp://pos.baidu.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415659&ari=1&dbv=0&drs=3&pcs=296x249&pss=300x253&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=2f8bbc640f2a4043&tt=1456737415628.141.1360.1360115.239.210.141
hxxp://channel.fanxing.kugou.com/room/qidiancpm?sUnionId=17614112.90.228.7
hxxp://pos.baidu.com/wh/c.swf?v=3115.239.210.141
hxxp://s4.fx.kgimg.com/staticPub/js/lib/jquery.min_21c00b7.js112.90.229.29
hxxp://s1.fx.kgimg.com/fxstatic/images/roombg_3eb04e4.png112.90.228.7
hxxp://p3.fx.kgimg.com/v2/fxuserlogo/T1vgAyBXJb1RCvBVdK.jpg_85x85.jpg112.90.229.29
hxxp://login-user.kugou.com/v1/kguser.js42.62.59.194
hxxp://r221.fafala123.com/images/web_bg.gif193.240.182.34
hxxp://r221.fafala123.com/sc/gac.js193.240.182.34
hxxp://s1.fx.kgimg.com/fxstatic/images/room/2014/bigScrollBg_8972341.jpg112.90.228.7
hxxp://r221.fafala123.com/images/logo.jpg193.240.182.34
hxxp://s4.fx.kgimg.com/staticPub/js/room/roomFunction_a35552b.js112.90.229.29
hxxp://s1.fx.kgimg.com/fxstatic/images/sprite/css/room/room2014_z_4dae78b.png112.90.228.7
hxxp://pos.baidu.com/acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://www.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172115.239.210.141
hxxp://s2.fx.kgimg.com/fxstatic/images/footer1_369dc54.png112.90.229.29
hxxp://show.bianya.cc/gg/huyan.html193.240.182.34
hxxp://r221.fafala123.com/js/ie6_png.js193.240.182.34
hxxp://r221.fafala123.com/images/g.png193.240.182.34
hxxp://sd.hiv-hiv.com/api/tongji3106.75.130.196
hxxp://cpro.baidustatic.com/cpro/ui/noexpire/css/2.0.1/template.min.css
hxxp://r221.fafala123.com/images/web_close.jpg193.240.182.34
hxxp://pos.baidu.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415691&ari=1&dbv=0&drs=3&pcs=300x250&pss=300x250&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html?s&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=ee6118cd6aef5aef&tt=1456737415675.94.1344.1344115.239.210.141
hxxp://r221.fafala123.com/images/ewm.jpg193.240.182.34
hxxp://r221.fafala123.com/images/640x107.png193.240.182.34
hxxp://updatever.hiv-hiv.com/tj4.ashx?v=1.15.914.2114.119.41.118
hxxp://s3.fx.kgimg.com/fxstatic/images/starLevel/pc/18.png112.90.228.6
hxxp://fanxing.kugou.com/102863093.184.220.20
hxxp://s4.fx.kgimg.com/staticPub/js/room/roomBase_f6883f0.js112.90.229.29
hxxp://s3.fx.kgimg.com/fxstatic/images/loading.gif112.90.228.6
hxxp://r221.fafala123.com/images/li_bg.png193.240.182.34
hxxp://cpro.baidustatic.com/cpro/ui/noexpire/img/2.0.0/bd-logo5.png

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /fxstatic/images/bg2013_2015_f530136.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:33 GMT

Content-Type: image/png

Content-Length: 104196

Keep-Alive: timeout=20

Last-Modified: Sat, 30 Jan 2016 15:11:52 GMT

Expires: Mon, 14 Mar 2016 13:16:22 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

.PNG........IHDR............. .......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:B6888B7301A9E311A0FEE2C23E717AE6" xmpMM:DocumentID="xmp.did:D98F4461D91711E481E3EB943F2EDF59" xmpMM:InstanceID="xmp.iid:D98F4460D91711E481E3EB943F2EDF59" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:90B068DDCBAA11E4908EE92F91D782AD" stRef:documentID="xmp.did:90B068DECBAA11E4908EE92F91D782AD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.Mw6...4IDATx....|S.........l.l..L.@..!M.B....2.f...I.....M3.AvH.......Mh!L3.4.`c<.....;.U.d..xO..|.!..'.......s..7(33.......A..........;v..........F.g... ...:{"11..L.../H..^}.wJ#?^U.A . .......RjP.z..&..t........t..>.3n$E...x4....3........F.D....Z.}a.B....j.}Z...)..*.J)!2.&g.E..\F.z.5...ey.d..|...B.n..s..p%.$...P..A.....A....l...J.%{......~A. ...6..............=N.J.Y...P......W_...Vz..gm...P^K[3..o!...).._6.V....)$$...'....&zg.Bzm.}N..*.A.7.&...tJ.T.H.........O..*.F...<..H..]I...PU.&.$....F&R.e...%<6...z.....3...

<<< skipped >>>

GET /cpro/ui/noexpire/css/2.0.1/template.min.css HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2480739&dc=2&di=u2480739&dri=0&dis=0&dai=1&ps=74x308&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391&qn=bc8e12d50064a9a9&tt=1456737391050.438.1891.1891

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: cpro.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:25 GMT

Content-Type: text/css

Content-Length: 1089

Connection: close

ETag: "5667c7a9-441"

Last-Modified: Wed, 09 Dec 2015 06:18:17 GMT

Expires: Mon, 08 Dec 2025 02:46:53 GMT

Age: 6935492

Cache-Control: max-age=315360000

Content-Encoding: gzip

Ohc-Content-Crc: 3267541799

Server: hkg01-sys-jorcol03.hkg01.baidu.com

.....O8V..template.min.css..W.n.6.........h4c;..E_.........%R.a..)./A..K.1O.I;E';...s.=.....h3%..o.(JR...F5....5D...&m.....7.2.*..2E...Q...@...3Ak..e*T.Q..r..5*/Qy....E..LR$8R.i..C."..,.C.-Q#....K.%.P.e....T.6U.2....k..A2,....~B..b..fa;...eD[.$.8.........(Y8......6...`X.)".?..xQZ....H.^...w.u...l....^H,Xn..].C....(z{p.=&.e......."&-D._\t$M.".@~.&............n...<#b...Y.a-=..*kU..q..`......I..3..d..d.dgf 3.}.%....2b..v..aJ.....A<.V.h=..{.)..!..>8I...N....&....<co.D...P....2.hUs. Ik%....T.\......K..p.\_.?........./?....S[...M....Jk5^,2mT..N....,.T.'.._H..47l.~^.a...i.jY..I.....3....t.*O..Y...\.i....._..."....swk....T...?.]...I...;&...7.4..j....!n.L0\X..q4..'..8.f.T.f.@..}r......t.j....#.t.T)1w_`:q.'..b`.{6....#..?#.1h|F.K......O.vuy.l..Q...C...}.;..;..W ...~U...qB..Tq.N..hd...[K...|=r.a...m.."@.....B.......N..h.y......pB1..peM....._.I.Wu(.(.I#.F............V...C}.Px$...p/Gi.n..K(....O'...........BH.W.... ......J..C_.F{....8.O...k.C..F...V......T..B....|n.K..|;.Z.GC.Ai=......}.=$I...l...\..n..x...........g.<."...p..."[).)..V`..c6.....{.O..aH.6*.y.&....O.../.Y$....]....|~.......

GET /gg/huyan.html?s HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: show.bianya.cc

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:46 GMT

Content-Type: text/html

Content-Length: 909

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

Cache-Control: max-age=1800

ETag: "568cc0d7-38d"

Last-Modified: Wed, 06 Jan 2016 07:23:03 GMT

Expires: Mon, 29 Feb 2016 08:42:53 GMT

Accept-Ranges: bytes

Age: 377

X-Cache: HIT(R) from bgp-ha-lya-133; MISS(S)|HIT(R) from gtt-de-fra-100

X-Request-Id: de5eef00237e81f26bff9df85fc8778a; b83aea374f15ab5bdfdaef3885e51e18

Via: T.51102.S.2, T.12814.R.1, V.ntt-cn-hkg-012, T.51102.R.1, M.gtt-de-fra-100

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="hXXp://VVV.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<title></title></head>.<body scroll="no" style="overflow: hidden;padding:0px;margin:0px;">..<script type="text/javascript">. /*......-......300x250_6.........*/. var cpro_id = "u2229533";.</script>.<script src="hXXp://cpro.baidustatic.com/cpro/ui/c.js" type="text/javascript"></script>.<div style="display:none;"><script type="text/javascript">var cnzz_protocol = (("https:" == document.location.protocol) ? " hXXps://" : " hXXp://");document.write(unescape("3E"));</script>.</div>.</body></html>...

<<< skipped >>>

GET /room/qidiancpm?sUnionId=17614 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: channel.fanxing.kugou.com

Connection: Keep-Alive

HTTP/1.1 302 Moved Temporarily

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:24 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-store, no-cache, max-age=0, must-revalidate

Set-Cookie: __fx_union_access__=1-1-1; path=/; domain=.kugou.com

Set-Cookie: __fx_union_page__=3-3:5-2-2; path=/; domain=.kugou.com

Set-Cookie: __fx_unionId__=111-17614; path=/; domain=.kugou.com

Set-Cookie: _m_u_union_=php_56d40ce03bd0e0.98052838; expires=Wed, 30-Mar-2016 09:18:24 GMT; Max-Age=2592000; path=/

location: hXXp://fanxing.kugou.com/1028630

KG-Via: SW-U-52-7

Kugou-Memory: EXPIRED

Connection: close

0..

GET /fxstatic/images/yellow_warn_0473de0.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:28 GMT

Content-Type: image/png

Content-Length: 1126

Keep-Alive: timeout=20

Last-Modified: Sat, 30 Jan 2016 15:11:52 GMT

Expires: Sun, 13 Mar 2016 13:38:38 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

.PNG........IHDR..............sO/....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:C22784AFA5E211E480CAFCDF35114CA2" xmpMM:DocumentID="xmp.did:C22784B0A5E211E480CAFCDF35114CA2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C22784ADA5E211E480CAFCDF35114CA2" stRef:documentID="xmp.did:C22784AEA5E211E480CAFCDF35114CA2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...c....IDATx.b..L...p.q.....1..q ^..S....i6..u@,...,.8.....>H..M......=...b-d.x.6s2....x..3..H.e3g..0..t.8.f@,.y .....@.O.s.0.)...85...8.@.|...dz.5,...i.Y....4`...... ..`D...@|..%...J...a.,x...}@l...-3=.Jz.q...C..5 ........@...~/,Jr.......IEND.B`...

GET /staticPub/js/lib/jquery.min_21c00b7.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:34 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sat, 30 Jan 2016 15:11:52 GMT

Vary: Accept-Encoding

Expires: Mon, 14 Mar 2016 14:48:36 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

99b4...............v.G....?.Y..PB.$e{.n@E.Y..{l.m....)..P...M.H.Mp..<.y..}.y.BA...{.==.Q.......|.1...6.b~.&.<...w..f.....lu4H{W..j{7Z..<Q.....5.6Yl.MR=. .Z.b.In.....Ik....I...t..qi.t....zu.....z=i.to|.....`.......|........ .$.'.|.S~.aG....v.|.}@...zR...nw|.Y......|K:.F..f.>=.....8.G..t..oo6......c..F...;......i.*...'.d7k.9M1x..0..].].....E.y..Z.l..7.D..............]..z../..d.......5..(ne.e>..]4.q....`.nD.b..f.(..[.|....q....y..S9.........n...w..*.6..i>C..Q1Ze.<....%?.]...*...b....$/..Mz.'.....b:D{q..?|.[J..U.y....b.q_...3/..kv n../....*6y.1j.....j.....#;.FO.q..#|4....Q.......S....M...5.!..........K.1...dL...U|.....8..J.{C.r.gt.d.E6I..-m.Zy........_>.6zW.N... o...8q...Mz.I..J..8..7.4...<..3}.1.Y....,_\o.7.&.7.@......;2...<..V....&....[>.I.X.V..b.i......... C.3>....m][|. ....u...>...i..).yUL7...jY..hL...E.....8.&7.4.%.d.,1...5...>).6.)%.t.;.......Nq1.>..w.U1.~.U^.y..Wx.:...U1.c......-..........|.<#yab..z....v.i_^;.J..\z...N;.t...2.......)...'.t....f?..yov.....1O\%...n......g....t.../0OG....>.o.b.. y...D{7.. m.*...8..J.....;O.......t.w.X ...........jW .:.iq.....3Z-fhq......E.It.Y.7q2..I..t..7&q{.X.O...5.P.s.B2..3N...\..lc..JS...*_/..u........lh.X....^....&.................qn...hw..CZ..&.q......<.7lD.G'$.|(g[)H.*3..u..........AZ.s}[a..w...k....@d{.O.].W..x...2....b..f.n.oo."............b:x;g.vd..H.m.,...._....t>.Gls.V.l.E.!..6..j.`k..v....b ...<n..f....h!.....;P.}.%...>v..m........f..s..V...G...).....J.u...e4..!.8F..o.-......5.f..K.N.........$...W....1.

<<< skipped >>>

GET /stat.php?id=1254817266 HTTP/1.1

Accept: */*

Referer: hXXp://show.bianya.cc/gg/huyan.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s95.cnzz.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 9941

Connection: keep-alive

Date: Mon, 29 Feb 2016 07:57:26 GMT

Last-Modified: Mon, 29 Feb 2016 07:57:26 GMT

Cache-Control: max-age=5400,s-maxage=5400

Via: cache16.l2de1[0,200-0,H], cache54.l2de1[1,0], cache2.ru1[0,200-0,H], cache4.ru1[0,0]

Age: 4880

X-Cache: HIT TCP_MEM_HIT dirn:4:460058701

X-Swift-SaveTime: Mon, 29 Feb 2016 07:57:29 GMT

X-Swift-CacheTime: 5397

Timing-Allow-Origin: *

EagleId: bcfe56cc14567375266435393e

(function(){function k(){this.c="1254817266";this.R="z";this.N="";this.K="";this.M="";this.r="1456732646";this.P="oz.cnzz.com";this.L="";this.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_cnzz_CV" this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={};this.la()}function g(a,b){try{var c=.[];c.push("siteid=1254817266");c.push("name=" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.referrer));c.push("page=" f(e.location.href));c.push("agent=" f(e.navigator.userAgent));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Math.random()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join("&")}catch(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeURIComponent,n=unescape;k.prototype={la:function(){try{this.U(),this.J(),this.ia(),this.H(),this.o(),this.ga(),.this.fa(),this.ja(),this.j(),this.ea(),this.ha(),this.ka(),this.ca(),this.aa(),this.da(),this.pa(),e[this.t]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i failed")}},na:function(){try{var a=this;e._czc={push:function(){return a.B.apply(a,arguments)}}}catch(b){g(b,"oP failed")}},aa:function(){try{var a=e._czc;if("[object Array]"==={}.toString.call(a))for(var b=0;b<a.length;b ){var c=a[b];switch(c[0]){case "_setAccount":e._cz_account="[object String]"==={}.toString.call(c[1])?c[1]:String(c[1]);.break;case "_setAutoPageview":"boolean"===typeof c[1]&&(e._cz_autoPageview=c[1])}}}catch(d){g(d,"cS failed")}},pa:function(){try{if("undefined"===typeof e._cz_account||e._cz_account===this.c){e._cz_account=this.c;if("[object

<<< skipped >>>

GET /fxstatic/images/footer1_369dc54.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:33 GMT

Content-Type: image/png

Content-Length: 3747

Keep-Alive: timeout=20

Last-Modified: Thu, 18 Feb 2016 10:19:49 GMT

Expires: Sat, 19 Mar 2016 10:25:43 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

.PNG........IHDR...p..........}......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:3FAA2EADBE9611E580FEB7D4FE9BF93C" xmpMM:InstanceID="xmp.iid:3FAA2EACBE9611E580FEB7D4FE9BF93C" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:323A006A292A11E5B3A085D34BC264D9" stRef:documentID="xmp.did:323A006B292A11E5B3A085D34BC264D9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..]}.\U.?.][Z..V>.i; .....A...Y.....jb4&...Q[B.....(Ud...;....L....q...M..........Rl.-.vk.....{.......{g.3...........9..u../744...\.8..y..kAh.Pg..;.c......!......F.l..|..!RW.p.?..!......\m ....[..G.#....mT...K...( ...>..G.........r|3U....<9L....u..Z.$..`.........x.S.&..V}10.h%..@.....b.#.qyR.. ..A..$.....2...s)...*.@.).%.@O.......ci*-..5Cfm,F.*.`.^.h..*....t..?..i..0?M-.hV..X.u>.2(#..4.>VG...71j$..[.X..b ...f{.....2pi4.....R.S.'...Q.Tu%.Zye...{%n..........X..H.I..r.nA=...,h.,)....P!F..b....S.E...E#.R.I..)Z...^..ql...sw....uI..S|.|,.[...R|....7Hg...r...$.q...V.b...M(

<<< skipped >>>

GET /media/v1/0f000nTH6UlUciFfpq-CKs.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://pos.baidu.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ubmcmm.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:51 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 13002

Connection: close

Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT

Expires: Fri, 06 Jan 2017 17:55:36 GMT

Age: 4548195

Cache-Control: max-age=31536000

media: media

Ohc-Content-Crc: 3688519439

Server: hkg01-sys-jorcol04.hkg01.baidu.com

CWS.GE..x..{.X.K.no^..9KVP`......EE......v." bF....$.QPAA.b....d..(9.0pg.L...|.....;.LOUW.]U].3.;..X...m..a.......B........31......jC.../............@..QT...R$( * .C....@.1B>.*)./.@0!Q=C.A42%P.N.=(.4=..........T.......I.P. .)*)...8...q..H..8P(...t)13.".W.&..M.R!x............'.@....%.y........6AU[Es-AS.@.EwYrY..D#z.i...j.JJ.*..%um..m5._...]Q.x..#.%...b.......O ...h@..wi*......T.. ....J...$A.. =be.m.H...=I.&..C.L..6V3TU..4S1..0USR2"...*.* .)....k0..].;...34..H[A..7.~Q...9..C.r./P..4U.......*.*.......:...ih...../ ~.J.!....B(..^.".PI.H.I|..=L..j...&3.5u.5c.......T..y..!-.......?C....e.....?....1?.............gL;^..$...5*..J.Y..S....@........D:.b.<.....N.#.{.g.]....i...../....t.....a.Mv.p.%1%........@....t....B......b.M.......`.^....c..6....-}Q....F..].`?...tA...$.............%..iy(.1..1.mc.n.M. .a.X...."..\.A.eR..(...h3....5..!....k.Jg5...........t.#{.(....>t).....i..W...y.%)....z..../G\P.>...... .W.............y.ki..,....=H.P..^`.Q..A..o1`K7....@..&..x...[..D ;...>]>...D..(.3Tm..08..D......j$..@...n.q.%... m.(!).j....nD.s".......g.......fv^....;C3.. ...5...j...i.a...p4..h...pq..!@.9m.H....=y...R.vWZ.....=R.Sg.z. ...#.`=.8pem...}.'........2EdJ......l.U..w...lw....!...J..g........F.wJ..N4..Q..........a?.w_{NX.....a..E...i3XrK...q...r}.U(.`..`..R.a&E.|....u.....XU.....M2...P.Vv..1.yq.E...f...f............O_B|v&la:'...7.....!.6.......w..E....I.WVP{...........Z./.K..o^8,.1*.................'..Oo.Qt.............wr.e.Re....S..#.8.c......../. ...a.m'........X.nIs9...s.Zf.../ev/..3.9!....-.].....:.. .....

<<< skipped >>>

GET /core.php?web_id=1254817266&t=z HTTP/1.1

Accept: */*

Referer: hXXp://show.bianya.cc/gg/huyan.html?s

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: c.cnzz.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 763

Connection: keep-alive

Date: Mon, 29 Feb 2016 09:05:42 GMT

Last-Modified: Mon, 29 Feb 2016 09:05:42 GMT

Expires: Mon, 29 Feb 2016 09:20:42 GMT

Via: cache7.l2de1[0,200-0,H], cache41.l2de1[0,0], cache1.ru1[0,200-0,H], cache3.ru1[16,0]

Age: 785

X-Cache: HIT TCP_MEM_HIT dirn:-2:-2

X-Swift-SaveTime: Mon, 29 Feb 2016 09:05:49 GMT

X-Swift-CacheTime: 893

Timing-Allow-Origin: *

EagleId: bcfe56cb14567375270665120e

!function(){var p,q,r,a=encodeURIComponent,b="1254817266",c="",d="",e="online_v3.php",f="z4.cnzz.com",g="1",h="text",i="z",j="站长统计",k=window["_CNZZDbridge_" b]["bobject"],l="http:",m="1",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=" f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&k["callRequest"]([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k["createScriptIcon"](n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/website.php?web_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnzz.com/img/" c ".gif",p="<a href='" q "' target=_blank title='" j "'><img border=0 hspace=0 vspace=0 src='" r "'></a>"):p="<a href='" q "' target=_blank title='" j "'>" j "</a>",k["createIcon"]([p])))}();HTTP/1.1 200 OK..Server: Tengine..Content-Type: application/javascript..Content-Length: 763..Connection: keep-alive..Date: Mon, 29 Feb 2016 09:05:42 GMT..Last-Modified: Mon, 29 Feb 2016 09:05:42 GMT..Expires: Mon, 29 Feb 2016 09:20:42 GMT..Via: cache7.l2de1[0,200-0,H], cache41.l2de1[0,0], cache1.ru1[0,200-0,H], cache3.ru1[16,0]..Age: 785..X-Cache: HIT TCP_MEM_HIT dirn:-2:-2..X-Swift-SaveTime: Mon, 29 Feb 2016 09:05:49 GMT..X-Swift-CacheTime: 893..Timing-Allow-Origin: *..EagleId: bcfe56cb14567375270665120e..!function(){var p,q,r,a=encodeURIComponent,b="1254817266",c="",d="",e="online_v3.php",f="z4.cnzz.com",g="1",h="text",i="z",j="站长统计",k=window["_CNZZDbridge_" b]["bobject"],l="http:",m="1",n=l "//online.cn

<<< skipped >>>

GET /api/tongji3 HTTP/1.1

Host: sd.hiv-hiv.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/8.5

X-AspNetMvc-Version: 5.1

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Mon, 29 Feb 2016 09:18:13 GMT

Content-Length: 704

26FF1B2147769946D5D7F99BAD45D0CBF67DCFD907CC057BE20C23E2F7EEBB2C40A6F56BCE00B5637221C2490FA292C693F42B7A856AB11442E51CC746CC7AC9C414893E3A7D6F936FBBA70DE452AFFDEC4C24863B927E97CFCA271FEF45A4A95E284E5E727E4E170C1AEE1FDA60C3AC256F0BF4260E3A00BBEB41A2FBC72B043709CD92A0780154EAD840D11CF37F22F778431C7D32948967AFEE8C2885D7EE4DAAAF4DC293DC181ADF8FE74A0DA98B7618851DF66AE0C785564EEB6ADDECE38DBA6CF36FB2DD47810BCC6CB6A92B8FEF3DD3010C487587BDFB56A6F5FB70E6A60C5D9A78744401EAD06105CA2A6F8BC55BF240C5BA02F92E986374196DD98AF049555F2E4D4C886BEB3975561EC0CF7618851DF66AE0C785564EEB6ADDECE38DBA6CF36FB2DD47810BCC6CB6A92B8FA55E7FDD115B726E5B6C9297625D97336637E302D9B157957D5542A8735FCA5BC31C44DC71459DE021B82F405A5C7EF1HTTP/1.1 200 OK..Cache-Control: private..Content-Type: text/html; charset=utf-8..Server: Microsoft-IIS/8.5..X-AspNetMvc-Version: 5.1..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Mon, 29 Feb 2016 09:18:13 GMT..Content-Length: 704..26FF1B2147769946D5D7F99BAD45D0CBF67DCFD907CC057BE20C23E2F7EEBB2C40A6F56BCE00B5637221C2490FA292C693F42B7A856AB11442E51CC746CC7AC9C414893E3A7D6F936FBBA70DE452AFFDEC4C24863B927E97CFCA271FEF45A4A95E284E5E727E4E170C1AEE1FDA60C3AC256F0BF4260E3A00BBEB41A2FBC72B043709CD92A0780154EAD840D11CF37F22F778431C7D32948967AFEE8C2885D7EE4DAAAF4DC293DC181ADF8FE74A0DA98B7618851DF66AE0C785564EEB6ADDECE38DBA6CF36FB2DD47810BCC6CB6A92B8FEF3DD3010C487587BDFB56A6F5FB70E6A60C5D9A78744401EAD06105CA2A6F8BC55BF240C5BA02F92E986374196DD98AF049555F2E4D4C886BEB3975561EC0CF7618851DF66AE0C785564EEB6ADDECE38DBA6CF36FB2

<<< skipped >>>

GET /staticPub/js/head_061c6e7.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:36 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Tue, 23 Feb 2016 08:33:06 GMT

Vary: Accept-Encoding

Expires: Thu, 24 Mar 2016 10:18:48 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

49a2.............}k{.......P.C.!...I..re.&.............,\h.$..|.;.l9.c'..N...I|I.H.$.e..... .O...=.TUWu7HJ....w'2.]].S.N..{..[.^..J5.e..x.}._Ig....._.Os.N..-..K{..R._.2.c..z..s....X..t{i?3_.-.[..j..=/.. .....M{..N'h.Ya..&..NP...jp.U...7......_... ....N{)...2..wk...j/7..c..:....o7....=L.......rn,.............n.U=^.[...4..}..i...L)&6..\hc1\G..T7.<...['Z.m....b.Vn...x.:.A.....g..)..<...P..^'...{Yo.[...WKG5.. Eo..ZOT2j.......){Y)...3.xc..l..\...Z...S~3...N..<Q.....73.o....d@...K..F<.`.'.Mgr ..tR.....K.]oef.F7P.}._l.*.r-t1,h:}..LSh...\.:a.z...c)x.w?...nT"}.......K...n.LT..e]OZ3%t.7z.._.@c.A.hJ...64.C.0J.jv{.^#..z.\D.....b..4[..k6@....y,X..s...QL_....-./......)...0...<..9Qn.F...w..T..W@.nW.A..9...J...T\W...x...'.~..3O.xc..Q.W/...~5..-..]..[.o;../.....w..7.................W..z...on.x....^.Z........I...........|.f........tT...F..7.._..*S...*.9.rc.j1.....x..0F. ... .C..t....h.......L..j....{.fK.V...?&.YLE....S/.xa...c...../W./.K..~.H..V$......X... .eD..et*.....2..2......I...q.kh.7j.k..pe.5l.S..!h......VjQ..).H}.....F'.-wZ...<.......|..:q.....|.O4_.R...J.*...\.`.....K...p.H#.....Pi..: A......Y.....b.M.......\..2..v.......`..@;.t:.N.].....nn.|{...._..??....On........g.y..e:WYP!!E5Z..f........>V..z.r...p:..I..p...,. M.P.....MlK.......\.o4.......rY..X.:iUk5......f...a.<@~..[...!.....`|R.B.{.{..o.3......J`"%L.q.:.cB\.X..V".C..I.....r..pS...z....g...f....S.J...r/{P*.j..P.J.....]Bo.C.V*..K.J.x..a:?=3~(.M^.8...Y......|.`y.:.e.2...H.......4......N.. -&..-^..E... v.........-i...c4..`..w.r../{N&'....Q1.$Srd

<<< skipped >>>

GET /fxstatic/images/sprite/css/room/room2014_z_4dae78b.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:32 GMT

Content-Type: image/png

Content-Length: 137807

Keep-Alive: timeout=20

Last-Modified: Thu, 14 Jan 2016 08:56:40 GMT

Expires: Sat, 13 Feb 2016 13:16:21 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-42

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

.PNG........IHDR.............C..... .IDATx...y..u...OUu.t..L&.N6..@ ..@....z....8xq_.z..^..#.....(G.(." . ..D. @2!.>..,=.kU.?~=K.Y3.353...U...~....Lg.....Y'.9...........i....w...Z?.i...........1.1A.)h1A.)h1.i..... .....4|s.ZL.s..........';.'......9...;@.....#""""CA.0......./a.`...Z`..e$""""CB.0...........w..l..lDDDDdH..&"""#.w._cF|..^.~p...........DDDD.$.........W./.........DDDd$....,.!.....IGDDD..*....U..-4.RDDD........u;p..d#""".g.j.9|.P.!.H.N............3...B&bUT.|.YY..... .... .....4|s.ZL.s.Z.r..N.....)...t.....RL.s.k.........G............l......]L.s.ZL.s.Z.r..9.-&.9.-F9.1.H.gjk.........G.8..Ih.;..dW..{q1dB..$......o,...c.7&......B.0....nN.~.L.!.qL..vP2.........O....8..........3/Wu[....MbU4Ck....g.M.Sk.B..<B..'.v..V......m............R.0....N..<I...o.g.......~m....p...p.U.....<5..._.e.....B.?..{.y..)....F.~I..=.cW7`W7..a.E6.4.LDDD..)./..=.........DDDd...H?8..{j...o.).j..........8.6c.eqJ.x.6..VA&D..EX.q..$.....r(k.Lx..........4.LDDD..r`5=..^..A./....L-1......B....8%...$~....\|)~C).^m%.g.C..l.?...&....Y....&"""AU...\.K..0 =.....H_...?r....x..=...0..-b..>....1&azW.miabs3Gn....<0...O..M.or..l#..M.=...1d.?..........`.,...X%I,......6s ..:.....l.8....=........1..O....d~2E...................).=..........DD....].(........x-.'....j.3.adGE..^}5.M..@S4...1c.e2|]...b.f.H?...pS...\B..]X.Y..A.H2!X?...:..[...&YSE...q....c9>..7.....z...$~..TQ{.|g..B...< .d.L6..F....3...Z...H.....R.........8...D$`B.<IxaM..3.......E...?".X9e....s....}...X.m. g5B.2$.?.oKY.M..R.......N.m.....-^...O.Z..gr=x.V(I..]...Dg

<<< skipped >>>

GET /api/tongji5 HTTP/1.1

Host: asad.lczchina.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/8.5

X-AspNetMvc-Version: 5.1

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Mon, 29 Feb 2016 09:18:14 GMT

Content-Length: 2720

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

<<< skipped >>>

GET /PClick.aspx?AID=19948&KEY=AF54BBD2867C2DE15DDD9A452A155309CABFB4C7433B7CCA3F16B8C72F291D02 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: 360.rbc.cn

Connection: Keep-Alive

HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://channel.fanxing.kugou.com/room/qidiancpm?sUnionId=17614

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=2412; expires=Mon, 29-Feb-2016 12:18:22 GMT; path=/

X-Powered-By: ASP.NET

Date: Mon, 29 Feb 2016 09:18:21 GMT

Content-Length: 179

<html><head><title>Object moved</title></head><body>..<h2>Object moved to <a href="hXXp://channel.fanxing.kugou.com/room/qidiancpm?sUnionId=17614">here</a>.</h2>..</body></html>..HTTP/1.1 302 Found..Cache-Control: no-cache..Pragma: no-cache..Content-Type: text/html; charset=utf-8..Expires: -1..Location: hXXp://channel.fanxing.kugou.com/room/qidiancpm?sUnionId=17614..Server: Microsoft-IIS/7.5..X-AspNet-Version: 2.0.50727..Set-Cookie: UnionADShowTG=2412; expires=Mon, 29-Feb-2016 12:18:22 GMT; path=/..X-Powered-By: ASP.NET..Date: Mon, 29 Feb 2016 09:18:21 GMT..Content-Length: 179..<html><head><title>Object moved</title></head><body>..<h2>Object moved to <a href="hXXp://channel.fanxing.kugou.com/room/qidiancpm?sUnionId=17614">here</a>.</h2>..</body></html>....

GET /it/u=3059151468,3543266969&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: t10.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Wed, 30 Mar 2016 19:18:25 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 202755688207a35af39a1e716349070f

Content-Length: 15765

Date: Mon, 29 Feb 2016 09:18:25 GMT

Server: lighttpd

......JFIF.............C....................................................................C............................................................................".........................................C.........................!.1.A."Qaq....2....#B.Rb.$3CS....r..4c..................................1........................!1.AQ."a.q2.....#B..R..............?.....$.sM.N.....D..Y...b.$9.qH.v: J...1.....S.P:......~6...'.<..p.......G;..c.....rA.........N...b....|..Q).........5..}OkxT.[....q....#q.6.%KR:(h....O.p.$.....h..ODsu^...#...e.....Q....|.S.V}..Z5..D..Q.U..lp~.a......b..|'..3...)V..jk.k.[..M........cM.....u......Ke.#<... 7..T.`pF|...Ik._.....i......s]N. F.dhP...1..M...u.._.^..Z..y..F.\.>.k..B.q..-.&>...l...MT...?.....%..r.Z0..*6;`...1.......XE...1.{(R..V-...:.I}.P..I..x....Z6... g........|I.q..S[....4kK.!V[.%%......yg=...W........9..;e...J...m....f......5..n....I......\>......l.-r.z......#....$...G......F...`r.w..-W..R[...{..H..,....q..P.K.]....Y...G...<.Q.f..)q,...6... K.O.,...s$..1.$d.n............5.X.....!..H7....#.~98..j.......<6.$?........O.c.U.N.,..WDu......)9^@$.y..U.e.....5'Qc..z.DvuM#J.-.Y.,. .lM.d.a..}...R..k.X.....K...y.c.~=.;..&.~.......1.......[.-.v.....:."..f#....b....c.D\..DZ...dz...>...3L.....i..W.#y....{..1`02q......o.-.....G.K..7..R...._.... ...S.?...Z.......Y2.. ....s............~4L*A<.[...{a.?j...n....t..1Acm...J..Q.q.......X...b.'.n|Kf.=.e.H...y.....{Q.K.z;.^...].$.2...\<M..A|/.# ......~../.i....hpRB..622......e.U.....qK.rt.^.....%.........k.F.H../

<<< skipped >>>

GET /it/u=728057772,766315808&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: t10.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Wed, 30 Mar 2016 19:18:27 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 7eef7b7842b6d3c284b2a626fe21d072

Content-Length: 64430

Date: Mon, 29 Feb 2016 09:18:27 GMT

Server: lighttpd

......JFIF.............C....................................................................C............................................................................".............................................................................#!"$..#R.................................=...........................!1."A.Q.#2aq..$B....3R..C..[..............?....o.A....:.)....&d....?q..?....`P....5....lq.*..s....E:....q...<....y...X..e<.....b..f....W6..........t.OS..%.Act:x...X.......]Fm...5..u..^....9.s...x..bHW..X.t.....~..........>..i...fW..6...Lq....m.51XEz _!r...m..M...S.a).......]U..%.a..z.Vx...(.h..}:1..M....3.:a..#];.B.6.6..Tl<.CZ...I.B........r.O!F.......o...|.......y.........0...R..|.^NaT...{n.YI..`.!............?..J.E.o$a\A..O...-^Ol&...Dv...6[.%E....].&......S.3.CS|..).........f..6..2J.J.ke..J5Q..9J........._"{a)..Y..z..6......i....@.>.P.A@Y.d.......Q.N.......5.Vm...rBK8..R0Z.,y...f9....5gS..*..|....".....V.e;...y......z3.Yt9.9j..S...o.....Y.i...Ad........[. _4-....V...a......r!.E..wV<g k..S.../..>!^C..R.........>:...zQ...@y.f..8P.Y..N....b..N..PGdE ..vbl....wV.Z.S..w....2.....]...;.#w..h1.G.....G....jU.....f9 ..O.GnZ...IG..F..o.... $........pDFV.F.....@.H..e.....'o....>. j/,|L.'....F)>..........[R..c.'..c.].p.%VU.. ....$1xVY..RdnZ...~Q...~G............Q........yW%ll..J... (.5..M|......._?N...k.L7...G.....w.#..*.k.9>.....a_..E.....W5i.;.W..............t..:..5.}.D....F.K{k"WV.oi.f#?.....4a...FP.e"......I..R-K..Z\..t.l..<&.j.. .!9...>..,V.....x...T...v&..c...T.

<<< skipped >>>

GET /it/u=1516739037,2004201896&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: t10.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Wed, 30 Mar 2016 19:18:25 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 7f2b4934c4c456a0de6a7b4df9e69799

Content-Length: 47676

Date: Mon, 29 Feb 2016 09:18:25 GMT

Server: lighttpd

......JFIF.............C....................................................................C............................................................................"..........................................1...............................!"#..12$A.3QB%ET.................................8.....................!...1A"Q..aq.2.....B....#R..$3...............?.F0...fu....UTTy..2s9.U].......T...........].Qy..]u.Z...........e5s....N....Jhq.......M:..y. .....2..O&.mc!.W .....|z......P........-....$....xx..mR..s.8y.xh...9.9....fr..q.....M.J.6.h.>s.....N5 Z..6#...=..*.P>/)..r.r.E[.....!R.S....M..4..R..../L>.*..\@.3\..#I....X....3`....i7V....}.9fG ..;....i-Z9...s. ......v.....\cR.p.p|..!Z.U..]....k....^E...j...U...9;6 2.s%....E.....jn..{....m<.....c.r...bgj7.........h.r......jf.o.*..7R..#.....V:.C. .9|K...cb... ......". g.W.1~D......M..o....]....jC..fC....3S..N.R..e.......:.j.......J.S.....`I.G.X........[...........".5........D.m. ...B....m.y.U.&..... ..@..i...)..z.9=. ....\...f.{.h......B@.l2.I.\.{....Mmb.;V/..U..f....Y.Qb......k....0&.Zk.KSe.,..Y..ow.j..".....a]]...M....N..u...Wd.UVQ...{[.a.a...T...O5.......QB.:.c.Z..".....d5!P..d.......Z....s.......@T..:N....c81.{5..h.../u..[9Xy.mU.........8M...pm....W..r.........9G)...T...Q...i.........-..8.sly.:...f.VW.......r........ .f&h...rP.................k..K.......k..Z.h.;..?.hdh.X.E.E..`k.7..C...._J...].....u.J...z..Z/B..-To08Rf.....CH..A%L..*.4.a..8;i3.L..y...=oG.R..I....C..z..].m.....)Wc.[.J..R.!..8..D..Sd.c....v....V...Fn..6X...>.H..........g.x..Z.......

<<< skipped >>>

GET /it/u=1875430050,2580979778&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: t10.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Wed, 30 Mar 2016 19:18:27 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: bb1d766348ec6c7715cbbed19131e11e

Content-Length: 44823

Date: Mon, 29 Feb 2016 09:18:27 GMT

Server: lighttpd

......JFIF.............C....................................................................C............................................................................"..........................................C...........................!1.A.."Q.aq..2...#B......$R3b..&...S.....................................?.........................!.1..AQ."aq...#2B........3R..$4.%..S............?.....I.....U....../ .J.*D.;).....:..[.!M.T8.~....6..R...h..KZ.i}/4..p0.H(Q.RP....P........j3*..nOg...9.e....T .O...1..y.T.e...[{n..........._08........o...[c....3_<............]L.Qa...kkkn{..!AD.:....A......v....Li..H.....F..<..b....c3(..#.*T...v...{*\nv.E..j...EK;.D..V..[.4i[...C..0z..*.*,2..(..nd.`X....P.u...v.....``F.vWS.....#W.m....q.9_..z.wK.b...n5.Z....}.j*e.0`.[=)q1..$.R.o).W....Z3..L...Z..X.......K.......-..A....*R.w.X..#.....u.0..)-)h.X..[....N...V..."L...-....a.75.\...X..|... E.....(P.>...i....M.C.T.(R.|..@.....I..''....\..~%..Y..0.j..H. I~ 3....<6-.hc..nw...m...Mu.[.gYGEks.j.s........./mY.M...szL.!.......;...'#.....Y".p....U.>Q..!.wT.V_.>a..\.e....y..k.v.U.2.5.\...$3.Jz..D.....C.,kr/.A.Y`.r.U4w.W<..4Xs\.....Z..Uv..........n.W3e..Vp&b........a.oZ..f..2.s..7...-..4 ..N....l.^-......a.\...um...Z<....J......IGQ*..P.MQ..<.YQ...$.3:e...#.d|;s'....3.0......S...Tc..:..L.U.....0.&..:..dX...ng...d..|....^j[H.z...J\Z..............}}.M6..AP...).......U.ax..... ..b.T.9.'...d59.Vy.vD..UUc.....:;f...-d.\O.../....2..b.....q{...nC.....u.b0.....C..\q.)J.[.Ht.lo.?...g....l..4.....i..o........F]......1.ni..7..._.

<<< skipped >>>

GET /cpro/ui/noexpire/js/2.0.1/oojs.js HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415691&ari=1&dbv=0&drs=3&pcs=300x250&pss=300x250&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html?s&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=ee6118cd6aef5aef&tt=1456737415675.94.1344.1344

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cpro.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:52 GMT

Content-Type: application/x-javascript

Content-Length: 2176

Connection: close

ETag: "5667c7a9-880"

Last-Modified: Wed, 09 Dec 2015 06:18:17 GMT

Expires: Mon, 08 Dec 2025 04:16:59 GMT

Age: 6930113

Cache-Control: max-age=315360000

Content-Encoding: gzip

Ohc-Content-Crc: 1071315068

Server: hkg01-sys-jorcol09.hkg01.baidu.com

...........Xmo.6.. ..0..!;_.c...^q.a.@..k..D..*.....b.....L.v.@.S#j8/..q..T..V9y...F.w...}..7.Q\..W@.....'..]...T.F;..Z...o...;HK..........D...y...w.B9K.b....s9).p.Q73...Y...o..E.U.]...{.u..;.D.-.2...W.j.JP.b..'..@..d:...`....V.,.....rw`....~..@8.....;Y..Z}....E......X..H...hj&&. ..c\.S.H!.h.......F....N..g-...r*. ...y...c-.z.fE....T...V..X...A.Z ^.....(.b........t...Z..W..2.. %...T&@...........r......j/i...p........\....Y/$`b...W...O..&Mp....?&.*J....v.....].t...o..~...6.B8@....1.J.....F.6j......K#5...I.Bi...^..1R.....V.q5.:..c,..r...)x].z.}.'..J..W.9Dc.y......I......9....t.<...V...R...QMP.P......m..KQ.....~5......,..~.&*.:.$..s._..G....J..,$...J.................cb.......O.,Y..!&G...^)C.L. l.H.M...c.... (8.~.....R.l...w......u......%..M....i4..;..8./.b;x..../..(.r.....F..$F......KWT...w...%...j......bw.zG:.l...xI.v..w.......}.u...b..f...h@..[...#...d....yy.U,.....m.-l....!..$?......!.).br8y..NR.Fm....6....*:...... .....p..n..M.......=p..A>...J....B\..@..!p..w.,.j....O.5.T....0....{./..I..Mj.........d.,..N.....wX...7.1})b../.U(7....O...s...r...]..d6i.B_&...X.............|.&.?x..$s...J#{.KF1.0R...7=}...S[.h....=.`.G.....'^..]..>.7[R..=@.PU`[.Y...Qa..~.C1..2.fz.U.0......!..9E..G.|..Sxr8.0...8"...4.B...............i....N.G.4.|...N.$..1.vN..KE......k.,..A..|b..f....{......).I.B.A..3./V...mi...,....`.?........C.......-.b.uP..5Q...Dn).F.......C.byb/.bX.A8.OJ...k...H.......s.6Q.^.5..{H.^9......../...n..@..w4.b .eW.$... .. .T.T.2.........v...`....Na I@.<...,........Fh@..D......X.....0..gbs7..hj..I...5.....V

<<< skipped >>>

GET /stat.htm?id=1254817266&r=&lg=en-us&ntime=1456732646&cnzz_eid=223312916-1456732646-&showp=1276x846&t=&h=1&rnd=411469173 HTTP/1.1

Accept: */*

Referer: hXXp://show.bianya.cc/gg/huyan.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: oz.cnzz.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine/1.4.6

Date: Mon, 29 Feb 2016 09:18:47 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Mon, 09 Mar 2015 09:01:02 GMT

Connection: close

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;..

GET /staticPub/js/lab.min_c0c155c.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:32 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sat, 30 Jan 2016 15:11:53 GMT

Vary: Accept-Encoding

Expires: Mon, 14 Mar 2016 13:38:43 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

89b.............Xms.... .\Q.e,p*...9b{...l..}....k..H.!aI`.@......../..6..........j....B.....#....Nwqh...7...?...K...r.q.Fi..N.......%....Z.zE.E......1..}....../w......n0..z.....d..:I..D. R..Wh.../G^5~<Z..E:...E......`.....6..N..=.<...0.9iRh..bf...aG...d2{....V.i.<..cj.-..?.T...A.....D..{b8.>J'Q..M.'..:..^...e'.9..n.....'.....Z.............wA...06W...}.N...ta.(4.$.L5,.....F......z..6.@...b...I.......H....Ha.2..........k..~.i.V.7&....]...~..P....1....Z0{\Jo....f}9...b... ...Q..[...].ZF3..._...).Ob5.W..S...7.>......].Eg..n.%N...F.............%.'.H.QGA~...M-f...l.r(..#..>...P?E..1C.7F./..I<a...(<~=..m..V.H.~...F..>z...Bx'h...!.f.k{.z...k..].4[.)"...,&,..~...y.c.n......g.l..!....{ r.f.O.Y.l.0..h...p0.{'.v..?}........C.V.......k..D...Qeq.$..T.> ..S..9.......c.M..W......%'b3&.>l....5..!..J.$5...7r.L...P.K.c....c....8..VB..V..(.....0.}W...kH..qt;..q..."..u<...w.&/..M......x|7:T..n..E..oE.[GG.k.....jL."...........t..........W .Xa.\.'U..s....7.....s.l?5..O..X...mV7...^-.j..p...r.<]P..Y.....Gx..r9.\.. .......f.......]....=.z.....#....;....Y.........[......-...Qi2.aW......L..03..A.......&.y.Z..O0.V.%..>uB....N...".....j..h]....$.....x..$......L...2......ip7..N7\..*.L...5....]..e.8W..-K.*..z.]....@Su...M9....|)a.N.E..X.,.(M..T:U.*.&P.*.N..r.<..>.T............._.>L...U..}.u.h..iV..ue.J......x.'.'..|&D.....xx..-..C.}....y<.8..{q(O~..!....=.1a.?..7T......UU. .mPTu...]}l...*].o..C..).b6V,....e.{ )....!]....p7s.e..........-#).6..N..J.W...3g.&..".=.9.o......0......e 1....D...

<<< skipped >>>

GET /fxstatic/images/room/2014/bigScrollBg_8972341.jpg HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:32 GMT

Content-Type: image/jpeg

Content-Length: 13287

Keep-Alive: timeout=20

Last-Modified: Fri, 19 Feb 2016 08:25:29 GMT

Expires: Mon, 21 Mar 2016 07:48:52 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-42

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

......Exif..II*.................Ducky.......P.....*hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:B1975E4FBDC711E5A5258C4479B76BBE" xmpMM:DocumentID="xmp.did:B1975E50BDC711E5A5258C4479B76BBE"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B1975E4DBDC711E5A5258C4479B76BBE" stRef:documentID="xmp.did:B1975E4EBDC711E5A5258C4479B76BBE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................P.^.........................................................................................!..1AQa"..q..2#...BR...b3C$r...s4......................!..1AQ."..aq.2.......$.............?..Im....W...l.} ..T._....sUl$P.. ..>.|(M.<.D...6.i..."~Bk...z.D..c'I$.v.h........p6.{..,..N....@.jm..Sc.......2/amj.Y,...ei...^.....o%G.....[@m.h3y....a.S @.n..6c...@|..P.>. ..y..7 *...Tm.F.(...P..3x9./...P]..(....i.DN.1...m.U..........7c.k.......#..c.m.Ueb..................

<<< skipped >>>

GET /css/details.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:17 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: W/"00f2cc963bd11:0"

Last-Modified: Mon, 21 Dec 2015 02:25:04 GMT

Expires: Mon, 29 Feb 2016 07:51:04 GMT

Age: 10119

X-Cache: HIT from ntt-cn-hkg-004; MISS(S)|HIT from gtt-de-fra-099

X-Request-Id: 2d2fa607a98b9ca0d889ae0c7e5f0479; 676af75d54ed8e65d0cdf976b7021b3e

Via: T.51101.S.2, T.1288.H.1, V.ntt-cn-hkg-005, T.51101.H.1, M.gtt-de-fra-099

Content-Encoding: gzip

b58.............Z.n...={........I..%....A.d......D.ErH..X..`.|..9..K.{.....d...HUuW.[.do2......U..^W..g.:....w.6............E......m.;_D..x/.2[.....z.....t=#....Nk...)k).,)...h.j.:rd.jls....u.~^......* <Z.tjtSD.Y.M.Sw.^..e...A..[...\...h.&{.3..*A.;e.X..r.....'.......z&.o.g..x...........Z..R.z..z.M.gKq......[....l..l.r3.Q.B..D5zc/.GY.y.....R..c...q.Z...k.e.|.F..u..4t-U#.Z!.P..O...0..~Q..9d.'.5....F.-%M....D...8y...m...C)%<A.7qV..3..L.="....!r.D9[ho..!T..h[u.<...#.'....#..A...YS....(..V;Jd...gU.dmV.3Q.<n.G.wJQ.%....!........i.*n`...Z0..$.{....!i.o$.., _...3-K0_../D.@Z.j./.LM&b4R.p....p....N..IE...*..._H....h.c..X.u..j_.(.......R......u0$=..D<$.zn2.. ..$X.3a..77W...............m).8.#.. ..O.............&.J#.[z...G4.......m.m.P.0....y....LVw.y......W]ex.2X%fg.y<...h..!.u.)|`....J4U\pFx.Qp..R.L.....>..7.M..g.^c.CDZ.....*.....C..!.r..N.Y....L..lu.).L.k...r*.....gR.x..g!.......'..&[.....,....:..-Vh....*.....`Hph...X 8..=n.....B.5.R...\......}....|.....J...G..k.)m..G....7..^.....6.Z....4..p.0.F?de..(P..1X.q.n...d.......@].e.~.;M.....Rxwr.ES..V.......R(..8.FE......j..Jkq;Ewr.F...hj..(..S......C......!....T..Y.-...gqR.3(k].o..|.".9.d=Tl..SG...@.&..\...i.j.......m{xx......2..X.>.>....P..X.n.N.....c.t.....?..N;..U..*.\. Mt..m.....X$.9.NR.,..."..........EA.....n......_M.3gs..%.*-.$......{....}...i........./.*M..........UC7..7..9^..P,.r..=j..i.W.5.#...Tsd...$...}A3.......n.$...@y~@.n!....R>...z.B..M2)} E.S.u(..}. ...p o.pu.X@j...[.a.jLG.........;.t!..UJ.6KQN.]^..`.m....o.KsCVFp./..*V.sk~- .....#.

<<< skipped >>>

GET /js/excanvas.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:17 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: W/"0c4787172cd11:0"

Last-Modified: Thu, 22 Oct 2015 02:36:24 GMT

Expires: Mon, 29 Feb 2016 09:16:09 GMT

Age: 9769

X-Cache: HIT from ntt-cn-hkg-003; MISS(S)|HIT from gtt-de-fra-099

X-Request-Id: f62e2f57524a2adfc8a335d8c5205259; 5f8d091a491e8cefeaf934a56b1430e7

Via: T.5199.S.2, T.1284.H.1, V.ntt-cn-hkg-004, T.5199.H.1, M.gtt-de-fra-099

Content-Encoding: gzip

383f.............}mw.7.......LH..E..,.qv(....KVR.8.^......l.MYb....y.Pht.%'..s......P(..U.B.......|.._\..v...}....$:..._mm.....0.e.(....E..L..<...W....,.q:...fT'.=Wu..S.X.W.4^E.t.]e.p...|.~..a2_F.Y4L...8....z...~..R..u8..e......(=...x......r...u}}....F.....`.........&HvM~.M.,...oW...{...9H..g t._G."./....)I.^.....F.....x....8[..gW....H".;....Yt.s......:....D.......O.7........q..(..~.;<9|.............mD....In....d...d$.;N.p?[.9..{6O.....C.]\..It.~L.3.(.'..8..f pD.&..x./.(..?C_...f..,:...$.G...D?..%....d.eW.y.X...$^.....x4.'....&.e.^..p...%.Kt...z.".."m:...I.~`...E`..y. ..E:........$...d<..H..%.X....M..(...h....d.,...Q..Mg;..?&.%.1...8.p..9...V..Zg..d.c<.........2.-!..E24......E.t.8..5.T..t.........bw...0./g......>J........!.J..C.?d...x2.F..>%.qQ1../....Q_.p..B....E5J......F.O^....z.......BT...m]'g.P.lkx.....t.a.o.~.a..X .4%.....w.. ....:.o..........F.'.Y...]...-...E.... .... h..l...F.0...Q...)s.D.F.4j.H?$.....%T.....s.O...LL....b......4.b..$.5.%....P.e.....]K..d......,.N........Q.k.....C.X&}..zM...7..e.2q...}......lH%...Q.j0j.N.N..j3N.4..Du.mX..}........A...4z....=...(.6.),./.....K.R2L3 .....ZQ........_...*..a._..Wg.||.L..0w...._...4l..../.V..T.....S.....U.g...x.....E..<....e}..1...............Z..........,wWPaH.....b.....[....D....s0A........'......b.,....SW$.(....u3...*...m*.\.d.A1l..a7...7...........a..h.\G..)....D.g....q!._;.E.j@..)-EC...;..F.HN0D.F5=...RV...S.......S7.8.R. ....90...X....v.rd.......s.....(..@.....o...(.......p#.B@ ....y..bR......H.1...4.4pC.......0lv).X..%....k..g.$m..F6r

<<< skipped >>>

GET /js/DD_belatedPNG.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:19 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

Cache-Control: max-age=10800

ETag: W/"09f29a669fad01:0"

Last-Modified: Tue, 29 Sep 2015 03:48:06 GMT

Expires: Mon, 29 Feb 2016 07:27:23 GMT

Age: 7448

X-Cache: HIT from ntt-cn-hkg-004; MISS(S)|HIT from gtt-de-fra-099

X-Request-Id: 7bee943f30ec3fa4c18ed25346b169a9; 3c7441e49b549e6b52385d001769e0d4

Via: T.51100.S.2, T.1285.H.1, V.ntt-cn-hkg-005, T.51100.H.1, M.gtt-de-fra-099

Content-Encoding: gzip

1306.............Z{s.......w8'mAY.(.u.....#.:r.J...........X..E..........".x..X.=v...{7|........_.:.J.....#.:..uv.GU,..,/G..*..S].I....K5...i.-.hOfT.F................e9...:..J..I.s....8....~$...r...9...8..YY.F..j..D...)....B..\...E........t...}.O....P.......*gZ.9.r...C....61....O...".jY.G#....'.}.........y..C...%...B...B':,3....w....l..."...H.....$..."..._.5....O^_............e....w:_..8..8._@L...B..<;?..W.L...Jf... T..Hn.&*.y.`."..I..L..W.yp.UA..@.Ju...2m0.8.3.)d..y.i..z...^Z...b.7.p<.^...H=<.g..]...>...[|.b"....\C........\.!.M.iXBMT.G=..s..`.......^/..~.."%?...;.....g[...=?-n...{[..A.......y:*......<....&...|t7O.'.......!..u./gZ.07NQp.......,.......>......9UaPh.deAIfFB..$....[...:.M.u.. !.4..P...[S*..!fq).....$...<.o.*.%.*.J..X.`B.wD...;Y.B....Oe.."J..s.5.{.b...<...y.......C......;~P,...H.:.u.:.).......D..UP..Y...=...^w._..uY.......:....`..M.`.aA...Ey4....aUyy...u..eP....54.hT..$_.#.........5v..z...Q..D;SP......s.....h.'.o#=..I.-4z..2.K...`..s..1m}.X...W!yp0......._.x..cz>B..M.T.T.,.......>.q..h...*........Ku...8N.r=.......%%....s..1....].,......i...... ...$...[Fi...mx.....!^.....f..w..:.4C-L/....C?.....}.......;.....F.b.8.2..91.=Qz%.%.c ..r8...y....i..p,.<..b..8.\.e.....0Y...9....Q..W8.m......c....]..G...2......<s.:...6..l{..e..;g....5.. ..L.K*N...a....Yn........,.3y...ee.OA..k{.U.U.d.x.3...#..R.v..Z....|4D.....N..QE..C ....|.....,.;a...b.K.rYF*$u0@...f... .g}.........;P.....}.....ameE~.X$k.N_'u...%.. ......Eh.. .j............n.l....o../.$m.d..'L....w4V.1...#L.gA.v.:A..v.E

<<< skipped >>>

GET /js/a.js?v=13 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:19 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

Cache-Control: max-age=10800

ETag: W/"0ae424664fd11:0"

Last-Modified: Fri, 15 Jan 2016 07:27:08 GMT

Expires: Mon, 29 Feb 2016 02:25:37 GMT

Age: 4551

X-Cache: MISS|MISS from cun-hz-fdi-149; MISS|HIT from ntt-cn-hkg-014; HIT|HIT(R) from gtt-de-fra-099

X-Request-Id: 480a3e4064ed38a83d541d9391ea564e; 3097355395776777bcfd856f26a08b83; 237538fc6af524255325e9264030e98d

Via: T.51103.H.2, T.51103.R.1, M.gtt-de-fra-099

Content-Encoding: gzip

1dd.............S...0.....`.4v.l..mW... p...!.w&.qb.v.Eh...../.N2.."- .Sl.....?..P5..T"(....:U....5...........<).U..o..$~.T}.......R.f......gd....<........../...k.u..jQ...kBi..../.......D..!..e.P......w..'j..lwI.[...#.].1.6.....W.a.;.w...fj.......Je......s.,bM..&.d,HkQ.-...q.m..g>.h?..y.6....E.....n.>...>.D.....&}...H5...0OWz.~..9.l,C...4...|...!..G.SB....5`^9..S60.......w.fx..{p.d.......2|..y......zj._~}/6oD..5 $.2#..N.j..|..|.....pd.."...t|b.........Nn..;nf.&..D.o......_^-.....0......

GET /images/logo.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:19 GMT

Content-Type: image/jpeg

Content-Length: 4599

Connection: keep-alive

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: "0643169925d11:0"

Last-Modified: Mon, 23 Nov 2015 02:46:00 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 10:15:00 GMT

Age: 7280

X-Cache: HIT from ntt-cn-hkg-004; MISS(S)|HIT from gtt-de-fra-099

X-Request-Id: ff83b49d1e756d2f2c7228616322d4d2; ba6a21241b756f98bbd94f71792cc91b

Via: T.51102.S.2, T.12812.H.1, V.ntt-cn-hkg-005, T.51102.H.1, M.gtt-de-fra-099

......JFIF.....d.d......Ducky.......<.....whXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:29d323d0-2756-744c-abf4-fd81ad1f32a3" xmpMM:DocumentID="xmp.did:3F64B101918C11E58D46F891F00AD123" xmpMM:InstanceID="xmp.iid:3F64B100918C11E58D46F891F00AD123" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D92DC788918A11E5885987E299F0083A" stRef:documentID="xmp.did:D92DC789918A11E5885987E299F0083A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................&.r..........................................................................................!1A"..Qaq.2B.....3.....Rb#C.4dU.'......................!...1AQa.."2.q........BRb.#3$............?....-.....K71...H..#cCB>-A....4.....)M.4i.lx..@=..^.r {e.....sDMA$..O.>:.l..I.....Z..L..ky..li$o.c..J..4#.4....xV,.8.<y\d.og../v..n...;.A.MD...e.3t.5#A \.N^.............J6..z2......Ovw];.....R#N..

<<< skipped >>>

GET /images/640x107.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:22 GMT

Content-Type: image/png

Content-Length: 13156

Connection: keep-alive

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: "05d43672b27d11:0"

Last-Modified: Wed, 25 Nov 2015 02:45:54 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 07:53:38 GMT

Age: 7607

X-Cache: HIT from ntt-cn-hkg-004; MISS(S)|HIT from gtt-de-fra-099

X-Request-Id: b6bf162f787f09766f4b40ace1d373bf; df1e7a2b2311f82843cbc404fc63388d

Via: T.51101.S.2, T.1288.H.1, V.ntt-cn-hkg-012, T.51101.H.1, M.gtt-de-fra-099

.PNG........IHDR.......k.....h.......tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:c96f66e7-e152-8941-89f1-0383de7c7266" xmpMM:DocumentID="xmp.did:908F0A49931B11E5B0F8B409F06779EA" xmpMM:InstanceID="xmp.iid:908F0A48931B11E5B0F8B409F06779EA" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:56F26C908DCF11E5828AFDFF36F2DA25" stRef:documentID="xmp.did:56F26C918DCF11E5828AFDFF36F2DA25"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....../.IDATx..}..\U..9....t..9.$6.".D.....E..W#.p......{...{...pE...*.".Oxy.p.."..l.. d.:=wWw.U.......k....k...V'...9..........boo..@ .......?.....@ ..D....$.....@ J.$`...@ .......@.F .......@ ....0..@ ..$`...@ .......@ .#.......@ .......@ ..$`...@ N.X -CJ4.|{Sh......G.&...x...Z...'Os.q....mc.c.!...bDC..........v?.H.....>.,..3..Y..s.b..M.@ ....@ P...D....@.......S.3......SgbC".....x.......W..~..~.;..... ...D ....p&d9.~"........6..m6.e..w...=./0.7.....7.... .....}.Q.-........g..........V....W..|.....*.XZ.Z......;..

<<< skipped >>>

GET /images/640x107.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:22 GMT

Content-Type: image/png

Content-Length: 13156

Connection: keep-alive

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: "05d43672b27d11:0"

Last-Modified: Wed, 25 Nov 2015 02:45:54 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 07:53:38 GMT

Age: 7607

X-Cache: HIT from ntt-cn-hkg-004; MISS(S)|HIT from gtt-de-fra-099

X-Request-Id: b6bf162f787f09766f4b40ace1d373bf; a6e38969919f31f27a48155dc95a6962

Via: T.51101.S.2, T.1288.H.1, V.ntt-cn-hkg-012, T.51101.H.1, M.gtt-de-fra-099

.PNG........IHDR.......k.....h.......tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:c96f66e7-e152-8941-89f1-0383de7c7266" xmpMM:DocumentID="xmp.did:908F0A49931B11E5B0F8B409F06779EA" xmpMM:InstanceID="xmp.iid:908F0A48931B11E5B0F8B409F06779EA" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:56F26C908DCF11E5828AFDFF36F2DA25" stRef:documentID="xmp.did:56F26C918DCF11E5828AFDFF36F2DA25"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....../.IDATx..}..\U..9....t..9.$6.".D.....E..W#.p......{...{...pE...*.".Oxy.p.."..l.. d.:=wWw.U.......k....k...V'...9..........boo..@ .......?.....@ ..D....$.....@ J.$`...@ .......@.F .......@ ....0..@ ..$`...@ .......@ .#.......@ .......@ ..$`...@ N.X -CJ4.|{Sh......G.&...x...Z...'Os.q....mc.c.!...bDC..........v?.H.....>.,..3..Y..s.b..M.@ ....@ P...D....@.......S.3......SgbC".....x.......W..~..~.;..... ...D ....p&d9.~"........6..m6.e..w...=./0.7.....7.... .....}.Q.-........g..........V....W..|.....*.XZ.Z......;..

<<< skipped >>>

GET /images/li_bg.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/png

Content-Length: 1213

Connection: keep-alive

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: "07460c69010d11:0"

Last-Modified: Tue, 27 Oct 2015 08:23:36 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 08:54:42 GMT

Age: 3576

X-Cache: MISS|MISS from cun-hz-fdi-149; MISS|HIT from ntt-cn-hkg-012; MISS(S)|HIT(R) from gtt-de-fra-099

X-Request-Id: 92401a839c30c480168f2226941a2dda; 9bf0d85a920916b5782639384ab68988; 607c4a351dd534c7b4819543b9fb675f

Via: T.51100.S.2, T.1286.R.1, V.ntt-cn-hkg-012, T.51100.R.1, M.gtt-de-fra-099

.PNG........IHDR... .........jfk.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:15386AEA7C7911E5B975A8C2336F1C1B" xmpMM:DocumentID="xmp.did:15386AEB7C7911E5B975A8C2336F1C1B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:15386AE87C7911E5B975A8C2336F1C1B" stRef:documentID="xmp.did:15386AE97C7911E5B975A8C2336F1C1B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...L...-IDATx...;..@.E.d..7b..R....].K.......<.G.30..\R~L.:....<.g.s..3.}......................................................x...x...x...x...x...x...x...x.......................xwvC|......p.w.n..|......|......|......|..........^...n.>......>......>......>..l.....Ust...x...#>......>......>......>..l..x?..`.k...m.e.....IEND.B`.....

<<< skipped >>>

GET /images/btn_hidden.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/jpeg

Content-Length: 1259

Connection: keep-alive

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: "01b23d45c27d11:0"

Last-Modified: Wed, 25 Nov 2015 08:39:42 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 07:47:09 GMT

Age: 9357

X-Cache: MISS(S)|HIT(R) from cun-hz-fdi-150, MISS(S)|MISS(S) from ntt-cn-hkg-012; MISS(S)|HIT(R) from gtt-de-fra-099

X-Request-Id: 9c68fcfb98dd2ab936e69b99f3d5ca7f; 8857abf8eecfa7bdc41bd281d706abe1

Via: T.51102.S.2, T.12814.R.1, V.ntt-cn-hkg-017, T.51102.R.1, M.gtt-de-fra-099

......Exif..II*.................Ducky.......<...../hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:477C79CF934811E59E75A1BA537C607F" xmpMM:InstanceID="xmp.iid:477C79CE934811E59E75A1BA537C607F" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ECEEFAB18DC111E58232B4B47E18EA3D" stRef:documentID="xmp.did:ECEEFAB28DC111E58232B4B47E18EA3D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................................j................................................................"......AQq..B#3Cc..5E'..............................?...,..y}z...D.F,..I.X.o..!...V......nQh).w.J......v........w.EZ....U{..z..........g..4...iG..)..i.z..........

<<< skipped >>>

GET /images/ewm.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/jpeg

Content-Length: 2006

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "06f2999a622d11:0"

Last-Modified: Thu, 19 Nov 2015 08:45:10 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 07:30:16 GMT

Age: 7643

X-Cache: MISS(S)|HIT(R) from ctn-hz-fdi-019, MISS|MISS from ntt-cn-hkg-014; MISS(S)|HIT(R) from gtt-de-fra-099

X-Request-Id: 803f801aae2bf1be5d4426f3af8395c3; 72aafc1daa274f95c5b2db2da1c8c80e

Via: T.51102.S.2, T.12812.R.1, V.ntt-cn-hkg-004, T.51102.R.1, M.gtt-de-fra-099

......Exif..II*.................Ducky.......<...../hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:834EDACB8DC611E5A3528DF1F9D0330F" xmpMM:DocumentID="xmp.did:834EDACC8DC611E5A3528DF1F9D0330F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:834EDAC98DC611E5A3528DF1F9D0330F" stRef:documentID="xmp.did:834EDACA8DC611E5A3528DF1F9D0330F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................2.2.............u.......................................................................!1AQ"2....aB..3S..t6.qRb.#..............................?..^.......]Z..<. "..Q..J.vp.?.....}H..3.e7.........<...(.f.!.o...~...%j.U.;J.$.%R..G9e....S..sU.#...;..._*...9.H.2..T...~Vn^....;.?....?.L..w;=..j.[TUMU..B .)$..<.`..jjX7%.......#P....y...f..9=..G".FH.#.A.~pp.x........N.3.=?g............W..B". TP.........K..j...1...8.BV5,r......)......~.....%%.........\

<<< skipped >>>

GET /js/b.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: W/"077171be66ad11:0"

Last-Modified: Fri, 19 Feb 2016 07:21:10 GMT

Expires: Mon, 29 Feb 2016 06:04:28 GMT

Age: 8346

X-Cache: HIT from ntt-cn-hkg-014; MISS(S)|HIT from gtt-de-fra-099

X-Request-Id: 0ea38be63ab64dcfa5c5e1e7e700f1a6; 169dbbd328cdf1b6d460627ff953030c

Via: T.5199.S.2, T.1283.H.1, V.ntt-cn-hkg-014, T.5199.H.1, M.gtt-de-fra-099

Content-Encoding: gzip

e71...............n\.......p...\......W...............Zx.2V..A.'.E....!)..|...-lfx.9$.........?.\.. ..t9..m..y.<y..Oo..W...vz...}}...../....Wg......I..........w.....W8_o.W..rs..}1.\.<........~... .h........{q.Ym..o.../j5ZW............vE.J...}.....W....v.n...m?........z......z.....k.. ..y...._?.8.....Yk.y.0..rr.Ai..?5...u...k.M....f.8>..V.rz8..*.....w~.Y.y.....-..y.nuv.<y>...i.._=M.S_..y.G.........D.w.....j....v....f.>I..cS.............WkZ....o.v.Y...x.^._......._....V...T.......P.N..f...7...o.2....2\......V.9&...O.....-.H....v..>..*;\t............. ....n........%|\.......5=.....~..v.m.o..|....H.....y)w.b:{=}>.|~2}6.<..%.. .O......g../O._.......P.F...48.|......r.eg.~.rE...QN(G...........q.......l.w.......OY.....W......W.h..... ......)..O)v|JF...2........'......Kh/...."./......1....._.......F.3......g.?......../.?..../.^......T...=........o^....W..2....\.~E.._..2.....\..e.-.;?.......\.z...f;.9.......}g.;'..._B...%.......}g.;C.....w......1_..C....e./..o......1C..z....1.......?..x........f...x../............&...x........T....^....>.........r..QF.........(.....x..q.G.8...x<...4.h_.{.........(.....].u.......=..a.x*.w...(.=......x.......=.S...Wz.e^..Tz.....^.].u.1.*_.v.'..a.....n.3*.6{Tz.e......{}..Q..1*^......F.?..*..e;^Q.|..xE..a.....b..B.Q.....>.....ag.v=G............].....F.....0....)..q.......g..Q..3 .......sV<..m.3....9 ...._z..a.z....|..^f......l......Y.{....F....2c..X/...z{*..e..Y.{.....Y.{.>..<.....W..QF.j.6.X?.....^_..F...Y...n.....a.zT.c...q...x2C.3.1C.3.1C.3.1..

<<< skipped >>>

GET /images/web_title.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/png

Content-Length: 3803

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "0f1a97272cd11:0"

Last-Modified: Thu, 22 Oct 2015 02:36:26 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 07:34:24 GMT

Age: 581

X-Cache: MISS|HIT from cun-hz-fdi-147; MISS|HIT(R) from ntt-cn-hkg-008; MISS(S)|HIT(R) from gtt-de-fra-099

X-Request-Id: 270bbc650f86b938cb0179dbd3535f36; c626164f03f2889b77e073fc13a38771; 27023f83c268b11f50e5261e4696c533

Via: T.51101.S.2, T.1287.R.1, V.ntt-cn-hkg-003, T.51101.R.1, M.gtt-de-fra-099

.PNG........IHDR.......J......_.3....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:0DB541A4764511E59BDBF6B2C709994D" xmpMM:DocumentID="xmp.did:0DB541A5764511E59BDBF6B2C709994D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0DB541A2764511E59BDBF6B2C709994D" stRef:documentID="xmp.did:0DB541A3764511E59BDBF6B2C709994D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......KIDATx...M..G..k, .=.g..`_zc.).2.A.0=....0....$f.@"!.....DvAHX.@....,.....i.p.i./Y...\.\"..@.$.0...b.......{z.?.iw....?...UUW......,.;.=...i?...... ..)........I.V...G..n.V......'s.....x.Y..U=.....b...s.Y......L.(.o.I..S..|.b....]iO..<54......L..........1.......b...... &...Ba=`.^<..n....K.p...3..T.31............b...V.Z.. .....x&...{/...MkM*.<.....>YY.......O.Hk1.7..{./~.......e.&.&....F.m...7k.J.n....p42.3....f.d.. &....-...........{....i.v....Z$&[.....5.t.C........*...)}2.._'......Qh....xZ]............n.\..<.....V...2 .#<....px.1.mm..L......(r.bRY..B.............6

<<< skipped >>>

GET /images/web_title.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/gif

Content-Length: 2228

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "07460c69010d11:0"

Last-Modified: Tue, 27 Oct 2015 08:23:36 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 10:37:59 GMT

Age: 6358

X-Cache: MISS|MISS from cun-hz-fdi-151; MISS|HIT(R) from ntt-cn-hkg-008; MISS(S)|HIT(R) from gtt-de-fra-099

X-Request-Id: adbe7da5e85cef8210dc8e2a238f20ed; 59f8d301e80f791cf7d8a2bc0f3914e2; 48443ac89896408d28f0bd858e33d867

Via: T.51103.S.2, T.13437.R.1, V.ctn-gd-zhs2-009, T.51103.R.1, M.gtt-de-fra-099

GIF89a..J........@Br....)$.[.w.(y............................!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:8BE2C01A7C5711E58BBEBA624125FEF4" xmpMM:InstanceID="xmp.iid:8BE2C0197C5711E58BBEBA624125FEF4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0DB541A4764511E59BDBF6B2C709994D" stRef:documentID="xmp.did:0DB541A5764511E59BDBF6B2C709994D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! .................................!.......,......J....0.I..8....`(..W.E..l..p,.(:.x...\...pH,.~).r.l....tJ.....v..z...xL.....z.n....|N.....~.......Y.....d.....i....f.~.C...N.....K.|.A...............M.z.<.................E.............B.x.:..........J.v.7..........F.t.2.......E/..^Dt.Xh`.3"..U.wp`:Z.z!...!.9...a..o./......Rb. .=6..2...7WP../`E{ ..t..%...A>.....d....ft$..P... sf.~M.....

<<< skipped >>>

GET /images/web_avatar.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/jpeg

Content-Length: 1603

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "02b375180dd11:0"

Last-Modified: Fri, 23 Oct 2015 10:48:14 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 05:21:42 GMT

Age: 10468

X-Cache: MISS|MISS from ctn-hz-fdi-022; MISS|HIT(R) from ntt-cn-hkg-014; MISS(S)|HIT(R) from gtt-de-fra-099

X-Request-Id: 9c4cd61961e1de89a7d60cb1759e87b0; 788e119aa1da891b109e4ab1eac78469; 009db14637f90548e317e517a3562609

Via: T.51103.S.2, T.12816.R.1, V.ntt-cn-hkg-017, T.51103.R.1, M.gtt-de-fra-099

......Exif..II*.................Ducky.......<...../hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:74306633795711E5A605AEBD4286860B" xmpMM:DocumentID="xmp.did:74306634795711E5A605AEBD4286860B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:74306631795711E5A605AEBD4286860B" stRef:documentID="xmp.did:74306632795711E5A605AEBD4286860B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................<.<.............n..................................................................!1..AQ.a..2b.q..RS.."B#...............................?..R.U.!O.......?......'4.F.....(.zF.... .2.....P..q[n.y.H3.$.......@.j.....}../A.s=u..`;.).E.V.J.......3(5iLT....8.....>.}R.....7...~.;.....2..q:d......o...y}..JK.@ ...[..."bO... .1.....`.".....fH1/.....mi.R....I...A..-....#.r."...=yu{J..=..$X?...@../~..(../~..(5z-[...:.3........m..~..@..LEA..H%A..N.t..EQ..1...

<<< skipped >>>

GET /images/web_title.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Thu, 22 Oct 2015 02:36:26 GMT

If-None-Match: "0f1a97272cd11:0"

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 304 Not Modified

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Connection: keep-alive

Etag: "0f1a97272cd11:0"

Expires: Mon, 29 Feb 2016 07:34:24 GMT

Cache-Control: max-age=10800

Via: T.51101.R.1, M.gtt-de-fra-099

X-Cache: HIT(R) from gtt-de-fra-099

X-Request-Id: 6abca64b74fd1f0ad737971da21781c1

....

GET /js/jquery-1.11.2.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

Cache-Control: max-age=10800

ETag: W/"09f29a669fad01:0"

Last-Modified: Tue, 29 Sep 2015 03:48:06 GMT

Expires: Mon, 29 Feb 2016 08:46:24 GMT

Age: 4046

X-Cache: HIT from ntt-cn-hkg-005; MISS(S)|HIT from gtt-de-fra-099

X-Request-Id: 241b00293926ef58acd7135870e94c36; a47ae996f25bbb87ff7a356baaedae30

Via: T.5199.S.2, T.1284.H.1, V.ntt-cn-hkg-017, T.5199.H.1, M.gtt-de-fra-099

Content-Encoding: gzip

600a..............iw#....~>...R@..&[...T.Gj.,...n..%).,....6.."........U...=3.9s..M...kd........_n....7......v.;.~k....'...?.........d>.v....)x.Z_......I..-..'O....v.W.f7......e._5.|.....w....i.........|.Zv.\.....y.....:=j.=j...Zw.as.,.Z....;......b.h6.(......X.tw.Nf............E..].vh.u.....c/..Y1h..q....i...eVvH#..].....l.........?....l....r.... .....8...&..p5..ZLf....qw.......M.X...Th.7|...u^o7._..>...|.....f........_.....w..]..7.?x:...;.^.<.n......A.......${....=....{.].....Z...o...\...9......\-n....}.-.)..e..M..h5n.e..g.E.}....0..a.;.65...lT..2.Thv;......i...g.}..z...Xg..v.2...U..U.R..c$..bTX.Z.8.f ....p.7......=.]..Vv.o..}Vt..J;..0..C...2.....{S)....R..t.{..%x.e.T..3.#U..^....Tr...a..f.>.h1.M.T...bYY.z.....e.._-rpL..u..V....bY?...7....Q...~.O.....i.s.7g.............,.l....k 0.sMq{.-.Jm62?..F.Ywv....V......uZ........"....q"....kv.8?f....XA...'C...|>-...........V.8T.....`..z}}8Y~.....^7G........F........t|2."p...fQ..l|.j._...l.hu......*.3.............;.......v.di....V.......... _v[..V...W.......F...%.L..7..`.(....4..Q.p.;.N............]...z|.l......./.O...K6..l.......w..B...3.x..AO..|^..-........4"....N.Td...A..8..u,M..N.]!.._......w.......\.nj.;..b....nu......X._N.].Nk..m..^\......*..n...$u[>r.>\.......Q..:.<...j........S...c.keK..{q........^:..f...F....AI.....)...F..=........=.^......Q...M.N.C.U.......Go......*....E...v...F;NXb..Lb....t;..I....&~.V#.t]v.t..N_..N.F.i=.c8..f.ic..wE.e.1.YU......8."P|q.....T<EYk...n.......(w.M..6.....*.W........#....f.622....-.[DVP.j...."........

<<< skipped >>>

GET /js/imgload.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: W/"089b7c7515ad11:0"

Last-Modified: Fri, 29 Jan 2016 04:59:06 GMT

Expires: Mon, 29 Feb 2016 08:20:24 GMT

Age: 10170

X-Cache: MISS(S)|HIT(R) from ctn-gd-zhs2-003; MISS(S)|HIT(R) from gtt-de-fra-099

X-Request-Id: 1cd10b4bd9697a311ce04f76e95bb1cf; 0e2e811bae758c1571867f6187f6f3c8

Via: T.51102.S.2, T.12814.R.1, V.ntt-cn-hkg-014, T.51102.R.1, M.gtt-de-fra-099

Content-Encoding: gzip

379.............VKn.0......!..q.8@...UZ...t..Y.]."%..EC.....u.#...!).T.&E.......8C........|.dN.u.....f...s.Zr/.[.M.. .jq....|...........Z....~&.6](.@.....g. ..!...C..p ...YZa.m...c..]E#R..v.....G....jY^...k.8.z:z.h.js#j...NI....[/T.....Rq1%.j..........j..J.\.cR...........(E.f,...z\.....HF.2-.Z.KZ..X....k.(......:]F.H#..`.....Mc..|,M.$5...9..p...P.......i.b.o..............3*X^..)..1:b8v)......A........`$.'...6Mt.'....l{...K.Qt.h d......T..nCs[c.G .V.^#\<....R.=.C.=...Z...%.*. ...Vha..b...=N..!^....;.S= ..V,........=.]..b.0.q.-^...h.4.D.........9..e.Q77f...X.Q.....|S [:LU..3..V.5.....x.Z4.R.....x..# l.U. (T`..G....S......P.# p....;#.XS.....a.74Gw.\.P....6d...'...kr\H..X..r.O...^s..<.;..)...;S.2.....Ho.MG!.0D./`..T.....X#.6...F......s.C.|.h[.R6!k.....%.*gx......}.6_.7Y....}6..QN.=..:.......]..T5..@.n....>6&.'b.5...-.A...]..f{.s.7...i-...IX}........j..GsO7|a.........0P6....K...g(..&.....0......

<<< skipped >>>

GET /js/base.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: W/"07460c69010d11:0"

Last-Modified: Tue, 27 Oct 2015 08:23:36 GMT

Expires: Mon, 29 Feb 2016 07:56:25 GMT

Age: 10318

X-Cache: MISS(S)|MISS(S) from ctn-hz-fdi-021; MISS|HIT(R) from ntt-cn-hkg-017; MISS(S)|HIT(R) from gtt-de-fra-099

X-Request-Id: ede7b001315e23b623aff0188398720a; 2e0a66537ca04b0da3e1e4785f380166; 8ff6cda5686a7ad7abd866079dbf3474

Via: T.5199.S.2, T.1283.R.1, V.ntt-cn-hkg-008, T.5199.R.1, M.gtt-de-fra-099

Content-Encoding: gzip

167...............J.@......C(...&.g...>.......L.*..q... .....j..E......N.m.iK.p{...w...:...(gH.W ;.._......evq/.5.4xD|.b.T..v(..D.....t.......u...>....s..C`.....C...Q.V.._U..g....V.u...=.M?....$.=......=.6d0..P....C........M.Btx.eO.<...!VD6q.P...%....j.]..(....Y..:%.,.lln..@.e.n..!....4-.j.....v......<.V..].;-R./.?.}.....x4....epk.-...n.wPF[....j6........=........0......

GET /js/xanimate.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:24 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: W/"0c4787172cd11:0"

Last-Modified: Thu, 22 Oct 2015 02:36:24 GMT

Expires: Mon, 29 Feb 2016 07:20:03 GMT

Age: 8192

X-Cache: HIT from ntt-cn-hkg-005; HIT|HIT from gtt-de-fra-099

X-Request-Id: 0040e7425e445442ab8a9362897e8585; f770a0edafacf8570b433490fc66b736

Via: T.5199.H.2, T.5199.H.1, M.gtt-de-fra-099

Content-Encoding: gzip

13d9.............[m...q..*..x.r.Q{....R...SN..8q.J9u..8,..&.X..;.(V.Ll..e*..WR...R..KD.E...gn......O...`f..X^.{X......g...G....W........_xgr....;O?..<.pk...........j.{.O..x.g........~....L.rw..?'..l.....o.>...O.?.z.....'..I..#?.....7.....;...._N..........w?..........~.b0..QfM?.>}.......~..6c;n57F...Vs.:..,.$~6J"....."`..O........12?c. ~...K^=7..]...,...9'.2...e..n..XK..g...........a.......TlT........o..>....G...~..'.7.|K.6x...$..l<..Q.C...$.4G..0ts.$..uN.-.....*....FQ...".o}...N...T.*Z...2,W.9..S..#-..(...9...[...........<.i..]_.....?.*..`...L/~.....&yor......S4..v.4=..4.~....e.,j.......m5.n..D.Y<l.[..........j..6..49..a.4.%~.T/8p...'.N/.b..M........qe..7......>}K............{...........w'.?..y{...{..M.?D...... ....8y..{.&%..{.)......1}.6....o.k>../%..{..`..{.....z.....3-.o....H...2Z.\...Mo_.....~....... ..ioDU.U...nY...U...$.V..C6....n..9.? LG..V......'E?.....n.%.Fq...@\.O..j8.......h.n.>.QFZ..f[....:.D! ,...4r.*...A. M...2..(wi ..7)-...4=.....}^`..W7...R.uri.&<E. %...*..:\~...(..7l..*."IU..L .)P.Q .E..j.......%..[.......Y..x.ONP..,F.n.^..!.."....P.l..3UR..U.|1.V.%A.,x0?.3.1.0.....R3K.WJ...f7*.>.:}....]........ J.j...?m4."..Y.[.....k..H...g'.4.w..UOR..J..b.P.n..L................\*..MR..a.fM.lb...Z....I.6W....]...E...1-m`mP>..q...X...e.?.P.=?.4.q8"..!.......a.6t...D...>.&....:`..fMl.O.Hb.Q..,........>..*..5.C..{.u]2....)..JH..'.31<.....]..Y..p..'..oN8O....]...^.Y^......~..cc....n..x.Y ..........f.E..yF.......4._.^2xteL....^.B&bA.<....L..C....).....FY3.a\H...)$.

<<< skipped >>>

GET /js/hongbao.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:24 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

Cache-Control: max-age=10800

ETag: W/"0a53890d4dd11:0"

Last-Modified: Tue, 12 Jan 2016 07:48:02 GMT

Expires: Mon, 29 Feb 2016 07:02:10 GMT

Age: 6472

X-Cache: HIT from ntt-cn-hkg-004; HIT|HIT from gtt-de-fra-099

X-Request-Id: 8ef796819f0ee3c0ca84a491120b9643; c443e32a9dc0b92f18fe320982ae6b32

Via: T.51101.H.2, T.51101.H.1, M.gtt-de-fra-099

Content-Encoding: gzip

bb5..............i....3H..J...efz.]...).......)........=]...=.."V.D ..`..H."q....#k....]...!.Uw.]..3...h.s..w_........,.u?..z3.G...!.W..9.L..{.......C..g.....O&.....x........x6.}/.....%....'.b.AL.sl..Z-............:...wV...........".?..0...i..hs.49.j.W....j...Xt.. 7'..(SR$...& .j.XR...r.D..WX...............:1.....\.@l...$.....E%..Hr.i.6.%..y.....y..Z.Z]]/..n....n....s-m...[...Un.....*....T..~......V..z....c....[5..B.......l`%...........e....8.'>.I....o...h.^..Y..zfWxO.TW....n$.....u.~......[E..$.-..,..DZ.>%...O...[....=...h.4Wh.z@.....<......{..4D<.A....T0.C...@{..`m..v.57~.....5......IE3."@F.|?.U.n[..`xdP.U..p..!.'....8).f?.......z....O.i..GW..]7...h.....s..*.0!.......&.JF.4.>.......*.!sa.B.....C.F....P.(..&) *.....7..L..e.!...v&...S .~...l...y.. ....V......8.._.....-...z..Y....3i....e0...... ...mr.X.....#..AB6]px.`.R..d:.a.r[......o.4\..dA#U....s.R....'.....Io...].LF...u......K(C8......yu....'.].Dw.j...kqiN}u_X_..H_.....[.W.D_.j}e.u.LEzW.y.,..(....._.i......Y.l..['.......L>.f./.v.x..H....}.g.......~.]..?.}..g.~.{. .....\.|v..<.8.=)..o........;...........}.......?.t}....O....%.m@B...dn=....m..c........o...-.8..Dn..nBm........F..y......;...}....;.....p.....k......~......0.... ..*k...r=.X.9#.......Yj.b.).......7......$.bOC ..s.EP....t...(a.Lz.)....TG.h..(u.e.-.Z.(....8bU........1.sm^..0F..N6k..>........&f"...h..J/.P^.......p.......&...uKk................p.cA.......:.Z....R!...)....".U..0..`..A.s....q..R.)......;.b...:...-....x..h.....8..m..J.4..W8#Z..U..5..........UJ..=...?.u.J.>.F9.J

<<< skipped >>>

GET /tj2.ashx?v=1.15.914.2 HTTP/1.1

Host: updatever.hiv-hiv.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Server: nginx/1.8.0

Date: Mon, 29 Feb 2016 09:18:11 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

3..0A0..0..HTTP/1.1 200 OK..Server: nginx/1.8.0..Date: Mon, 29 Feb 2016 09:18:11 GMT..Content-Type: text/html..Transfer-Encoding: chunked..Connection: keep-alive..3..0A0..0......

GET /tj4.ashx?v=1.15.914.2 HTTP/1.1

Host: updatever.hiv-hiv.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Server: nginx/1.8.0

Date: Mon, 29 Feb 2016 09:18:11 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

3..0A0..0..HTTP/1.1 200 OK..Server: nginx/1.8.0..Date: Mon, 29 Feb 2016 09:18:11 GMT..Content-Type: text/html..Transfer-Encoding: chunked..Connection: keep-alive..3..0A0..0......

GET /tj1.ashx?v=1.15.914.2 HTTP/1.1

Host: updatever.hiv-hiv.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Server: nginx/1.8.0

Date: Mon, 29 Feb 2016 09:18:12 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

3..0A0..0..HTTP/1.1 200 OK..Server: nginx/1.8.0..Date: Mon, 29 Feb 2016 09:18:12 GMT..Content-Type: text/html..Transfer-Encoding: chunked..Connection: keep-alive..3..0A0..0......

GET /tj7.ashx?v=1.15.914.2 HTTP/1.1

Host: updatever.hiv-hiv.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Server: nginx/1.8.0

Date: Mon, 29 Feb 2016 09:18:13 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

9..not found..0..HTTP/1.1 200 OK..Server: nginx/1.8.0..Date: Mon, 29 Feb 2016 09:18:13 GMT..Content-Type: text/html..Transfer-Encoding: chunked..Connection: keep-alive..9..not found..0..

GET /core.php?web_id=1254817266&t=z HTTP/1.1

Accept: */*

Referer: hXXp://show.bianya.cc/gg/huyan.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: c.cnzz.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 763

Connection: keep-alive

Date: Mon, 29 Feb 2016 09:05:42 GMT

Last-Modified: Mon, 29 Feb 2016 09:05:42 GMT

Expires: Mon, 29 Feb 2016 09:20:42 GMT

Via: cache7.l2de1[0,200-0,H], cache41.l2de1[0,0], cache1.ru1[0,200-0,H], cache2.ru1[1,0]

Age: 785

X-Cache: HIT TCP_MEM_HIT dirn:-2:-2

X-Swift-SaveTime: Mon, 29 Feb 2016 09:05:49 GMT

X-Swift-CacheTime: 893

Timing-Allow-Origin: *

EagleId: bcfe56ca14567375270718746e

!function(){var p,q,r,a=encodeURIComponent,b="1254817266",c="",d="",e="online_v3.php",f="z4.cnzz.com",g="1",h="text",i="z",j="站长统计",k=window["_CNZZDbridge_" b]["bobject"],l="http:",m="1",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=" f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&k["callRequest"]([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k["createScriptIcon"](n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/website.php?web_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnzz.com/img/" c ".gif",p="<a href='" q "' target=_blank title='" j "'><img border=0 hspace=0 vspace=0 src='" r "'></a>"):p="<a href='" q "' target=_blank title='" j "'>" j "</a>",k["createIcon"]([p])))}();HTTP/1.1 200 OK..Server: Tengine..Content-Type: application/javascript..Content-Length: 763..Connection: keep-alive..Date: Mon, 29 Feb 2016 09:05:42 GMT..Last-Modified: Mon, 29 Feb 2016 09:05:42 GMT..Expires: Mon, 29 Feb 2016 09:20:42 GMT..Via: cache7.l2de1[0,200-0,H], cache41.l2de1[0,0], cache1.ru1[0,200-0,H], cache2.ru1[1,0]..Age: 785..X-Cache: HIT TCP_MEM_HIT dirn:-2:-2..X-Swift-SaveTime: Mon, 29 Feb 2016 09:05:49 GMT..X-Swift-CacheTime: 893..Timing-Allow-Origin: *..EagleId: bcfe56ca14567375270718746e..!function(){var p,q,r,a=encodeURIComponent,b="1254817266",c="",d="",e="online_v3.php",f="z4.cnzz.com",g="1",h="text",i="z",j="站长统计",k=window["_CNZZDbridge_" b]["bobject"],l="http:",m="1",n=l "//online.cnz

<<< skipped >>>

GET /cpro/ui/noexpire/css/2.0.1/template.min.css HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415691&ari=1&dbv=0&drs=3&pcs=300x250&pss=300x250&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html?s&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=ee6118cd6aef5aef&tt=1456737415675.94.1344.1344

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cpro.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:49 GMT

Content-Type: text/css

Content-Length: 1089

Connection: close

ETag: "5667c7a9-441"

Last-Modified: Wed, 09 Dec 2015 06:18:17 GMT

Expires: Mon, 08 Dec 2025 03:26:08 GMT

Age: 6933161

Cache-Control: max-age=315360000

Content-Encoding: gzip

Ohc-Content-Crc: 3267541799

Server: hkg01-sys-jorcol06.hkg01.baidu.com

.....O8V..template.min.css..W.n.6.........h4c;..E_.........%R.a..)./A..K.1O.I;E';...s.=.....h3%..o.(JR...F5....5D...&m.....7.2.*..2E...Q...@...3Ak..e*T.Q..r..5*/Qy....E..LR$8R.i..C."..,.C.-Q#....K.%.P.e....T.6U.2....k..A2,....~B..b..fa;...eD[.$.8.........(Y8......6...`X.)".?..xQZ....H.^...w.u...l....^H,Xn..].C....(z{p.=&.e......."&-D._\t$M.".@~.&............n...<#b...Y.a-=..*kU..q..`......I..3..d..d.dgf 3.}.%....2b..v..aJ.....A<.V.h=..{.)..!..>8I...N....&....<co.D...P....2.hUs. Ik%....T.\......K..p.\_.?........./?....S[...M....Jk5^,2mT..N....,.T.'.._H..47l.~^.a...i.jY..I.....3....t.*O..Y...\.i....._..."....swk....T...?.]...I...;&...7.4..j....!n.L0\X..q4..'..8.f.T.f.@..}r......t.j....#.t.T)1w_`:q.'..b`.{6....#..?#.1h|F.K......O.vuy.l..Q...C...}.;..;..W ...~U...qB..Tq.N..hd...[K...|=r.a...m.."@.....B.......N..h.y......pB1..peM....._.I.Wu(.(.I#.F............V...C}.Px$...p/Gi.n..K(....O'...........BH.W.... ......J..C_.F{....8.O...k.C..F...V......T..B....|n.K..|;.Z.GC.Ai=......}.=$I...l...\..n..x...........g.<."...p..."[).)..V`..c6.....{.O..aH.6*.y.&....O.../.Y$....]....|~.......

GET /cpro/ui/noexpire/img/2.0.0/bd-logo5.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cpro.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:50 GMT

Content-Type: image/png

Content-Length: 1545

Connection: close

ETag: "5667c7a9-609"

Last-Modified: Wed, 09 Dec 2015 06:18:17 GMT

Expires: Mon, 08 Dec 2025 04:17:01 GMT

Age: 6930109

Cache-Control: max-age=315360000

Accept-Ranges: bytes

Ohc-Content-Crc: 1974033671

Server: hkg01-sys-jorcol07.hkg01.baidu.com

.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...siTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1cd07f07-f14f-4d1b-83a0-43c485539d9c" xmpMM:DocumentID="xmp.did:52D26256CAB511E3B696F0231D9BB8CB" xmpMM:InstanceID="xmp.iid:52D26255CAB511E3B696F0231D9BB8CB" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f6314ed7-87ee-4c03-a7bf-62894da43749" stRef:documentID="xmp.did:1cd07f07-f14f-4d1b-83a0-43c485539d9c"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......,IDATx.ba``..bc .`..`..w@|...........hi.........#>...../_..................T...i.......by\....Uzzz.@.. V.;;;{...j|......`.6=,h|.>PQQ.........L...._.....\....._.]..K.jBBB.DDD>..w.<0..FFFn...e..\`...K........w..../..........o........P!.........-[...o..]...........e..d......0..o..y...&....).7o...[%%%....$A......"..|..=<<.....'O.|.hp....6L..$..A.U__........XB... fE.466...uk.........Ww....;x......."d....#........^`P(.J-@..TUU....p&....u|.C..}BB.41.............EL$3B.*'......LMM=.I..0......g`...

<<< skipped >>>

GET /staticPub/js/room/roomFunction_a35552b.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:36 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Tue, 23 Feb 2016 03:29:31 GMT

Vary: Accept-Encoding

Expires: Thu, 24 Mar 2016 03:36:55 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

700a..............y{...>..=.B.p.n.jM6C.-=.........q|...K..Z]M.....1I.c.C !!.a.S..$.........[...W..Zk...kh.l........]{.k..]..F.S..C..3.. 5/.=.i..)....._.N%/..-.-g....Ov.^.....#..W,{%..}...y...7.F'....Zi..;Y.TW.......n..e...]r.^&.@6{..vJ...=s....q...V.. ..#...n..N....,.km~>.g..g2...n......-g.D....)o.)......_...v.|..v...jV5....TM.=.3......w....N..w..5...\.o..U_......g"..>x. U.V.V.m....CH...m...Z...S..7=.y..5.....B....~rG..V.Y?......~.N.7.:..r...Z.. ..8.......SqG.S.....w..=.=>q"_.c.d.3^.......[......m.Nx.S.Zzq..... ...z}F-hb.s...jn..[..... [..7...a].........L6;C.s...p..Nm.kM..^g..9^s..4...%L"..KM.=..I.L.,. ...*.\...<...<.}.h....7.-.XQb.Si......qq.D..O9...>...`c4...h......Z..%_.?x......fiJ.D.......Y.K ..3.<l.k?0U ..O........u.............n..x.|...Q a1Yn.FE?..c.>R U....z.bPlL..n..e..t..}'.t@..}K.6...s......N....J.....2.....i..B9.K~ .e..fsnX...UrV...J..NGX.m6ke\(tj.gh....#......0n(..I..b............a...H..Eg..oo...3.....v..........Q.GhC.....g.Z-`..|......g5....5....'..h....Go;..o..h.].....]..Dn.....2.2.. nw.x.......E.a<.2.....b6.....<.._.......3.B.....M.e..-0..[.........;..N....v...pi.`V..n.v.k...E.....y..8.......,f.|...Z9..j._.~=.H..8 P.....C..Pvt...d..wd.......<.....V.o.(q.........\...#`..1.t..vv...P..f.2.QQ.^\.I*=y.kT:U<..m..5...8.[.k.......m......D=.....[.....{....v.w......_}w....w~.}....>....c..C...0..Z.U[..nY.$<...?.p.FO.d.<..........o..T.m.s.xj9;..Y../S.2...]T..W*.!.n.\.... .{...n.*.3.......D.kwp....Pmy. ......za.w.,p.=;..=u.).x'0..gXi:K.xM..yx...S....'..n..)e..*.

<<< skipped >>>

GET /v1/kguser.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: login-user.kugou.com

Connection: Keep-Alive

Cookie: __fx_union_access__=1-1-1; __fx_union_page__=3-3:5-2-2; __fx_unionId__=111-17614

HTTP/1.1 200 OK

Server: Tengine

Date: Mon, 29 Feb 2016 09:18:26 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=20

Last-Modified: Fri, 08 Jan 2016 02:17:00 GMT

Vary: Accept-Encoding

Content-Encoding: gzip

a42.............}.s.XV....5.T).S.~X..r...LM7S..l.C))3.|(KR.Q.$.6.......b.>..|.]..[...?..=|._.w..zf.........t_..{^..sn]Z......n`.....qw......T....l...7...^.fE.L ....,...w6.F......J.......z.@.n..?.qLS........1...^.C7z1q.......h ..L..n.7Z...ge...pDe......Na.....2.h......-...Zf....kk.Ck....Ry.h=..h.L.4t.,.<.:......v.....s.....>q..X-tw.v..#}(..........=....{<.....'(.7.:.......tZ4.pww.. .y...j.V<......DT.dpV.............U5.4../..n_L.Zi..;....i..x.....P.i..qg...............S._]...#7..dv....r5. }.[. ;..Qf1.>.f...D..a.....i..S...kG.&*.L.....x..>.W2.....X............q...$F..mE.Y)...kE..yU..B..U&N1.......KK...=2g....O....]R.*%uHS.VV9...}.3.6V..a..&.0.=.fC...6Q.S.WzE..K.;..`........rY..B..u.M....JS.0j.....I?.Uo3.........T...|.....7q.7...'?...xV;.u.....Qy.T...;[}........a..u..FV.@.}.......] P..... ..Y...?.0......R5...4.E...\.-v... ..e.\..9..7.U.Hij.*........#.....g.8...=...(.....;=U....?.g.K.(..7....,\.j.E...#){tO...=0.N..u...zm.N.[.<t.g.C...^y.=...{..Bt... ...~.5....?.$...v.@O.......b.......#....w.g..P...E.....F........&.........j...m...S1@.........t.......(.....n....=.(.a..'...... .$.H....KL*.'..]...JU L.482F.D.......Al .T{. ..I.....>..#...At.q..en`.'...........H..$.G..p..J...v,.t..e(...'..O.D)Y......e....?C..3yI.........L{LsM..K...8.....0..`.K..............P..m.Q e%...dR..I.[A..r...>.&...^.H...5..c.3'...3...nL.Y..V..3.nQ..V...;..O.f.Jb".>....* ...cy.%..03X .........|7g..p\.L;.....^...¹....L...N..'......&b......A.0....1........r.9..N..'.2...r`..Y......:%.i..|.<.....}qvR:.?...).w...U&g

<<< skipped >>>

GET /fxstatic/images/footer_logo_16e645b.gif HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:33 GMT

Content-Type: image/gif

Content-Length: 1968

Keep-Alive: timeout=20

Last-Modified: Tue, 27 Oct 2015 12:28:36 GMT

Expires: Sat, 13 Feb 2016 13:58:31 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-42

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

GIF89an.a....N.................ZZZ.....T.........y.`...vvv....................|....... .))*l.*|........ccc............h............_......%}..........}..............P..I..U..)....................K...........u.......................k..b...mmm..C...........V...........................e.......c..7..............................N....h|.C..d...........M......[...........i.....11C..@..............Vw....t..(..Hu....r..........u....KKKj.M.........m.Q......L.*AAA..m.....tG.%......S.3.....wELN.........z.I..z..G....`...CSSS......^.@....C....a.C....~....~.Xu.\..:..a.:8.~...............y.....\.......\Z.......Q.[..................{.......c.E8.8..0FEH..(W.W.......g.............g.K......GLR...............abo..........gH.........q.G........ce.I..S..2...V..7ED.....N...b.$.....Ep.<<........,....n.a........H......*\......#J.H.....3j...... C..I....(S.\.....0c..I....8........2... ..."3...b....1.xiZ....%.P5Z"(.([.*m9....a.N..RG..Q..,[R...xuX...)R.....L.0..r.....)..:..........>.(yk.......e.........%].....W.s.(Sf....do.Zo....ie.m5...Wj..^....PAl...?..Ezr.D.j..7u{X1..TVI.......] ..c...V.H$m......[^..R{..`...Q..\D4..f......1%.@..%.Y..U..QX..H.>..c.me.@.H..c..%..!..P.....A;.(.N.......F^Z8...m..5.HHF$....hT\..5R...VT...X...z..HW..Xg\......iY}L&..V....t.ud.B..TcSd.afS.i....A...}.......S.....V]Y..}....?Z=....uH.m...f.c.v.jG.E.c.....i.m..N..J.N..Z........6u.k.QE.?..zUF..;Pd.2.......m>nu.......[.X...Y......Q.i.%.^D..hf.]...t.T....{..$.W.i:..n..e|..B.....$........o..oKY=7..-=.V....V...."w$.'.sC.US. [T4d`][pNl1...BC....R....c]5B...

<<< skipped >>>

GET /usr/uploads/201511/20151130161134_14413.flv HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://ubmcmm.baidustatic.com/media/v1/0f000jioG2SODfD3KlS1j6.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.flv.uuzuonline.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Fri, 08 Jan 2016 03:53:19 GMT

Server: nginx/0.0.1

Content-Type: video/x-flv

Content-Length: 1885491

Last-Modified: Mon, 30 Nov 2015 08:04:34 GMT

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 fuzhou190:8104 (Cdn Cache Server V2.0), 1.1 db77:10 (Cdn Cache Server V2.0)

Connection: keep-alive

FLV........................onMetaData.......duration.@#G..z.H..width.@.........height.@~........videodatarate.@.p.......framerate.@9........videocodecid.@.........canSeekToEnd.......................onXMPData.......liveXML...<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151805, 2013/04/09-12:08:21 ">. <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/". xmlns:creatorAtom="hXXp://ns.adobe.com/creatorAtom/1.0/". xmlns:xmpDM="hXXp://ns.adobe.com/xmp/1.0/DynamicMedia/". xmlns:stDim="hXXp://ns.adobe.com/xap/1.0/sType/Dimensions#". xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:dc="hXXp://purl.org/dc/elements/1.1/". xmp:CreatorTool="Adobe Premiere Pro CC (Windows)". xmp:CreateDate="2015-11-30T15:45:33 08:00". xmp:MetadataDate="2015-11-30T16:03:46 08:00". xmp:ModifyDate="2015-11-30T16:03:46 08:00". xmpDM:videoFrameRate="25.000000". xmpDM:videoFieldOrder="Progressive". xmpDM:videoPixelAspectRatio="1/1". xmpDM:startTimeScale="25". xmpDM:startTimeSampleSize="1". xmpMM:OriginalDocumentID="xmp.did:e424f941-95aa-ba47-8b48-bb0e19cc6270". xmpMM:InstanceID="xmp.iid:fb6f993b-e47b-154d-965d-2e27f79ce8e6". xmpMM:DocumentID="xmp.did:60f4f14d-8020-314e-9b3f-737f0a

<<< skipped >>>

GET /cpro/ui/noexpire/js/2.0.1/oojs.js HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2480739&dc=2&di=u2480739&dri=0&dis=0&dai=1&ps=74x308&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391&qn=bc8e12d50064a9a9&tt=1456737391050.438.1891.1891

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: cpro.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:25 GMT

Content-Type: application/x-javascript

Content-Length: 2176

Connection: close

ETag: "5667c7a9-880"

Last-Modified: Wed, 09 Dec 2015 06:18:17 GMT

Expires: Mon, 08 Dec 2025 04:16:59 GMT

Age: 6930086

Cache-Control: max-age=315360000

Content-Encoding: gzip

Ohc-Content-Crc: 1071315068

Server: hkg01-sys-jorcol07.hkg01.baidu.com

...........Xmo.6.. ..0..!;_.c...^q.a.@..k..D..*.....b.....L.v.@.S#j8/..q..T..V9y...F.w...}..7.Q\..W@.....'..]...T.F;..Z...o...;HK..........D...y...w.B9K.b....s9).p.Q73...Y...o..E.U.]...{.u..;.D.-.2...W.j.JP.b..'..@..d:...`....V.,.....rw`....~..@8.....;Y..Z}....E......X..H...hj&&. ..c\.S.H!.h.......F....N..g-...r*. ...y...c-.z.fE....T...V..X...A.Z ^.....(.b........t...Z..W..2.. %...T&@...........r......j/i...p........\....Y/$`b...W...O..&Mp....?&.*J....v.....].t...o..~...6.B8@....1.J.....F.6j......K#5...I.Bi...^..1R.....V.q5.:..c,..r...)x].z.}.'..J..W.9Dc.y......I......9....t.<...V...R...QMP.P......m..KQ.....~5......,..~.&*.:.$..s._..G....J..,$...J.................cb.......O.,Y..!&G...^)C.L. l.H.M...c.... (8.~.....R.l...w......u......%..M....i4..;..8./.b;x..../..(.r.....F..$F......KWT...w...%...j......bw.zG:.l...xI.v..w.......}.u...b..f...h@..[...#...d....yy.U,.....m.-l....!..$?......!.).br8y..NR.Fm....6....*:...... .....p..n..M.......=p..A>...J....B\..@..!p..w.,.j....O.5.T....0....{./..I..Mj.........d.,..N.....wX...7.1})b../.U(7....O...s...r...]..d6i.B_&...X.............|.&.?x..$s...J#{.KF1.0R...7=}...S[.h....=.`.G.....'^..]..>.7[R..=@.PU`[.Y...Qa..~.C1..2.fz.U.0......!..9E..G.|..Sxr8.0...8"...4.B...............i....N.G.4.|...N.$..1.vN..KE......k.,..A..|b..f....{......).I.B.A..3./V...mi...,....`.?........C.......-.b.uP..5Q...Dn).F.......C.byb/.bX.A8.OJ...k...H.......s.6Q.^.5..{H.^9......../...n..@..w4.b .eW.$... .. .T.T.2.........v...`....Na I@.<...,........Fh@..D......X.....0..gbs7..hj..I...5.....V

<<< skipped >>>

GET /api/tongji2 HTTP/1.1

Host: load.hiv-hiv.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/8.5

X-AspNetMvc-Version: 5.1

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Mon, 29 Feb 2016 09:18:16 GMT

Content-Length: 2240

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

<<< skipped >>>

GET /API/GetAdvConfig?param=v1 HTTP/1.1

Host: as.hiv-hiv.com

HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/8.5

X-AspNetMvc-Version: 5.1

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Mon, 29 Feb 2016 09:18:18 GMT

Content-Length: 1088

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ache-Control: private..Content-Type: text/html; charset=utf-8..Server: Microsoft-IIS/8.5..X-AspNetMvc-Version: 5.1..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Mon, 29 Feb 2016 09:18:18 GMT..Content-Length: 1088..11451DEE59847C66D6ECE7845E5A64CC28E022E34D1A789239F04BA87023155827D872AB2DA8EDB42F0CEE91E674D9EF185520DC0DFFA202E0BF506510A4AF9234633B23C8E7EC992E1ED7A77D36405BDBAEE0D4C8079495E7DF7D394FD464ED96261C8E967

<<< skipped >>>

GET /staticPub/css/common/head_0511e83.css HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s5.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:28 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=20

Last-Modified: Fri, 19 Feb 2016 03:50:44 GMT

Vary: Accept-Encoding

Expires: Tue, 22 Mar 2016 03:11:45 GMT

Cache-Control: max-age=2592000

Kugou-Memory: HIT

Content-Encoding: gzip

3409.............}k..G.._.sc.IGR,>.l...l.x...7..,..Q$..ub.4.Zj.......Y.E.d{N.n8...|D.;"#..mu....J.z.6...n......x.Yo;...^w......-:wi.n...v.F..q.n.9...f...l.|..a:...Pu.....y.9t...../..*.Tw.j.t..o....s...bw;...l......:?vW..6;..\..H..<d n.g.....S..Jo..F=.e.Ye....:...^..yg..u..NY...[..}v.....f...e.q..w..l{C.|....j>..O......(}.]~.)..'\q7.....6.T...d...|...........~._.L.M&..Qc.PU..Fm.o...0............/..*....y.....z._..x...Xd.....u..x..`...O..~.1...`.....}&=..o..U..:.......C.........f.p,a..}.....G.w.M.$=<&.~[...U...e.zw{.?.....fs..XWw.t4><..tH....o.]..?8VJ...%h......(...Ov.Q... .;...L'0...*..8p.i...@....E=..y..!...a_.....1.fU.>....9...Vp.f.....%...<...........p`V..ph......k...3..`.o..mu...o.]G...b6......?V...u..N=XL....a.?.w.....}.^o.So.X.....~...A~t..Y.{z_...............U..3...,.u._.-.%..C.......... ....."...-v..q....Y.~8n_.U.a..u....w...z.....cY..W....6/.oX.B.[..@...w[l^...}...&.....@.NIu.\.$j(..'|.2B.wn.u..'".*0...E..[m.....n.os.j..pd..&Q..W..)..........U..z_9. ..N A8!O.!4=.......x.r.!.m.NV.h@@..o...5;v......1...u..e....>.m..w.nB....i....N..04..GyzDu.xLc.GDNw.1.3{G...J..6C....9...f.........B...._.M.&p...G`a.\d.....e...O7....]Qu.c..}GO...L.;.c./o..._/.)/4..2 .{...q.?..R......({..w..C.g.c.}8.x......... .4.k..H..>0..2I.P...P.}.-..%O.N.....!c....<.....*......m_g.)..R%..c~...7.......j`..ix^?!h? d.....E:.N...w......{..yV.,........[......-..o..=j.......97....p....@C....q...Ty~6p_u.`nP.?...~....m:|...:..Q....u.0.|....{....rT_...W..i...G.......3P=..Q=\l.4..._"...........b...h9..Q....T.......

<<< skipped >>>

GET /staticPub/css/room/room2014_72f51c4.css HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s5.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:30 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=20

Last-Modified: Fri, 26 Feb 2016 14:41:06 GMT

Vary: Accept-Encoding

Expires: Tue, 29 Mar 2016 09:43:39 GMT

Cache-Control: max-age=2592000

Kugou-Memory: HIT

Content-Encoding: gzip

700a...............rc....*h.dVU.@b.j....J....2Uu...5.a9 ......"^>.....7...y.......q...V...]I..Dxx.....4..o........}.....a.~\..6....%....../o..Y.z....9..._^..U.7.]{;.....x..m..7..E5..'...f.......zsy2....^..7.j...g...e..a*...n1..^.......7...s.5.~0......i.n..&....b:^>.X.}.5.z.~.-....k....9!.>.e].......b..u......,..:..z..q.../.......j...g.....8_.h.........O.}.I.P.t;.......z.k...z3.-..K.v..{zz.4..E.....2V......:.m.(.oZ..U.n.WP..g...!.....-..rsY...T.-....v...W.....o....a.......V>M......`0..>l.D..j>~X... 0.|3....^.)........xs.X]v[.X.k]..Z...VO....z.^/[.)m.G.L...o...6...O.9!...............V....%......_t.....:..[.....z...n.....x{.r.^.>...d#...H"....V$...]..m......?...}..X_~k....L....a.......s.0..R..?V.=..g.....O.......e.~X-l=#........#ZL......aW]..].O/..e5.]........Y......W".......$"..c..\.H... .<.O..a>............Q.....&.......~.2Z...W. ..n..X...U..x(@...... &k....fuyGZeI._..5..8.$....h Q{...I..w... .T2.......N..$[.y.;..6.........2.O.....L.W...t..p.9../....xy.;.F?..i....0.6.y......?...' ....`rvn2.~....|CS...%...2.t.mDm...[...Zz.D4Uxv... ;SF.Y...w..=....!L.2...].@'.."..I......{.....YM...U`......^.=......`...$qzum.`-,_#;....?..l:.M........dIkK....tx..^.e3]..?o....uo W.C/.....GF`. J..n.$...*X.f...^..... ..W:\.. &..v......n..l..........m.....-.O........o...&k.aqw.....].9.......~.....@P$....T.LL...Ow.l1n.;PU..x5k}s.X.u..9...~<~o..a.|...,).n..._.,!. ..N.4C..QB<.Ys..9..T0~.`...wFb.m.l.^....*{....i2...3.....L5K.g<.W.....].|./k...h.)g..2.?nSF.M.u{.w.T.S.......lW.5P....P..^.i*...1I.D...z..U

<<< skipped >>>

GET /cpro/ui/noexpire/css/2.0.1/template.min.css HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415659&ari=1&dbv=0&drs=3&pcs=296x249&pss=300x253&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=2f8bbc640f2a4043&tt=1456737415628.141.1360.1360

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cpro.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:49 GMT

Content-Type: text/css

Content-Length: 1089

Connection: close

ETag: "5667c7a9-441"

Last-Modified: Wed, 09 Dec 2015 06:18:17 GMT

Expires: Mon, 08 Dec 2025 04:16:59 GMT

Age: 6930110

Cache-Control: max-age=315360000

Content-Encoding: gzip

Ohc-Content-Crc: 3267541799

Server: hkg01-sys-jorcol07.hkg01.baidu.com

.....O8V..template.min.css..W.n.6.........h4c;..E_.........%R.a..)./A..K.1O.I;E';...s.=.....h3%..o.(JR...F5....5D...&m.....7.2.*..2E...Q...@...3Ak..e*T.Q..r..5*/Qy....E..LR$8R.i..C."..,.C.-Q#....K.%.P.e....T.6U.2....k..A2,....~B..b..fa;...eD[.$.8.........(Y8......6...`X.)".?..xQZ....H.^...w.u...l....^H,Xn..].C....(z{p.=&.e......."&-D._\t$M.".@~.&............n...<#b...Y.a-=..*kU..q..`......I..3..d..d.dgf 3.}.%....2b..v..aJ.....A<.V.h=..{.)..!..>8I...N....&....<co.D...P....2.hUs. Ik%....T.\......K..p.\_.?........./?....S[...M....Jk5^,2mT..N....,.T.'.._H..47l.~^.a...i.jY..I.....3....t.*O..Y...\.i....._..."....swk....T...?.]...I...;&...7.4..j....!n.L0\X..q4..'..8.f.T.f.@..}r......t.j....#.t.T)1w_`:q.'..b`.{6....#..?#.1h|F.K......O.vuy.l..Q...C...}.;..;..W ...~U...qB..Tq.N..hd...[K...|=r.a...m.."@.....B.......N..h.y......pB1..peM....._.I.Wu(.(.I#.F............V...C}.Px$...p/Gi.n..K(....O'...........BH.W.... ......J..C_.F{....8.O...k.C..F...V......T..B....|n.K..|;.Z.GC.Ai=......}.=$I...l...\..n..x...........g.<."...p..."[).)..V`..c6.....{.O..aH.6*.y.&....O.../.Y$....]....|~.......

GET /stat.php?id=1254817266 HTTP/1.1

Accept: */*

Referer: hXXp://show.bianya.cc/gg/huyan.html?s

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s95.cnzz.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 9941

Connection: keep-alive

Date: Mon, 29 Feb 2016 07:57:26 GMT

Last-Modified: Mon, 29 Feb 2016 07:57:26 GMT

Cache-Control: max-age=5400,s-maxage=5400

Via: cache16.l2de1[0,200-0,H], cache54.l2de1[1,0], cache2.ru1[0,200-0,H], cache5.ru1[0,0]

Age: 4880

X-Cache: HIT TCP_MEM_HIT dirn:4:460058701

X-Swift-SaveTime: Mon, 29 Feb 2016 07:57:29 GMT

X-Swift-CacheTime: 5397

Timing-Allow-Origin: *

EagleId: bcfe56cd14567375266431306e

(function(){function k(){this.c="1254817266";this.R="z";this.N="";this.K="";this.M="";this.r="1456732646";this.P="oz.cnzz.com";this.L="";this.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_cnzz_CV" this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={};this.la()}function g(a,b){try{var c=.[];c.push("siteid=1254817266");c.push("name=" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.referrer));c.push("page=" f(e.location.href));c.push("agent=" f(e.navigator.userAgent));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Math.random()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join("&")}catch(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeURIComponent,n=unescape;k.prototype={la:function(){try{this.U(),this.J(),this.ia(),this.H(),this.o(),this.ga(),.this.fa(),this.ja(),this.j(),this.ea(),this.ha(),this.ka(),this.ca(),this.aa(),this.da(),this.pa(),e[this.t]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i failed")}},na:function(){try{var a=this;e._czc={push:function(){return a.B.apply(a,arguments)}}}catch(b){g(b,"oP failed")}},aa:function(){try{var a=e._czc;if("[object Array]"==={}.toString.call(a))for(var b=0;b<a.length;b ){var c=a[b];switch(c[0]){case "_setAccount":e._cz_account="[object String]"==={}.toString.call(c[1])?c[1]:String(c[1]);.break;case "_setAutoPageview":"boolean"===typeof c[1]&&(e._cz_autoPageview=c[1])}}}catch(d){g(d,"cS failed")}},pa:function(){try{if("undefined"===typeof e._cz_account||e._cz_account===this.c){e._cz_account=this.c;if("[object

<<< skipped >>>

GET /it/u=1568043101,2080188669&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: t12.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Wed, 30 Mar 2016 19:18:26 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 84348b1d18dfd491f586ac6b02eaa10d

Content-Length: 53221

Date: Mon, 29 Feb 2016 09:18:26 GMT

Server: lighttpd

......JFIF.............C....................................................................C............................................................................"...........................................4...............................!"..#12.A$3B.CQa%5q.................................A.........................!1AQ.."a.q..2....#B...Rb...$4r.35Cs...............?..Fk....~...l..m?]6.E$o.zL..).SPt..'C...h..z.......H..........7.e.j9.y.....eYY....i..QB.....F../....h.z....^.Q.G......6............T........I..%#.4."........~./$....b......)..E.Q<s*v6vw.wB.i.4..4.U4.Ud...:. t.wK..x.3..........@.AWb..Q..d..o.^{.....D.UC.....(O...;.'!j...uZ....E\..e..U.X..b.]....G.:d.9.....f..b.L.N.b.,...)vZw,m!%.sm.YJ..h'R.c[*.,.k.gX.5|vg5d..6.A. ..........g.:6.....2S_....6L.PIN{...8...>...".^K..=@.<)....yBsO,...Q.I..`.eYmd...bd.7..q.<i...B 4*-E..C.TUEs.. ..2.|HN..X.D....1.}.H........9o2.....W...\?....3d.v.._..m..m................Ax.[@..2..?a..E[rP/...p.....s.x...O.|.*....EDE.^| ..".T...)Q.mT..\.f.C...Fh.....UG.......$J.z.....ye/*.....iY`.Y....9.uu.\.VdV....,......=....a.k./.......4..J-...8..<:*.........."..0"..2V.4.(*@...pI.q..G.U........."Pl.#Z...G..'.6....E4.....h*.,..m..(...>?.Q;m..R.\u....../d.U...l.H..1O...Y.q|..F{...... ....:.I.~'."...............z.?..yp.~.O....'I........c..45..Z..........69zI......l!K...w.z.l..0.P|..X........u..Q......_...)...|~>...K..r..*s.-...}FC.RV;"l...{-....l[l..m.......)..dB^[tVHH{..$......Q.7.`.... ......f-'."N. a.....$H.C....Tgz.h...*...... o.1.....E.AB..A.!.l.L.....m.nt=...

<<< skipped >>>

GET /staticPub/js/room/swfobject_dc734ee.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:33 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sat, 30 Jan 2016 15:11:53 GMT

Vary: Accept-Encoding

Expires: Mon, 14 Mar 2016 14:08:31 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

907.............X.o.<.. ..R{q.tw{wa]...[.....V..d...@...^......M....k......g....<.E..`.*l.^V.-....-{.q..^p....p.....z.T..\,./....O..B`4..."........ ..;x.Q..>".#.%.a.}..3.. ...$;.K.....B.B......K.b.'gw.\.S.R..:...x....ycLv.\\.s.......Q.d.xA. ..Hn."x.=..q.1.t.ER."....~..y..D9..IG.#Q ...2y?._...Rr...(!.....O.-6E....\...h....L.;.K..6&..h..Z...3.....s1.6...!..).I...4.3.P./...$.[-TS.R..7=......-&....^...W.!....y~..........2.d...A`...9...2...".....k..R.`j.."...{......`.5=..qC-h..c..!.A.}..-.A5.....5..J.~Y....&.hvH......|.p......8.@.Z.. .......1.l.`%E.mxw....M..#.........wy.?....N.m....g..8.......?.j...u...5......9G...G._.,`%......^.....>"......2.& .F.*.^..~..~.C./..*.Y.Yq.......cR6..:..[.H.....U.C.. .......2......... cT`l9.v.c...8.`..C.F.r.-.,.6>"....*w@.&t.B...P....KRl.f.P._.....v../77......k.\&.K.C..C..H._-....)......\.....O.4.....B.Gs.....Z.=...G.n.C.apL...%V_.."4.. .m=...`..2s...<..\.....b.N........5. .A&l.q...=[.X.....h...,.$9W.l...1.n.6.........IN...~.............Wa.v.?.ng .....HM*.*.u......#.S.Z$......=..4NC0..r.z........:[$l"..:Z.*...GR.!.6.(.....x......V|6....H3Y....\!d.Y.0*#.C.......!.....f.]).t..n........#....%.U.e.0.EU.....R..O.y...P.n..T>.R.r.. #.K.8fv..^.M..-.z....d.*........<.....!F.C.N..z.B..\..B"OB...0f...-..3"p|:.n....F}?...l.zAo.Z..x.|....CI.@...A...k....4....$..d..1z.[..9.&..<...)......`M{.....>.w..0.......6c......z@..._.......\.%.e.yEQ. R...\Q.V)* .St....H..S...N... mH.o....Y..l.RD./.Kk....`......d..txE..)....x....K..o.CB....N.?..$]b~8jRt.... ..:.5..(.....@aDz.J......

<<< skipped >>>

GET /acom?di=u2480739&dri=0&dis=0&dai=1&ps=74x308&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: pos.baidu.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Length: 863

Content-Type: text/javascript;charset=UTF-8

Date: Mon, 29 Feb 2016 09:18:23 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Mon Feb 29 17:18:23 2016

P3p: CP=" OTI DSP COR IVA OUR IND COM "

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

Set-Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1; expires=Tue, 28-Feb-47 09:18:23 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1

X-Xss-Protection: 0

BAIDU_UNION_define({"tuid" : "u2480739_0","queryid" : "bc8e12d50064a9a9","placement" : {"basic" : {"cname":"54010049_cpr","flowType":1,"rspFormat":1,"sellType":2,"sspId":1,"tuId":9223372032562289251,"userId":5893023}.,"container" : {"anchoredType":1,"floated":{},"height":90,"sizeType":1,"slide":{},"width":960}.,"fillstyle" : {"backgroundColor":"#FFFFFF","cloudTheme":{},"elements":[2,1],"flush":0,"layout":[1],"lu":{},"search":{},"txt":{"cbackground":"#FFFFFF","cborder":"#FFFFFF","cdesc":"#444444","cflush":"#e10900","ctitle":"#0000ff","curl":"#008000","number":4},"video":{}}.,"userdefine" : "cpro_template=text_default_960_90|cpro_version=2.0","complement_type" : 2},"extends" : "","pdb_deliv" : {"deliv_id" : "0","deliv_des" : {},"brandad" : 0},"order_deliv" : {"deliv_id" : "0","demand_id" : "0"},"rtb_deliv" : {"deliv_id" : "0","demand_id" : "2480739"}});HTTP/1.1 200 OK..Cache-Control: post-check=0, pre-check=0..Connection: keep-alive..Content-Length: 863..Content-Type: text/javascript;charset=UTF-8..Date: Mon, 29 Feb 2016 09:18:23 GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Last-Modified: Mon Feb 29 17:18:23 2016..P3p: CP=" OTI DSP COR IVA OUR IND COM "..P3p: CP=" OTI DSP COR IVA OUR IND COM "..Pragma: no-cache..Server: nginx..Set-Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1; expires=Tue, 28-Feb-47 09:18:23 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1..X-Xss-Protection: 0..BAIDU_UNION_define({"tuid" : "u2480739_0","queryid" : "bc8e12d50064a9a9","placement" : {"basic" : {"cname":"54010049_c

<<< skipped >>>

GET /acom?di=u2355460&dri=0&dis=0&dai=3&ps=1233x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Encoding: gzip

Content-Length: 599

Content-Type: text/javascript;charset=UTF-8

Date: Mon, 29 Feb 2016 09:18:23 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Mon Feb 29 17:18:23 2016

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

X-Xss-Protection: 0

...........SKn.0......i...(..]x...x.......hrd..D..'...d.{...M{..I7nV.B.............j.qUKhT./...%.....VM&.).))...vwtT..............t....'k...W.....L...t<..`1....j7..,.u..............K..>.....:g.b.) ...........YEYuxQ.az....(x/ZcA>.........iAmZl>..P}..(....s..o............|.......F..tG.. S.M.W-.)...U=...^E.X.t..#..Z..,...KD..6DH..L@x7%.u.e..J..3&..C.F.s......;$@#..V.....1.k...?q...s...&..h...-G.d.%..(....q.#..i.)X...4.4..U........8.>....;.....7`".8...,.$D...=t.>....>....k.S=..SD...(..lP..".....9*O...z.....d...S._.....via..2A.,...C/]....\#...Y..Z..O...8........) .0.....f.,.d.sM.O9.nr8.z..............

GET /acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Encoding: gzip

Content-Length: 7172

Content-Type: text/html

Date: Mon, 29 Feb 2016 09:18:24 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Mon Feb 29 17:18:24 2016

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

X-Xss-Protection: 0

...........=k...q.. .... v...{q{,...GZw|.I.E.j......B..{..R\NlG....;qb[..UI...T(....R>.G..#.).!=3....;F.#AG..L.tOwOw.L.i........M............4x.....w.....].]...>p.....2*}RXW.w..g.Q{.vtW.......gx...m.2r.M...zc.R.u..}.%.<...k.K/1.y....<|.....|..R.....:...3.`.....Hrm.7..%.q%...e.*k ...^WG.c...2.^.....D.r............{......r........z.m......mt{..>.......X....r.2aB......Y`..>#.?...IO.8........6Rw..5.h..6...r>..m GX..0.5.Z}R.........[...n^..91o..H.[.~.e.u;7.t3...m}.#.1.........&.@....&..BEa.....~n.Pm..:n.a.{...l!M.....M]S\{.s..*..L0.9..1.n.n....(...z .&a..Y.a...z..0mK;...>D..@P..z...N..<vP.0.dd.......0.....w......;.....yG....#`.?.. .(....j..`..}d.......96.'.....X0n[60.$Cjr..x...L......[.|(D^5....T.......k..Vt....XM...c_F.P.1y.a..........s.B..6 :H.o.m.....B...].1..i......'..D\..D.)Y..._o...>.?.>.....Zy.n..R.[k..,..zV.q........z".....F........F..|0..D=.9|..=....i.&...v...U2..)..M..Y.x.[...V~d9.b^...Blk-<j.R-K.N.....D..Q..Z........n<&....X.h.A..K.<fF|E ....... ..5&-..;..^.JB.z.$=~..Y.M.~......JY...O.....Z ...Ny.J...`b^........=4Q...|.......gmD}.Ez..,..=.....][Z..]..(..h.6vi.Hg.........d.H...{....I...U.t..vi.pC.rq[..z..}oCj.o......r{.p.^..y. .._:....W.....va.P.7V.5T.fm....m.Bc}....4...#..)..n.-o.m.mJ.5.....Ms......us.u..hkKs..ek......Mk....;.j{j..wgK.o...a..u....m.k....X..........[...R....7.^.A...6.o.l..v.q.,m6o.o.v.....6.@....-...;.....va..-.;Wa..8{..m<........5...m.e..*...Y.!.. #.jY&.....x..b2@9<y.^u."O..x!.j.C...".A..(..c.mh...o.EkBi&8..e#..C$.4.D...........2......H.....

<<< skipped >>>

GET /staticPub/js/room/roomBase_f6883f0.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:34 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Fri, 26 Feb 2016 03:53:52 GMT

Vary: Accept-Encoding

Expires: Mon, 28 Mar 2016 08:13:51 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-42

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

3638.............}{w.E....S8M.-...~%...J.._....cN..jI-....Q.a....f.....0...a......u ...f,....p..........9.3g1.....k..].....J.nZ..V.........n.#zt..G.(..>.7.Y...L.4*.hS..d5.X.W...Y..F<.W..J!..(X.x.*'..^7.s.L.n...4{nbl.....8^L.4%vJ...5.......Q..=..L.t.meM-j vV/.i.b........:.(..l.0*i.^k8...5.Z?.....V.RK_...U.rh..(..^...5......Bc. ..FMQ z...7k....y....F9c...=.......IV..U......'.I. 0..e,Uk.c..,.J.0E-.E..]..O.|...w...3..........a>k...0{.....{.m7 ...8w.H>....Zy ..]...{...#..... .c..|]...k7..y..r....h.A".6*.o?..o.&...Q4.d6...Y.D...jI...Zy...q.ub7......^.B....4.....O4rn<u(;>6. 'P..v..E..0:2.7..#{.....ZnO.c-<f.r3.Y9.I.9rH.=P$...%.K...N:..8W3.i.....z.^$l2...=.?.?.@.2..6.N.".~@h...e..?.}....*...r....F2z*.2.$..v..........).Q.)D..f.._..F..X~.p..!W..T....##./....l.V....AJ.eB.......$.X....Y4P..........\.........K.Mp.zl...L..[e.>.)v7B!o.1.L~\......=Efe.....e..K...!.T..,I..q.^/y[`/...s.....[ymj... %...I?.Q.......Xrtb...#..x...\`..4.M..c.5...|=...O...f.%.Lr"..._..`..r.j..3..L..{...r..q....fmj.>m{.rNa;[..T.G.^..M....CB-11...=.Yqd..0......u.0?..l8..m...4..K.......c...4v..a....j....>s...JV.G..jjI..e.%.R..'KS....E.e....&........@........c..."../bDW..X]m.....T.q.....g"J..*j.h..3..jA3.Uhi.[].Y.F......%...F.*.N..z..g...9.Py._l[q....~1..'n...I..B.I.K=.....Q.U...F=d......:.I=n.....L.Z.e.....5-..?k.*.<.s..=gz.9.w5g*.. ..D...3..*f.}...s.TR..TJ...J....kI!r..O...O....u..u......j6.b...:...O_AKN.4..l......f.-... h.6[.[..C..vP..e-.F.f.9..Q........Y.;D.v-.5-37.<.e...D.&,....h....^,...D..2..:...d.t.S...0.....V.S.

<<< skipped >>>

GET /css/base.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:17 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: W/"00f2cc963bd11:0"

Last-Modified: Mon, 21 Dec 2015 02:25:04 GMT

Expires: Mon, 29 Feb 2016 06:49:42 GMT

Age: 2456

X-Cache: HIT from ntt-cn-hkg-008; MISS(S)|HIT from gtt-de-fra-103

X-Request-Id: 3174e5c8fc6cbb0eb59cfdf8c0f21852; 0ceb1418a82af105a137930ff73c90e9

Via: T.51101.S.2, T.1287.H.1, V.ntt-cn-hkg-014, T.51101.H.1, M.gtt-de-fra-103

Content-Encoding: gzip

868.............X...H.>3..Cj[h...]...*..XF......R).N...r.;..gj....N.......=.......a..-....]...QI.v:#2~.."..O.^7..Ov&...,.?.|.>}...H...(.{y.....l.~...M.we..-..dW.s..;.../o.........!....._<..Z..U<.d.IFK...F....]..... .m..5......9.A-..^.......o...........OeZ.F.....B..>.......l.4.l.F.2_....,.a!.J...d2Y.;]g....&..!W.Vef....F;3y.d*.L.e.N.Z.J.E.......4(fAq.T..r]o.\..A..YV;..qo8....No~..F...DP._ ..,0u`.=."l.[A.X20...g..1zy'....hE!..v.s%..3o.HJ].tC..jh.T. ...oEmd..D@n...j.....&k.n.4Y..j.<0..Hp..C.k.4A*..Tg".[.-.V.s...:.....A.0.a&R]s#ui]d.K%.. ....b{..<........;)[I.u....1..>4B..`Mo|6..~pj.Dn 7Js.......$.Uz...*......3.P..W......ba#FP.%t.T.%..2Q.6...Zmv..l.~TUO.._..I<s'.W_...Z.....@.5.....7..G......h/._..^p..5c...,...nhs...1..tF....k....m.W...Jf.L..G.u{..y.......fd.N...s..6....E...M...l...-.M...D...........a`.m.......-_fqE.:.a..K..'. ...&........F........G.6/,.5.&............}.}.Z>..,..R.......;...C..tb..5x[.ho..........}.".j..h.]UQ.zX..V1_..wF.w.t'..8B`.B.<hq......us.G....~Qm. .a-*...{...2ba.e...Eb.5.u0`..U.Bh..C;-3X;..wg.>.6.e&....^.V3.T%.1.m.....r..a.P4..aW.............Q..@o...pP709..!.0.x4g....>|......._}IsV.k.....cK>......:%x.@\LA.'j{p";.O.GB=.c=F|5y5{5..]d.....y.?..ec.t.....q.?....!.SK.S...c..1..&.)..P.F.u$\..d.2..5...l.p.9F......W.c........./.......h....\..Yd.QP.^p....L.u.. .....|1.@9w....s...C......E..&..a..G.y....vvL*...Z?l..D #l.y..ek.k...C#O...oG.D.....GI.CG.d.0...]..,....cb.J.'.LN..P<..!.>..HF......Zr...{.....}..J.=8)...............S.....5...A6m.............o".!..

<<< skipped >>>

GET /css/mask.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:17 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: W/"0941105f5ad11:0"

Last-Modified: Fri, 29 Jan 2016 06:33:44 GMT

Expires: Mon, 29 Feb 2016 04:51:54 GMT

Age: 10228

X-Cache: MISS(S)|HIT from ctn-gd-zhs2-010; HIT|HIT from gtt-de-fra-103

X-Request-Id: a83828e7924f89b711f95059f38e109d; c34661373c96d7c7453821b92c33048b

Via: T.5199.H.2, T.5199.H.1, M.gtt-de-fra-103

Content-Encoding: gzip

c95...............n..um...BB`I.R..4.!...@...Y.@...^.0..S..g...(.....hwYu.,.....?......s..\>f.V....d.>.=......?.&3?/X.l/...m...:.w.{..y?.,.,-...>..........8.....~q....r`DqR.|..Y.......7.?..t:..8s?..)....o..y.q.,.R.Og,......v.9...."..r.....z...i..I......._..............$..,*._...A...`.|4.....O..`y..8.?9...2..;Q...,....`08q..<t...gc.....f.....e....oY..e....E..ZdE\.Y:.v]...!..l1v....E.......!..;...x8......0.........UN>...n...F{...."..q8~.W...).0..DY>.4..i..1H...~.....2_..NQ.y..U....;...|lwX.6...O..~Pd..D=A.O..,......sB.\.7..7v..YQ..w.....RO=...'... @....l..8p..";.d..;).Q...........S.....\...`!).x.Z,....iw.3.e.,...b...0d.<.e....sB=.......!..$Y..U.&);:....R...d....."...x..h\....I8..CV*.S....­...#.I~..h....y\.....C...#f...S...............-.d...b4........[..=....4ss.`~....w...4.V.@4....n.>..IV...Q.........R.C8......j:f.`.%.O......5&.*.d..B....<....-.k.!...WeX..ahL..V.3..-........K.\..bf..U..K..lrF !4..6....qT_J... ..`.p..V....c5....A.b ...%...Py.,...@q......Su!..N..B.....@.."j..U^...%.v.P|...K..(..n.H.....uL.*....`...F..,....,..*.1...Dc..1.......$....#..'.y.........l..w.{.2n..A.A*%.0..&.....R...".........d^]$..C.JkJP...L........../{.Q. ..V....}...Em...P...0.1Nq.&Y...U....Shb.......B..#..[.........:..<.\..F...V...J.P)%....cc.k.5.......B.(...)....@N..m.B....W..=...7.RH.3E....T.....B=GM...N."C1.C...:S="i......J.^-.o..U........O.,]~.KJ.....E...rfw.%..P..50...?.......U(.:...'.t........u.T...Z./.....H..A.@.n...._~.......?n.|.../.{............?.n]..,......:.J.;<2........V.u*.(...,..qn..6....

<<< skipped >>>

GET /sc/gac.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:19 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

Cache-Control: max-age=10800

ETag: W/"052b55a56bd11:0"

Last-Modified: Sat, 20 Feb 2016 06:07:48 GMT

Expires: Mon, 29 Feb 2016 07:25:46 GMT

Age: 10602

X-Cache: MISS|MISS from cun-hz-fdi-148; MISS(S)|HIT(R) from ntt-cn-hkg-004; MISS(S)|HIT(R) from gtt-de-fra-103

X-Request-Id: 668bc78e4c73fc099fc3575c480766ac; 8b9b2a1b982eca7b669bbd2433b312fd; f4dcac205697c54edb067d53ea410118

Via: T.51103.S.2, T.12817.R.1, V.ntt-cn-hkg-014, T.51103.R.1, M.gtt-de-fra-103

Content-Encoding: gzip

40b.............V.n"7..~.....cia.......Dw.....zR.!.5....]{CP.'..>R_......:NQz.`-....of<........Irg;l.:..d.. ..=*.-...h..Do......>..2....3!.._...t.....Lj".V...]A.._!.AB....>..d...u..D........6.]n.&q..<.6.b.%..'..0J...of2.....@..X......SA3.JD."....6.......&I.1....uY.&.......b.X).S......{zR...8.:.....C..j.S..D#"D.?...!H.E.:8."....q.cV.E..i.y '>`.w....D.....v.D...j4.@v.SRK.Q.a.^.k...k:0.V.Q..^....jX.x0.....=2..d....?.F...=..D._V........\.pK...1%.d....x.i..y.....n...6B...K.....^..........\...;.D....Lp.&.YL-.....*...U..xDx.......}.zgJU..w...U....a... -......\....4pK.A.7(.Z..Y.w^.x%._j.j...<.../|\...o..X.....h..C...9....C]N/...L.EX.E#..U......-.....X...o.1r.hm.a.8... 2..E{<.0q.%.....n..;...Q.cO.&.........W..q..GF./G.....Ky.....].B..F3A..........}......y.]@I..e5..... ...CI.....AI.f..Ta...].......Z..|...M_5J.E.eL.Y......Kr..,,./.S.E.U.kV.k..'^=.....Qx.%.DL.l.^...}LW......W....P.A..<.s..!I....V....-.j9.k5<.....U......E.....h.y-.u.3vF.z.......K...e...I.4.f[J'<.2.....4..s....*.bm]..p..>&....v...-.^b.........W_.sY.vX.$..f.......?.8........0......

<<< skipped >>>

GET /js/ie6_png.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:19 GMT

Content-Type: application/x-javascript

Content-Length: 198

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "0a3e832f627d11:0"

Last-Modified: Thu, 26 Nov 2015 02:57:34 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 07:21:08 GMT

Age: 6405

X-Cache: MISS(S)|HIT(R) from ctn-hz-fdi-019; MISS|HIT(R) from ntt-cn-hkg-014; MISS(S)|HIT(R) from gtt-de-fra-103

X-Request-Id: f4b28fde56c3bbc4f57278ad056479dd; d026b984879fc3cda9b17ac1e7046e6b; bcbc55b8c352410932e01976c8c9ac1e

Via: T.51100.S.2, T.1285.R.1, V.ntt-cn-hkg-014, T.51100.R.1, M.gtt-de-fra-103

// JavaScript Document..DD_belatedPNG.fix("img,.main_right .con .li_right span,.share a,.mask_hb .hb,.mask_lq,.withdraw-time li .head span,.withdraw-time li .time,.mask_hb .bg,.mask_hb.xmin .bg");......

GET /js/t00aa2.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:19 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

Cache-Control: max-age=10800

ETag: W/"0abd0a3a2bd11:0"

Last-Modified: Mon, 30 Nov 2015 06:40:46 GMT

Expires: Mon, 29 Feb 2016 07:55:18 GMT

Age: 8249

X-Cache: HIT from ntt-cn-hkg-004; MISS(S)|HIT from gtt-de-fra-103

X-Request-Id: 2d32c6e6e8a6e61c6df226a8e6a4c4c3; 7d2e14272c075530bbc3ce45557c1581

Via: T.51103.S.2, T.12816.H.1, V.ntt-cn-hkg-014, T.51103.H.1, M.gtt-de-fra-103

Content-Encoding: gzip

1147.............Z.s..r.Wl......I..P.=.....I..$..Mu..&!...P@.................."......~.....6...W.]?>.ZU.Z.8y..'."..C..m....F.....hd.......z....H....v... ..Z5V...|g..........".E.)&S..f .n.rj..D...\L..4..(...33O.n..9....O.....*,....{tZ..gj>..G&W....e.<I...Z.h.;m...M.;..E..63r......._._..'.oR...9.F.7P..ki....Y.......Z.....q.Y.J0.. ......9.f.2.=ZU.E.d..x.....}.n.F.(..){.. ..@...q..JnO.=.n...?-....UIj..o...]._>..{..h%..|J.....,M3.$....|.j....jY......!*..JZ..EQ.8.Q....z4:2f....B'.....~'...........t..a....`)........{...i?c.nm,.I.....-.lW.....N.vU.....qdu[...ia~t......g....k...9E....T..b.....'...F.<.=....;...D.....0".5U..y!g.y*.^.........j.r^L.....0 q.r4. s?..s.....CPxw.......Z6.......1..F.! 5.....&Sb-...>~x...a..".....ex..U.d1.....d..f..X......@M..M.B.....O.5......T...||...k.OQ.......X^xJ<hNq.2...2V.@...nJ.Z.:]....E..,...Q..5P.~#...@..P...h$f..&.....Q2.R.......n..F....T..CR.S.ndk..).*Z...Ll6.......<M...v..\.N.f...y.gal.j..Ys....t..JA.....k2b..i' .FD.. ......==5.R..B9{...b!I...0.....V.wC....A_".SS...0u...g..n..z.N.>...#....6H....._....!....\y.He..m.......M.i....n.gyg.n.....th)....&`..N]g.fKg9.N...p...t.98.3..$...?.&....7_...Z.in.....z}........i.?.....SB@....FX .J.....|....}......O.......yw.AXD....)r.m..goA.`.Z.;.<I...u|.Q...aiq.8.q3...}..@lD.g.4...l.......;S`t<.........n%.[...'.O.......)!...[4.l.9...z.^..i.$"4.T.6'...-d.e....3.....h~........6._e.z..I.Q....T.....G..B...t.P...h$....Iz.....Q.C....A..aX..'..D...)......W..f>...S.T..."==....C..a..$......*..#....../....$......V.w_..o7..9O..

<<< skipped >>>

GET /images/ac_placeholder.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:22 GMT

Content-Type: image/jpeg

Content-Length: 6908

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "0b9ecc26c39d11:0"

Last-Modified: Fri, 18 Dec 2015 08:19:06 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 07:57:29 GMT

Age: 9615

X-Cache: HIT from ntt-cn-hkg-004; MISS(S)|HIT from gtt-de-fra-103

X-Request-Id: f250bdb4a371151fa31bd12ec85f1be9; 446a69b9d43b2745ae0a656c48a5fdc0

Via: T.51102.S.2, T.12812.H.1, V.ntt-cn-hkg-007, T.51102.H.1, M.gtt-de-fra-103

......Exif..II*.................Ducky.......P......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9dff2845-54a3-ae4a-859e-606945b29d32" xmpMM:DocumentID="xmp.did:FA94B1CEA55F11E5AB82F9782FA2CC0A" xmpMM:InstanceID="xmp.iid:FA94B1CDA55F11E5AB82F9782FA2CC0A" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9dff2845-54a3-ae4a-859e-606945b29d32" stRef:documentID="xmp.did:9dff2845-54a3-ae4a-859e-606945b29d32"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................................z....................................................................!.1A.Qaq"....2....B#r.3$.%.Rb.C..S..............................?........................................................................................................................................................................................................................................

<<< skipped >>>

GET /images/share_icons.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:22 GMT

Content-Type: image/png

Content-Length: 8253

Connection: keep-alive

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: "02b375180dd11:0"

Last-Modified: Fri, 23 Oct 2015 10:48:14 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 08:46:32 GMT

Age: 9079

X-Cache: HIT from ctn-gd-zhs2-008; MISS(S)|HIT from gtt-de-fra-103

X-Request-Id: d4287179eb78667ca6b2428888b2c08d; dc16c4723ab7a9c63c594e601ebcead7

Via: T.51101.S.2, T.1288.H.1, V.ntt-cn-hkg-007, T.51101.H.1, M.gtt-de-fra-103

.PNG........IHDR.......l.......r.....tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:95ed5cdf-9368-f54c-ba2d-97bb70885007" xmpMM:DocumentID="xmp.did:995120D378B711E5AEB19095F9BC2369" xmpMM:InstanceID="xmp.iid:995120D278B711E5AEB19095F9BC2369" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:94D0F8F5633311E59A45906A56E0BE90" stRef:documentID="xmp.did:94D0F8F6633311E59A45906A56E0BE90"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>O5.3...eIDATx..]..US._...Q..F..TT.]...T2...>......odTC.E4..q.0M1.n#.......7I($...P.......zO...Z....u.....y.^.y.z.s[.zV....U.PK.\.3.O../x.`e.......\.S...........Tv.._....g...U>a...y.....=......'x........|Gp..:..$\...d........Rp......p...ghx......C"f..,.&.N.{~.G).Z....(....W...|Q.^...L...g.x..\[E...%....^C....r.......a...Y..C.O..P..W(..~$XW...H...|?.k....g...<..O.i..I C;.~.r......^.e.....[..!9....).9$....9M.S..j.P....@.E.%8.....K...P.)...S...,.c)^%.-J.}.mN.iJ..E..<9.E|v...-. ."..........i*....I..G_|.F..A...)

<<< skipped >>>

GET /images/share_icons.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:22 GMT

Content-Type: image/png

Content-Length: 8253

Connection: keep-alive

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: "02b375180dd11:0"

Last-Modified: Fri, 23 Oct 2015 10:48:14 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 08:46:32 GMT

Age: 9079

X-Cache: HIT from ctn-gd-zhs2-008; MISS(S)|HIT from gtt-de-fra-103

X-Request-Id: d4287179eb78667ca6b2428888b2c08d; 786d2e2cee81bd1cee5384b2bf7f8bd0

Via: T.51101.S.2, T.1288.H.1, V.ntt-cn-hkg-007, T.51101.H.1, M.gtt-de-fra-103

.PNG........IHDR.......l.......r.....tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:95ed5cdf-9368-f54c-ba2d-97bb70885007" xmpMM:DocumentID="xmp.did:995120D378B711E5AEB19095F9BC2369" xmpMM:InstanceID="xmp.iid:995120D278B711E5AEB19095F9BC2369" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:94D0F8F5633311E59A45906A56E0BE90" stRef:documentID="xmp.did:94D0F8F6633311E59A45906A56E0BE90"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>O5.3...eIDATx..]..US._...Q..F..TT.]...T2...>......odTC.E4..q.0M1.n#.......7I($...P.......zO...Z....u.....y.^.y.z.s[.zV....U.PK.\.3.O../x.`e.......\.S...........Tv.._....g...U>a...y.....=......'x........|Gp..:..$\...d........Rp......p...ghx......C"f..,.&.N.{~.G).Z....(....W...|Q.^...L...g.x..\[E...%....^C....r.......a...Y..C.O..P..W(..~$XW...H...|?.k....g...<..O.i..I C;.~.r......^.e.....[..!9....).9$....9M.S..j.P....@.E.%8.....K...P.)...S...,.c)^%.-J.}.mN.iJ..E..<9.E|v...-. ."..........i*....I..G_|.F..A...)

<<< skipped >>>

GET /images/li_bg.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/png

Content-Length: 1213

Connection: keep-alive

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: "07460c69010d11:0"

Last-Modified: Tue, 27 Oct 2015 08:23:36 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 08:54:42 GMT

Age: 3576

X-Cache: MISS|MISS from cun-hz-fdi-149; MISS|HIT from ntt-cn-hkg-012; MISS(S)|HIT(R) from gtt-de-fra-103

X-Request-Id: 92401a839c30c480168f2226941a2dda; 9bf0d85a920916b5782639384ab68988; 0ee73cea1b879bdc95a91da66310164e

Via: T.51100.S.2, T.1286.R.1, V.ntt-cn-hkg-012, T.51100.R.1, M.gtt-de-fra-103

.PNG........IHDR... .........jfk.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:15386AEA7C7911E5B975A8C2336F1C1B" xmpMM:DocumentID="xmp.did:15386AEB7C7911E5B975A8C2336F1C1B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:15386AE87C7911E5B975A8C2336F1C1B" stRef:documentID="xmp.did:15386AE97C7911E5B975A8C2336F1C1B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...L...-IDATx...;..@.E.d..7b..R....].K.......<.G.30..\R~L.:....<.g.s..3.}......................................................x...x...x...x...x...x...x...x.......................xwvC|......p.w.n..|......|......|......|..........^...n.>......>......>......>..l.....Ust...x...#>......>......>......>..l..x?..`.k...m.e.....IEND.B`.....

<<< skipped >>>

GET /images/qr_code.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/jpeg

Content-Length: 27772

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "09eba4d6e18d11:0"

Last-Modified: Fri, 06 Nov 2015 08:37:00 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 04:00:22 GMT

Age: 9188

X-Cache: HIT from ntt-cn-hkg-017; HIT|HIT from gtt-de-fra-103

X-Request-Id: 2426be6c77def41b2d6d841de864a4e5; 79f14328f0aa13f7fed5dad905acd145

Via: T.51101.H.2, T.51101.H.1, M.gtt-de-fra-103

......JFIF.....H.H.....C............................................................................................................G..................................8W.....!"#%2..34Gh..$'AEb)5d(9BFcg.........?..0....................................................................................I.LF-1%6.....m..1....,.S...f......L7.i\...!JN....z...c.......... gG....fX..:=....2.....'.=..8@..A=y.....tz...ve..3..O^{.,p....Q..J_|.O.G.!.>.\S......H.V.K.{......5&.1.....cK.ni.#X....X..Lb.}...Hs.%0...s.W..)8.tz...ve..UB.jT..s..r.3imZ...5.j..),YZ.12>.....z4...8.{....'...Q..J_|.O.G.!.>.\S......H.V.K.{.....U.*.G....fX..:=....2.....'.=..8A.L...Nm3.Lfl.._3.Y..R..%{[$'.I.&W1..F......q.R.....*n..a4k.9k.8s.......o.em...U.n.....{...e...si.rc3f.Z........) ..!=2N.2...r4G..8.s....-...jT..s..r.3imZ...5.j..),YZ.12>.....z4...8.{....'...Q..J_|.O.G.!.>.\S......H.V.K.{.....U.*.G....fX...e.Jb6..&4.i..3nY..].L.kd..);4....$Dy.cH.<.!HR.X.F...#....Lir..6.k...T..V..B..Ba..zD...4.{....'...A=y......O.J..Nb..Sfm-.\..F..R..%. T&&G.!W=..F......q\R...\........ gG....fX..:=....2.....'.=..8@..A=y.....tz...ve..3..O^{.,p....z...c..P....r..&.v/.).........~6yo.B.....M....0.z.....N...}.HUY.~6yo.CU.yW..VK.;....u....*..|..'.D...N.e...to......cM....*..?.<..!..<....q..2.^..*.*.G.M.._XR..=T.....cM....%P............A6..}aH`..P....r....v/....!...-.HUYQ..i............q..2.^..*.*.G.M.._XR..=T.....cM....*..?.<..!UeG.M.._XR..=T...*...\h&......W.w.?2}4eX.U..r....v/....!...-.Hj....r..&.v/.)...........A6..}aH`..P2..........fl..\.nF. ..)5b..M

<<< skipped >>>

GET /images/hongb.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/gif

Content-Length: 11374

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "048edae2041d11:0"

Last-Modified: Mon, 28 Dec 2015 03:34:40 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 08:03:07 GMT

Age: 4538

X-Cache: HIT from ntt-cn-hkg-017; HIT|HIT from gtt-de-fra-103

X-Request-Id: 0dc537712ed0b31c2629e881f0d456a5; f6f3280d660634187400afa937afb7f9

Via: T.51102.H.2, T.51102.H.1, M.gtt-de-fra-103

GIF89aZ.d........./....P*.w..bZ.IJ...............v03hId..v......[2O.4(..............D.dy......y.........(&.&8l.......C.#..0&.......il.... ..[S.w|...}v..\r.Sg..%....3L..........t..1".......M'.....C.IW.v$....Ul....m3........ .2 .&..:T.*D....Kc....3.........8rN;O.,.l.......|j............"...........p.SD.s..vBMP.................a7.....^..$...X)3.U^.....@....w.n.#..........KA..........?@.9V.......B\.4...@.......A5.0H............-.?........"s&!..;.p{.....|.&U.......(...C...W......Zi....1$....{...Q. ?.......t]....gd....GN......8B..|v.`X.9!(.f....4..e".uf...m[~.......-"..'..._e..i\.....'.5.....*..6...h.D(.VO.9B.......F .......?g@5q....<!.0..........OC..2(....Lp....3....G.T.1'...sf.....6'.DP.3.bZ...........0M....?'....6 .4!.6..:'.|8.`I.....$....4!.3&.2%.]{........K..D.^Vg........!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:0332A776AD0711E5BDB990933981401E" xmpMM:DocumentID="xmp.did:0332A777AD0711E5BDB990933981401E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0332A774AD0711E5BDB990933981401E" stRef:documentID="xmp.did:0332A7

<<< skipped >>>

GET /images/g.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/png

Content-Length: 3793

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "044d13a613d11:0"

Last-Modified: Sat, 31 Oct 2015 06:33:12 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 07:07:41 GMT

Age: 10755

X-Cache: MISS(S)|HIT from ctn-hz-fdi-019; MISS|HIT(R) from ntt-cn-hkg-017; MISS(S)|HIT(R) from gtt-de-fra-103

X-Request-Id: da00767c33af74e9c040b7769e6ab1a5; 8f3c5900e0757fed941bbbc2c2dc7f65; 6e4fa1243dd4031e45e17ecb65ccdf83

Via: T.51103.S.2, T.12816.R.1, V.ntt-cn-hkg-005, T.51103.R.1, M.gtt-de-fra-103

.PNG........IHDR...<...<.....:..r....tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e85a7874-595c-a04a-98d3-b7ddd885edc1" xmpMM:DocumentID="xmp.did:574C47867F9811E58B43EC41AC22FC87" xmpMM:InstanceID="xmp.iid:574C47857F9811E58B43EC41AC22FC87" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ee4d8533-d47c-864d-99fe-1b62711404d5" stRef:documentID="xmp.did:e85a7874-595c-a04a-98d3-b7ddd885edc1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>h.......IDATx..[Y..G...z.....3k..;..X..8Y.........@..'....Jx..`^..pB...^ ....D. .)...C. ..C.h.6...zwvw.............1ry?.x............h.........b^7.....N..t..o...c.......<.l..=?.......Y.........W.#.L.9...=.Mt.T.......V.3%.lF$...5.MHb.t.G75............M...........`-.q.w.....4..@.`R.'%...50n.....C..M.f...@D{.x.v.v.{&.....&....K..O....}qOu........G..7...Oj.BUEY..\..AM.[=C=...9..?......i..r.g1...GT{&.e iW..~.....]...V..P.!.. ..6.*..y..{..)Y@F...R'G.*..E..y...........n.........R..s.`.#.n..m..<.=.."......

<<< skipped >>>

GET /images/to_top_v2.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/jpeg

Content-Length: 8247

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "013b98b4611d11:0"

Last-Modified: Wed, 28 Oct 2015 06:04:46 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 09:29:18 GMT

Age: 6493

X-Cache: HIT from ntt-cn-hkg-004; MISS(S)|HIT from gtt-de-fra-103

X-Request-Id: 3861c47e12647c064d8afef676b04d18; 970f1a073d352f3657ea1ba80b67490b

Via: T.51103.S.2, T.12816.H.1, V.ntt-cn-hkg-012, T.51103.H.1, M.gtt-de-fra-103

......Exif..II*.................Ducky.......F.....*hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A6BC80067D3711E5815DB1230D595DE6" xmpMM:InstanceID="xmp.iid:A6BC80057D3711E5815DB1230D595DE6" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:73093390668811E58E4B85DCAA36BFED" stRef:documentID="xmp.did:73093391668811E58E4B85DCAA36BFED"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................................................................................................................................!1Q"R.s..TA.2B..3.4.u.67.a.b#S...U....$....Vfr.C......t^.&Fv..........................q."BR..3.!1AQ2....Ss.4.5.bra...c.#....Ddt............?...p.. .S.......;...(|... ..>n.`....7k.H.e....$.,.C6...(BI.*s6.&..GFsYu..v]..)..s`.......Nt8D.%PR..Ju.. ...3%.G...mW.......2.........3(|...= ...7k.OH.2..........v....3(|...= ...7k.OH.2..........v....3(|...= ...7k.OH.2........

<<< skipped >>>

GET /images/head.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/jpeg

Content-Length: 2888

Connection: keep-alive

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: "06566d847ad11:0"

Last-Modified: Mon, 19 Oct 2015 08:26:26 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 08:43:34 GMT

Age: 423

X-Cache: MISS|MISS from ctn-hz-fdi-021; MISS|HIT(R) from ntt-cn-hkg-014; MISS(S)|HIT(R) from gtt-de-fra-103

X-Request-Id: 7138102a70ed755ec3516cd6d102f43c; 1d0afbe37a6f89b316c71c7cf27de19b; cbcaf70349041c45f0bbe02ad5bf30bd

Via: T.5199.S.2, T.1284.R.1, V.ntt-cn-hkg-014, T.5199.R.1, M.gtt-de-fra-103

......Exif..II*.................Ducky.......<......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:279348265E7F11E585CC9EDEB5B2651C" xmpMM:InstanceID="xmp.iid:279348255E7F11E585CC9EDEB5B2651C" xmp:CreatorTool="Adobe Photoshop CC 2015 Windows"> <xmpMM:DerivedFrom stRef:instanceID="4DDF7D9F416D4AA149884F910868A410" stRef:documentID="4DDF7D9F416D4AA149884F910868A410"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................H.H........................................................................................!..1AQ.a"2.q..B..R#.r............................!1..AQa.".............?...n.H.!..*.........}....h..|..!.0y`.7[.....D.........*[nf.K2.Z..!..xp>....Y. .........|0.[...J.... _..p. .Y....H.3.'.z~.}-..Xn.\*...........8`.&..=.7...].v.$.S"...IZ.-...e<5G&..p.'t~].v...t. K.y.sZ)..q..ki.....'......4r3;.{.\...VA.H..........dr....UI.....~...... U...Z..$:E.D..|1.....M..... clM.. ......f.{

<<< skipped >>>

GET /images/web_close.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/jpeg

Content-Length: 2239

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "0f1a97272cd11:0"

Last-Modified: Thu, 22 Oct 2015 02:36:26 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 01:42:50 GMT

Age: 3539

X-Cache: MISS|MISS from cun-hz-fdi-151, MISS|MISS from ntt-cn-hkg-007; MISS(S)|HIT(R) from gtt-de-fra-103

X-Request-Id: 59d7d82d8b7b4a63027224700e92ce4f; 2be4f7d0dafb6de15cd20bd1ea80811e

Via: T.51102.S.2, T.12814.R.1, V.ntt-cn-hkg-004, T.51102.R.1, M.gtt-de-fra-103

......Exif..II*.................Ducky.......F...../hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:52B26072764111E5B687DB56858E966D" xmpMM:DocumentID="xmp.did:52B26073764111E5B687DB56858E966D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:52B26070764111E5B687DB56858E966D" stRef:documentID="xmp.did:52B26071764111E5B687DB56858E966D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................B.B.......................................................................................!..1."..A2br#C.a...RS..$......................!1.Q.Aaq..."BR...2b..c.....................?......`....`...0......`...0.......u...wN.p.85>aS2I^..../.%..^..vc.".l.....n7cE......z.U.%.....*U..ok......R..Hdx.F.X....*..t .. .F.]&....d.....BZ.w..$.:eI.h.... K..j...~.k.t.&..M.....E..[55b....h/...y.....b.....kK#.5U.A.3....f.6...#6........]3..y`.0...6.Y!.&..9.`.... )..F...L...

<<< skipped >>>

GET /images/web_bg.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: image/gif

Content-Length: 48460

Connection: keep-alive

X-Source: C/200

Cache-Control: max-age=10800

ETag: "0941105f5ad11:0"

Last-Modified: Fri, 29 Jan 2016 06:33:44 GMT

Accept-Ranges: bytes

Expires: Mon, 29 Feb 2016 09:34:11 GMT

Age: 8149

X-Cache: HIT from ntt-cn-hkg-004; MISS(S)|HIT from gtt-de-fra-103

X-Request-Id: 2c60e3e21c38b447c7b176abc43e80ac; cf0c341bfbf1d5c33c6a7ac2768a15ae

Via: T.51100.S.2, T.1286.H.1, V.ntt-cn-hkg-014, T.51100.H.1, M.gtt-de-fra-103

GIF89a4.@.........1./2_ O.ZY........B..R...eL$".......,............r....#]TP....jf..(.xv.....d.dY..!.he..H..).........."$..........O..!1....n......V..8..L.....T.DD.M .......t$.x...%.!&.....e.jB.k-..j.!#..3..d.9=.....3..W..z.CC.i..P)..S.(....l.1..$..BR5%)s..3E.23/!7.....&.GQ..4........#.TW.EF........5.......$$.s*..G....x...&.q,.....%....7:.M,.N'.....H....T.....!#.sk...<,B...p.).....7.....V..w.sA........3. ..34..u..C.....F........7..p..U...k9...?.U...f........x..C....JO.uk....{s....df..C.U`dR...).....F..~.....Y..V.......z@...{......Z_........|..7....)3....*..7#.RP..%.4%.Y..) .QG.)*..d....yv.SI..........x^.km.5$..%G.*....6 .............c...Y..d..............S.JM..u..1.53.......................\.Ye..............................!...............kt..................1s.. 6F:%...!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:c629ff76-1d7c-9743-bcb5-192e35271035" xmpMM:DocumentID="xmp.did:24E0607CB8DE11E5AC9990B0C67AF333" xmpMM:InstanceID="xmp.iid:24E0607BB8DE11E5AC9990B0C67AF333" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:cdead167-b287

<<< skipped >>>

GET /js/autoscroll.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:23 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: W/"03835d747ad11:0"

Last-Modified: Mon, 19 Oct 2015 08:26:24 GMT

Expires: Mon, 29 Feb 2016 07:43:12 GMT

Age: 6012

X-Cache: HIT from ntt-cn-hkg-005; MISS(S)|HIT from gtt-de-fra-103

X-Request-Id: b06328c395c5f14860a466afb4a67844; d710d3ac251cc83ffd929a940595181e

Via: T.51102.S.2, T.12814.H.1, V.ntt-cn-hkg-005, T.51102.H.1, M.gtt-de-fra-103

Content-Encoding: gzip

6df.............X]S.W..^g....f......tb.i{c.:v...919!..n..A....E"..........2c)$..&g7.._.{>.#..fl......}..=K<z.......w.d.po......;\.t.=wf...=xH..GK..DR..p-.*W-C.....(.S.H..B...%g.uR........$...{I.*..y....2..{...YZN...._.'...|.......7.;o.....K/...<r..........[p..=..\1F..B..H..7..f..3..?...'..5....r..xm....O..V9..,.).......<3..............6..i.m;s[....>....7.......QR..)..S.bs.....u4j..........k.e.c.63....n.i....6qi.....g.3HK....#.1.H$@.1..dY...^s.-.^|.k.*....wc.)[y.2..k2/..2.......U...6.,..p..=.'L.:...........q.|a.Dw.4X.N...V..P...}.T.6.@RD%..,... ;.....e....4.1....k8......w...T....!.MC.....E.H.H....e........{{..Cg.#..]...#0.......X........r...m..E.'r...(Y=.LqP.D.<....0.2..vN.@.G&.D.@.....B.f.O..,.rB.dP6U.lb.x._].U.... t.XA.$..B.....q.n.F..i....../....OD. ..|.......@.....TL..JE.q.......}......=Ol.."....x.....H..L. 2. Y.<............*^^.H......F..e.0.;.9...1.,..`!r...`p.k{....gy..BI.T....B..X.k.:"..I...dG|~u.tN.2&....~....(...j2a8...2.).Wx....;..E.a..$...Kj.,...)..H..9....V.O.r.....M.........x.V.1|..,.b.J.C.M6o..u2..bb.l2..S.....9h..UH..]d....<w.F'.byF.@.jV.l..B*...,%S.:..QF..2.'..4.I#9..GzDIk....*....h.\.. F.....M..p.X.. ..]_o~.....3.cH.^.I~.<.._6.4.2.T._CY[.../...!~.>)?*y..c1.......#...k....,Z.b.ac...W!P.,.7.UoL.M.T=.t}...!.p.....W.m..t...y..8Bb.7....N.....@..I.......@}...4.........A.`...wZ..>?..p...w..hR7.....$...g@.'...R....(....i.....O>YJEx..og.O|8K....oL..yz....w..gxj.....Sy.[.)np.z!.S..l`.pW%......d.rj&.t.k^.w...g....H.U...V78..M..js..X.k......`(.w.!...5g~...;...."x../.=&..

<<< skipped >>>

GET /js/content.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:24 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

X-Proxy-Route: ctn, ctn

Cache-Control: max-age=10800

ETag: W/"0fe7fd3e2cd11:0"

Last-Modified: Tue, 01 Dec 2015 08:03:56 GMT

Expires: Mon, 29 Feb 2016 02:28:01 GMT

Age: 10530

X-Cache: MISS(S)|MISS(S) from cun-hz-fdi-149; MISS(S)|HIT(R) from ntt-cn-hkg-014; HIT|HIT(R) from gtt-de-fra-103

X-Request-Id: 177a9bd706a6630981e9a5757d8e6261; e7011980fe07c8e34a5b8ebb35c2d989; eeb494fbca5a45967418692ffe8867e7

Via: T.51103.H.2, T.51103.R.1, M.gtt-de-fra-103

Content-Encoding: gzip

50c.............VmO.V..l$...1....udZZ*U..n..j..~C..I....}CX $6..Ntt..F?lL..nE..n#-....O..;....IaSQD......<'.N>4f....<N.s.Z.:|p`D ...3..2....].,..l......2...*s..MK.XlV....V.Z@....q......r.O...y..U.E.......Hoj.... ,...c.9-3.f.fPq....,..}j.....F.(....p..c...x:.s......"....8......c8...S?U....t..w.:.k.......#.p..x...z..*..tj....P._.o.._t.^$.7.CX.f..........v....._a:.....Y...H..H......S.h>.....'...m|q....B.......P...\....._....G..X.L....Y.)l<.s....*d.,.....mu..=.,......kU..0....v....5.^.....5..........x.*.~}'...l=........;.St4k..j.... d..&..0,.E...i..j..N...s.hl.P.V3D....0A<.v.)-C..v. ..DD^%......t.....N....m.x..h...G...p0.....=m.6d#r.).............Yz......1..S.B..h.....K.{...5.H( i.!.......>.5.9.)(p:$.o0G.=...N.W..T../..R@....zd...b..`..2tG.<.hQy..q z(.u... S.....1..P.............a.Q.=qQ<7`..E....H.8.JQf\.] .....t.......j.e.\..........S;............G....oI.i.....>.z..K.|.>..T\.<c.01...........r|....K.9j,.^<k..%<6].".D...Z....hY...,...F:.... .%..5..(:a... ~.=<....@C..3..Yt..0,..m..P..2........Y..k..i.....@....w...w...PV............\. !.]......H....(...H..Y.......U..TT....lS%...@..Kd.. (V.u.......$N-......t.j.v....{.......).&..0/X..=...7....{...d.;.n...@5.......1I..1j.v..08..b.H..2..._Y..](..\%.}i'....n#...K.<O.N.....8....,.....nA.....'XI...C.V.........pe...F ....E.......Z.......@.....0......

<<< skipped >>>

GET /js/jquery.pin.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: r221.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:24 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

Cache-Control: max-age=10800

ETag: W/"06f2999a622d11:0"

Last-Modified: Thu, 19 Nov 2015 08:45:10 GMT

Expires: Mon, 29 Feb 2016 06:11:01 GMT

Age: 489

X-Cache: MISS(S)|HIT from cun-hz-fdi-149; MISS|HIT(R) from ntt-cn-hkg-012; MISS(S)|HIT(R) from gtt-de-fra-103

X-Request-Id: 276f82a36f45d2ca6dea48d4cfc55e30; f7a21fbb0de79d10728f2ed8cec57ba6; 56bccbcf839e0207f12eee864726e9f1

Via: T.51100.S.2, T.1286.R.1, V.ntt-cn-hkg-007, T.51100.R.1, M.gtt-de-fra-103

Content-Encoding: gzip

320.............UKs. .. .......e.C/=.......H`.....'U....$GyLz.`Y...}k..k...*....*.`.Dj...G...#..Q....U.w...Z...(.=......H...C....*...t..E.V.}.j....l..Y.;w_.M.?.....[.#?....x1...2?..\...H.V{u..xT.0.g..n).2ob.}..%..J'.&....G. .z`c~..<./V....:.i..-..#R..n.K.e5(......e.u..4N....&.p.%Y.UL...).*..&..;...gV.."s.uT.r1X!_.........@........5.......T/o. -uBq...ki..^W.>%..^.U.Wi[..H.Vg..$).0...h.U:..G}.Z..4....?.F.b.H.).... .!'.....@...T....Y...7............%.y.ndLK.7Y.0.</y. ....rp....&xk!..d..S.j..%.....u...AV...............8..9vT..h.............d.....F....r...Z.BfY....Bp..s.uw.X.A.:3!.6O.%l.....7H6q...S..Xcy.w9. ..Qs`X..[1....Bw#...1.$..`.c..d.Y~.....A.......OK. .g...f.=........ .H9....fe n.:....Pa...`M@%<d..WKB........#....&...[....s....@.;.[/[RyV......a.z....@3.....Z..]....9....c. .8.....Uxf.....S......0..

GET /staticPub/js/lib/kg_6abcd20.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:33 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Tue, 23 Feb 2016 08:33:06 GMT

Vary: Accept-Encoding

Expires: Thu, 24 Mar 2016 10:18:48 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-42

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

6569..............{s#Yv....)X.5$PH..>.JB.U].TWu........D".d......CP.p..Z{7f....W.Z....Xy..]{...?.M...._...;...y.....#..j.E....y...}....$........97.3.'W...{{._M......G.~.....v.....}.R....u*.. .......z........X.?z.N....`0..O.5F......k..A..5....$..9...n.&..]....d...{.`8.....Z_.....h...x..y......_.P.........l.L.........|..h..K..`2.....w.t...........1....x...J~2.....qp...&9.v......y...L..r.....:...7.,...E.....A...n.Z......\v^.:9/.kW...;..9.:.s.....uF.v.a..X......,{......Kc...A."S.v.j..=..7..]|V...$... h.U..-.N/...........Y....~.....?......~..V......Q..X...~p.......-..K.}=.5........M~Y.~Y..[./..............?......d..n0^_..KCw..'......`&Y.F.........-.UX.....yn.......:8...8.P..!P|rF....W.n....a...............r.Q@..S..s...SzZ.)........"6....*.hs.G......G......ao....~....;...b..Wi<q'....`<..q9.Y.N.{M..-}9..9k..E..k[...Z..:.e.........|.].K...SA.s.]..%....t...y.....;.tJ..s...Bo2.;...wp...W..|...@..z~.3.J..8~.p=..m...H..wX...q!..F...q........K...P.._...hJ...T.$8..t{..F...Qt.....5...`s.....K[...Wc...ts.5....j..m.........m.-[...Oo4..../.3/..B.R...2...q.c......>....v........rV.........n=.....~..N..T /...t.....G...|Q@.2...CJ...p#..h.........jp..9....`...8.h.A.j.[.y...9I..4......Sw...gN.HV.`...{.P..&P...p'....w5.............^..(V.A.,......9..-/....E7.[v...)G..);.....c.\.%.I.........>hU!-.f..(..^ZW../...Za...(.......;......Xk..._..dR................x...P..D..Bz...g....2Os.2-}.Cz..m.I-.S*...o.yx.f.....&:al..E7o.:-.ECN9......B.(...... Q.aA.L.cb...:>..A....83:.}...d..:?N..mG..8.../.G....;...0...x'.....F.jV..}....n@

<<< skipped >>>

GET /cpro/ui/noexpire/img/2.0.0/bd-logo5.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cpro.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:51 GMT

Content-Type: image/png

Content-Length: 1545

Connection: close

ETag: "5667c7a9-609"

Last-Modified: Wed, 09 Dec 2015 06:18:17 GMT

Expires: Mon, 08 Dec 2025 03:23:12 GMT

Age: 6933339

Cache-Control: max-age=315360000

Accept-Ranges: bytes

Ohc-Content-Crc: 1974033671

Server: hkg01-sys-jorcol04.hkg01.baidu.com

.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...siTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1cd07f07-f14f-4d1b-83a0-43c485539d9c" xmpMM:DocumentID="xmp.did:52D26256CAB511E3B696F0231D9BB8CB" xmpMM:InstanceID="xmp.iid:52D26255CAB511E3B696F0231D9BB8CB" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f6314ed7-87ee-4c03-a7bf-62894da43749" stRef:documentID="xmp.did:1cd07f07-f14f-4d1b-83a0-43c485539d9c"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......,IDATx.ba``..bc .`..`..w@|...........hi.........#>...../_..................T...i.......by\....Uzzz.@.. V.;;;{...j|......`.6=,h|.>PQQ.........L...._.....\....._.]..K.jBBB.DDD>..w.<0..FFFn...e..\`...K........w..../..........o........P!.........-[...o..]...........e..d......0..o..y...&....).7o...[%%%....$A......"..|..=<<.....'O.|.hp....6L..$..A.U__........XB... fE.466...uk.........Ww....;x......."d....#........^`P(.J-@..TUU....p&....u|.C..}BB.41.............EL$3B.*'......LMM=.I..0......g`...

<<< skipped >>>

GET /it/u=1315327375,467324658&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: t11.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Wed, 30 Mar 2016 19:18:26 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 17e662f57a37f62f58f496e0d460031c

Content-Length: 65012

Date: Mon, 29 Feb 2016 09:18:26 GMT

Server: lighttpd

......JFIF.............C....................................................................C............................................................................"...........................................<...............................!.."1#A.$2Q..a.48q.(B.R.....................................;...........................!.."1..#2AQa.B$%3qR.....Sb................?..,.. V(...q..).&vC.i.2.9^.G#..=.tQ...R.ViY.*.IM7../.T.....3.i.? .....Z.-O..Ma. P.....#T.,...P....d...,...#...I..$?........t...et_.....j,i.....#....:z.:.3..H/i....$.B..}...\74.%Tj%y......Rd...s......l.a$.....uo...l..n...D..,.fx.d..,c........m.*..[P...RJ.s..Z.; .....:.J..v...x......Y*./....R-..OSw./b6.wS.......1......L.3...S...Q...I."....@a......\..6Ee..J..s..2......@.t...].......g83...y.6.S...Ak.0.Z..V.9..Y.Qh2.3.d...v..........d..H..h.....4.. ....GO?....W.Y96..t..O..Fw^.t..6.O....ClI....i[.....,.*&.z....:(l".....l._.Jk.r.kW..... .r....P!`..C ...........8.Mz.X.,...^....e.....GP.VB..U.bW..t...i..\.........9..8....PVj-q....P.....K.......................<.o.U..y-.5N.K(...t....<.:J...h...U...u.r.z.....W>..VB.-......k..Z....-..-F......4.,.UZK.....V.......&.iQ5%k..GWI...u.6..^.de..z.X......Qo.[.E..qAb.V.e.....'..g..3.qv..A..n*.[.....p...(O2.........cp...||...7$..,...Y.v.=.^....|.J.H.l!T.^/r.r^[..lGC5....W.......H.\....._l.mb~..............w6;...,.....a...0.X.k...:......d....g%...9F.%{.M}.z..Sp&.o..l.........=......|...p.|IX ........)....y&..kxW.6.B.M..OL.O..m...B,V.S}C..gj.....a.@:..d....A]..Cn...V.i.. .n..j.k9rwYq.R.....3.3........X0

<<< skipped >>>

GET /acom?di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415691&ari=1&dbv=0&drs=3&pcs=300x250&pss=300x250&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html?s&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416 HTTP/1.1

Accept: */*

Referer: hXXp://show.bianya.cc/gg/huyan.html?s

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Length: 902

Content-Type: text/javascript;charset=UTF-8

Date: Mon, 29 Feb 2016 09:18:47 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Mon Feb 29 17:18:47 2016

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

X-Xss-Protection: 0

BAIDU_UNION_define({"tuid" : "u2229533_0","queryid" : "ee6118cd6aef5aef","placement" : {"basic" : {"cname":"54010049_6_cpr","flowType":1,"rspFormat":1,"sellType":2,"sspId":1,"tuId":9223372032562038045,"userId":5893023}.,"container" : {"anchoredType":1,"floated":{},"height":250,"sizeType":1,"slide":{},"width":300}.,"fillstyle" : {"backgroundColor":"#FFFFFF","cloudTheme":{},"elements":[5,2,1],"flush":0,"layout":[1],"lu":{},"search":{},"txt":{"cbackground":"#FFFFFF","cborder":"#FFFFFF","cdesc":"#444444","cflush":"#e10900","ctitle":"#0000ff","curl":"#008000","number":3},"video":{}}.,"userdefine" : "cpro_template=text_default_300_250|cpro_version=2.0|cpro_layout_filter=rank,tabcloud","complement_type" : 2},"extends" : "","pdb_deliv" : {"deliv_id" : "0","deliv_des" : {},"brandad" : 0},"order_deliv" : {"deliv_id" : "0","demand_id" : "0"},"rtb_deliv" : {"deliv_id" : "0","demand_id" : "2229533"}});....

GET /wh/o.htm?ltr= HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://show.bianya.cc/gg/huyan.html?s

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Accept-Ranges: bytes

Connection: keep-alive

Content-Length: 1394

Content-Type: text/html

Date: Mon, 29 Feb 2016 09:18:47 GMT

Etag: "56d3f2c0-572"

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Server: nginx

<!DOCTYPE html>.<html>. <head>. </head>. <body>. <style>. .userData {behavior:url(#default#userdata);}. .client {behavior:url(#default#clientCaps);}. </style>. <div id="oPersistDiv" class="userData"></div>. <div id="clientDiv" class="client"></div>. <div id="oFlashDiv"></div>. <script src="hXXp://dup.baidustatic.com/tpl/wh.js"></script>. <div id="cFlashDiv">. <object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="hXXp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,19,0" width="1" height="1" id="BAIDU_CLB_ac_o_flash" title="BAIDU_CLB_ac_o_flash" align="middle">. <param name="allowScriptAccess" value="samedomain" />. <param name="movie" value="c.swf?v=3">. <param name="quality" value="high">. <param name="wmode" value="transparent" />. <embed wmode="transparent" name="BAIDU_CLB_ac_o_flash_embed" id="BAIDU_CLB_ac_o_flash" src="c.swf?v=3" swliveconnect="true" quality="high" width="1" height="1" align="middle" allowscriptaccess="samedomain" type="application/x-shockwave-flash" pluginspage="hXXp://VVV.macromedia.com/go/getflashplayer">. </object> . </div>. <script src="hXXp://dup.baidustatic.com/tpl/ac.js"></script>. &l

<<< skipped >>>

GET /acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415691&ari=1&dbv=0&drs=3&pcs=300x250&pss=300x250&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html?s&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=ee6118cd6aef5aef&tt=1456737415675.94.1344.1344 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://show.bianya.cc/gg/huyan.html?s

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Length: 3662

Content-Type: text/html

Date: Mon, 29 Feb 2016 09:18:48 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Mon Feb 29 17:18:48 2016

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

X-Xss-Protection: 0

<!DOCTYPE html>.<html>. . <head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <title>..................</title>...<link rel="stylesheet" href="hXXp://cpro.baidustatic.com/cpro/ui/noexpire/css/2.0.1/template.min.css" />...<style type="text/css">.container{padding-left:0px;padding-right:0px;padding-top:0px;padding-bottom:0px;margin-top:0px;border-style:solid;border-top-width:0px;border-right-width:0px;border-bottom-width:0px;border-left-width:0px;border-color:#ffffff;width:300px;height:250px;background-color:#ffffff;position:relative;overflow:hidden;float:none;}.item{width:300px;height:250px;}.item a{width:300px;height:250px;position:absolute;opacity:0;top:0;left:0;display:block;z-index:9;background-color:#ffffff;filter:alpha(opacity=0);;}.item a:hover{}.item div{width:300px;height:250px;}.column-space{width:20px;height:0px;}.row-space{width:100%;height:0px;}</style>. </head>. . <body><div style="display:none;"><img src="hXXp://wn.pos.baidu.com/adx.php?c=d25pZD1jY2Y4YjJiYmYyYzQxYTVhAHM9Y2NmOGIyYmJmMmM0MWE1YQB0PTE0NTY3Mzc1MjgAc2U9MQBidT01AHByaWNlPVZ0UU0tQUFFYkNCN2pFcGdXNUlBOGh0MWtkekdpb2V5enR4UGV3AGNoYXJnZV9wcmljZT0yMjkAc2hhcmluZ19wcmljZT0yMjkwMDAAd2luX2RzcD01AGNobWQ9MQBiZGlkPTc1MjI0MzMxOTRFMTQ4M0JFNDBBQTE5QkMzMUNGQUNGAGNwcm9pZD0AYmNobWQ9MAB2PTEAaT1mNmNlMTgzMQ" height="1px" width="1px" alt="" /></div>. . <div class="container" id="container" ><div class=

<<< skipped >>>

GET /wh/o.swf?v=1 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Accept-Ranges: bytes

Connection: keep-alive

Content-Length: 157

Content-Type: application/x-shockwave-flash

Date: Mon, 29 Feb 2016 09:18:50 GMT

Etag: "56d3f2c0-9d"

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Server: nginx

CWS.....x.3.bX..........{.^....?............b..............7..Ofq.Cq~Q.CVbYbqrQfA.U.TBC.!.89. .AI.!.85'.a./.@6.(.`.......d3......Af.;.;#H....$..&.g......?.' ....

GET /wh/o.swf?v=1 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Accept-Ranges: bytes

Connection: keep-alive

Content-Length: 157

Content-Type: application/x-shockwave-flash

Date: Mon, 29 Feb 2016 09:18:50 GMT

Etag: "56d3f2c0-9d"

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Server: nginx

CWS.....x.3.bX..........{.^....?............b..............7..Ofq.Cq~Q.CVbYbqrQfA.U.TBC.!.89. .AI.!.85'.a./.@6.(.`.......d3......Af.;.;#H....$..&.g......?.' HTTP/1.1 200 OK..Accept-Ranges: bytes..Connection: keep-alive..Content-Length: 157..Content-Type: application/x-shockwave-flash..Date: Mon, 29 Feb 2016 09:18:50 GMT..Etag: "56d3f2c0-9d"..Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT..Server: nginx..CWS.....x.3.bX..........{.^....?............b..............7..Ofq.Cq~Q.CVbYbqrQfA.U.TBC.!.89. .AI.!.85'.a./.@6.(.`.......d3......Af.;.;#H....$..&.g......?.' ..

GET /staticPub/js/room/socket_48ba6f2.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:35 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Fri, 26 Feb 2016 03:53:52 GMT

Vary: Accept-Encoding

Expires: Tue, 29 Mar 2016 09:43:39 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-42

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

2774.............}{w.......0.w... [6&.....l ..k....b...5...#.0.x-h..pM.{.....F....!...l......93.3..6.!....hf........J.#.g.U#qR-...Z)khz)..O.y..2*...ZQs....()E5....LU..T ....K.B;.rE7tc..FO.-Dzd..)......9v.z.xz.K...j..Z.....r.=....Y..8..i...m.s...Z.3..ZWWP.t~;...).ra1.=s.>.J0....S .ct.~..{..F....ZP....qii....y\))...i.....U#....Ss... .j@rT..RRP.?&...]......Tl.......~8;..;...........=.....#.J...d..Z.-..e..is..#L....h....zQ9.T...l.N.....Z.3.|...a..5....Yg...W.l......-...s8..k.Y...lEU..u~*.Q.......p..\.c.&u9;...)x..............C...F...%....2f....^@_6R...=....[.x.}.......5Z...]..sZu..b!...YU;...a$.;JV.l.....JE......jiz...w.].G...J.J.......Qu>[.>..;u<8.>jQ.....0..E...x......W[...^1|..1.......K.vF:.Pd..0.Z.9...B7...vA.f.bs7."..4.-.Uj..r.......6E...9..KF..J...L.z.O5^.E..\h,5..8...%'.r.3...VRs....m....D......G.8 -.'...Z..C......*.^........$.Y.Q...J-X..U].............Lb|<.N.F..pO...dR..x"5...e.!.^....H/...t2./....Tf:6f......Tf,y8..C.t&5i>.....t.|. O%.q.z..'.bG....H_8...O....D....gU4....c*6..B.~9.....1......M..c.s.<=I..K.N.E...x.J.G..^y$..O...c.=.L......%..."...J...X.D.....c.{1.D&>...w/..I.g.c....>9v....?.l?F7:.L[.X...x*.@..(:....;:..G.....t,.OLf.s/.../&..s.<.L.S.....h.O......SSC..#}...'.h%"{.G...7..8..J....c..,M#.......Tl(.K..^yx.h:>.HL...;...-N.L'...z......D.......#..a.../.G..c..CG.R.....H.\.}aL7.I.Nf..c.}<.H...[5...).......wx,..=.z...1><.........W.:.a:|Q..^........I.q....8&.....a.S....Q. ..v.y,..X........M.R.....H'G&...&..NG^.e..J"/.}r|,6.............,.$=:....lA...~V....@....|

<<< skipped >>>

GET /staticPub/js/room/roomActivity_059de9b.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:38 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Fri, 26 Feb 2016 03:53:52 GMT

Vary: Accept-Encoding

Expires: Tue, 29 Mar 2016 09:43:40 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-42

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

26b2.............}{w.G....S..\[...d..2...@|...;.X...n...%.F.~..kA2$..@B.r...$$...$...].X..k........VK6..X..........k.~..S3U...j.).s..]s..$.....O%.Y...j....w.l.g-.......W..eSY...(Y...BW.g.zB..KKsV.`...Y....?s......Uu.z.n.u.,......-.i.~.lV0.:.C.S.I......S,`....R..*f=...8..g.......{.6....R..^....v...@\..........v.W.....e.-.nOO..tI...&.T..;S.n..9s.k...B.....6...ECw.D6...Z..a.b.-I....`..c.1..m..Wv95..0....{.......D.,...2 ...Z....?...J......Rv.....* ..4O^i.w).z...5.R-..n......tM@....R.........Q.jnn.7aW.....^.CF./`.....N.;h9n.-Y..(U.P{..|.|....)............kx.......w.0..'.~.j..{........)e.....?i.:.Q.O.5..a'.B....C...E3i.C.uS..b.1.......Q..i....[.e&C..s..>.l.}..o\.z....o_yx....[...X.u.v.....?6...y....;...G......|......K.4._...r..p......!...C..t..h!..YNi.n.G...:D.L....G\...`?.9....h..:.,S]\..qGn...L~....Y'..X.G~.....o.w0.:,05.}2_.W...g....o....ua....b-..(..MC.[......Z..7.~.v...[WZo.l..b...T......).oab.U)&...[...dz.%.*.\..S7H...:...c.............8q.]b<..x:7e......:....j.......<..J.r..W.lV.nI......5d.R....x.:...3(.M.;<../...8<S.=.....zz.x..%.u....-m}U...$Jv.?....l....:v.lm6........%m..hA...@.....j..x.&m.=.....~..P.......S.J..pMXI...H...OVo.QR8......:...4.bNJY....>.2.%-;;.)B.$..j..N\j^:..wg.....3ko......d..}x.Z..k..p\.G.q...s\......=Cj.Z~v.&Y<Id...e~.|..dY.NC.3;....s>] .F......w.f..../.-.-..;..\.h\.[...k...~..........z..H).$>...........D.V.l*.;;....6`....vN`Cp.<..j....?.M...ek...Z.>.......5G.....-.M.....q*.C5W.Z......V.}.{.......}.. ....u......a.GB...`....4*..r...D..~ .8........|......[..s.

<<< skipped >>>

GET /fp.htm?br=6&fp=DA5E4CCCE874547210C07EDF3C9427B9&fp2=DA5E4CCCE874547210C07EDF3C9427B9&ci=&bi=7522433194E1483BE40AA19BC31CFACF:FG=1&im=0&wf=1&ct=1000&bp=&m=&t=0&ft=&_=1456737420394 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: eclick.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:51 GMT

Content-Type: text/html

Content-Length: 114

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Connection: keep-alive

ETag: "56d3f2c0-72"

Expires: Mon, 29 Feb 2016 09:18:51 GMT

Cache-Control: max-age=0

Accept-Ranges: bytes

<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" /> . </head>. <body>. </body>.</html>.....

GET /fp.htm?ci=7522433194E1483BE40AA19BC31CFACF:FG=1&cn=7522433194E1483BE40AA19BC31CFACF:FG=1&cu=&cl=&cf=&ce=&ff=c&cuid=&cuid2=&de=&bp=&nip=&_=1456737421206 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: eclick.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:52 GMT

Content-Type: text/html

Content-Length: 114

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Connection: keep-alive

ETag: "56d3f2c0-72"

Expires: Mon, 29 Feb 2016 09:18:52 GMT

Cache-Control: max-age=0

Accept-Ranges: bytes

HTTP/1.1 200 OK..Server: nginx..Date: Mon, 29 Feb 2016 09:18:52 GMT..Content-Type: text/html..Content-Length: 114..Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT..Connection: keep-alive..ETag: "56d3f2c0-72"..Expires: Mon, 29 Feb 2016 09:18:52 GMT..Cache-Control: max-age=0..Accept-Ranges: bytes..<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" /> . </head>. <body>. </body>.</html>.<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" /> . </head>. <body>. </body>.</html>...

GET /cpro/ui/c.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: cpro.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:20 GMT

Content-Type: application/x-javascript

Content-Length: 33405

Connection: close

ETag: "56d3f2c0-827d"

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Expires: Mon, 29 Feb 2016 09:23:14 GMT

Age: 3306

Cache-Control: max-age=3600

Content-Encoding: gzip

Ohc-Content-Crc: 1075843295

Server: hkg01-sys-jorcol04.hkg01.baidu.com

.....8.V..c.js..;iw.8..E.K d.S..8.a..q...........G....E.A..X...U8xH.st...B.@.P.......ar....l..f..(.......X<,..<.K.....n.Qa.A.v$.....,...V....}....L..u..1t.....T....q2U..9..Lug....k..>...I..S..{:.....q..)K;@T.$.Na..<...ul...r.y.. ......~....f.Z...&..........b.K>e....6e.!./......I..P...LX.Q..?.y.hJi..!..Y......jN=....1.d....J..|....g\.2............n.U........u...LK..{.`......e......M....zO.Dcp5..Q..QUt.a...%ApT1.......k...n..P..,..u|.C;....G...B.$...X|.}.A..k5.H(q.2y..2q...z8z.......|.r..K..\........-I.F.a..K.8..w6......"....."hli..I7.4.4.'k4.....(1#.S"...%.R...24.X[..l......t.-..j...Q_.pY.b3).E...W........h....U.j..Xj..."...S.p..`.$.j.s.%..]k3.hpK.&}.f....~...9Anj..~.#k..$J..... J..q.t....0. .S..3.F..................5.3U6.J.......\.<)..|...q..A;....y.y..D..E..$t...-.X04.q..(.3....n5..gP!c.:....q ...`.E .......7.:@.....9.....t..R3{r.>....... >.#.5.bg.\.<ba.....7..X.....fiWo.....8Jb....CK..N.V.. .....,I..l..Z....#......B..O#..`.M%......S.p....M ..'.WXZ...@d...y3....=."...B.....7....g6...u.{K..:.Zt\.^-.T.d$c..SO.5..L..E.L..\f2tI.%........4...F|..`6....k..S.$.... ..[u,..G@.!>:....%...8......H.R....\s...!....LK..?}.o.r...........<...j.l.tL1,...eK.R...........c3. =.R...@.k.J.R....v)...4`.Y.$..e...g._..It.@N.B2...A........P....|#........2..<... .x......q......^.t...c.:.Q..!.Q..&IK.b..[|.#.M.......H6M..$.4.J6.a..(3....9]..0p......cGfj..C........p..U...,.# 2...P....H.......N..2%..... @..@t.M..2..1..B*a;..........).%s..BN.r.7.....tF..^EA.]P..<..=..i.......... ..c= .........}>..%.1

<<< skipped >>>

GET /staticPub/js/room/roomInit_f54bbdd.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:38 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Tue, 23 Feb 2016 04:02:25 GMT

Vary: Accept-Encoding

Expires: Thu, 24 Mar 2016 04:07:14 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

1dde.............\{s.Yu.*..k4.Z=.=l.4v.....l..wI6....;3-.t..=z ..B...e........!.B...]....... .w..=.=/.^CQ)......}.=..9..].....8..=..v.....L<..A..^.i.........hyC|:W.....s......u./s%g...../.s...D...........N..\.r.k/.....tl....y.....4..V.b..R..9.6#s&:..-.#..a.."....a...Z.-r4/..~..x.....@\.@'".EN'...i.....T^.zc.....Z....E{Q.ds'.m..3h8.....czq.~q..........\@/.....yk.[...5......i^.T:.i...^..;....D..^*...X.....7...w#...E.....).....g...z./..._.#....3.N30.....6]MOPO....[T.............wQ.uC.l....96-y`.a............oF.m.?._..`.}0.....x..7..j....4t..6.U......D\u.i.r.j.:9....l.O.N-..V....j.X.C5..3xM......b.Z>....u..M:....5...Zd..|.....f.v...Nt.......&.E......A...wE>...g...K5.A.-l.k...kAd......^.X.....G".h.....3n.K.A.w...Y...sW.h7Mk........hw..\>.j........'...0..{ .......VV}..!N`...uAF.b_`.z....&...'...s.N7"..%..l.`.}.....Q... ...#*...8...N.[h..>)..v...4...%..:........d1.m'.#A=,..7......ju..........X.6\.9.C...y"....Y..[..O........_.hP.....;.W\. ..........z.lfZ.hT.ZQ...... )........_.D.......e.....U...7.n....3.........N...R..7..vF.iLeL7.N..Qf.F...2..L......u..8..f.3....*.".\~.T2J...wp/r.........3x...>..O.~....~......_...'..}.KO........}...?._.....'..;m..o....j;0Tb;,......y..$5B$.....a-.%....O.g.....:.....%.....R.......e.*.&....,..FW..KJA]....cP..U4........WI.`.^.Pb~.n..Pf_P........`.....n@.....k%..Gj.L..z|.n9.h.3......Y...J..z....s%.r:{;......wLwo..E.....I6..(.......*...v0.lv|E\i..4..w.6......Oh.jNe..Ygx.e..rh.b..s/A...8.Ki.?=./.".. 5$.R.T]'...^*....._......A...x....d....-.......mN..KE<(..F..]i..9x zW(V..

<<< skipped >>>

GET /fp.htm?br=6&fp=DA5E4CCCE874547210C07EDF3C9427B9&fp2=DA5E4CCCE874547210C07EDF3C9427B9&ci=&bi=7522433194E1483BE40AA19BC31CFACF:FG=1&im=0&wf=1&ct=1797&bp=&m=&t=0&ft=&_=1456737421128 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: eclick.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:52 GMT

Content-Type: text/html

Content-Length: 114

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Connection: keep-alive

ETag: "56d3f2c0-72"

Expires: Mon, 29 Feb 2016 09:18:52 GMT

Cache-Control: max-age=0

Accept-Ranges: bytes

<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" /> . </head>. <body>. </body>.</html>.....

GET /fp.htm?ci=7522433194E1483BE40AA19BC31CFACF:FG=1&cn=7522433194E1483BE40AA19BC31CFACF:FG=1&cu=7522433194E1483BE40AA19BC31CFACF:FG=1&cl=&cf=&ce=&ff=c&cuid=&cuid2=&de=&bp=&nip=&_=1456737421894 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: eclick.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:52 GMT

Content-Type: text/html

Content-Length: 114

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Connection: keep-alive

ETag: "56d3f2c0-72"

Expires: Mon, 29 Feb 2016 09:18:52 GMT

Cache-Control: max-age=0

Accept-Ranges: bytes

<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" /> . </head>. <body>. </body>.</html>.HTTP/1.1 200 OK..Server: nginx..Date: Mon, 29 Feb 2016 09:18:52 GMT..Content-Type: text/html..Content-Length: 114..Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT..Connection: keep-alive..ETag: "56d3f2c0-72"..Expires: Mon, 29 Feb 2016 09:18:52 GMT..Cache-Control: max-age=0..Accept-Ranges: bytes..<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" /> . </head>. <body>. </body>.</html>...

GET /acom?di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415659&ari=1&dbv=0&drs=3&pcs=296x249&pss=300x253&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416 HTTP/1.1

Accept: */*

Referer: hXXp://show.bianya.cc/gg/huyan.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Length: 902

Content-Type: text/javascript;charset=UTF-8

Date: Mon, 29 Feb 2016 09:18:47 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Mon Feb 29 17:18:47 2016

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

X-Xss-Protection: 0

BAIDU_UNION_define({"tuid" : "u2229533_0","queryid" : "2f8bbc640f2a4043","placement" : {"basic" : {"cname":"54010049_6_cpr","flowType":1,"rspFormat":1,"sellType":2,"sspId":1,"tuId":9223372032562038045,"userId":5893023}.,"container" : {"anchoredType":1,"floated":{},"height":250,"sizeType":1,"slide":{},"width":300}.,"fillstyle" : {"backgroundColor":"#FFFFFF","cloudTheme":{},"elements":[5,2,1],"flush":0,"layout":[1],"lu":{},"search":{},"txt":{"cbackground":"#FFFFFF","cborder":"#FFFFFF","cdesc":"#444444","cflush":"#e10900","ctitle":"#0000ff","curl":"#008000","number":3},"video":{}}.,"userdefine" : "cpro_template=text_default_300_250|cpro_version=2.0|cpro_layout_filter=rank,tabcloud","complement_type" : 2},"extends" : "","pdb_deliv" : {"deliv_id" : "0","deliv_des" : {},"brandad" : 0},"order_deliv" : {"deliv_id" : "0","demand_id" : "0"},"rtb_deliv" : {"deliv_id" : "0","demand_id" : "2229533"}});....

GET /wh/o.htm?ltr= HTTP/1.1

Accept: */*

Referer: hXXp://show.bianya.cc/gg/huyan.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Accept-Ranges: bytes

Connection: keep-alive

Content-Length: 1394

Content-Type: text/html

Date: Mon, 29 Feb 2016 09:18:47 GMT

Etag: "56d3f2c0-572"

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Server: nginx

<!DOCTYPE html>.<html>. <head>. </head>. <body>. <style>. .userData {behavior:url(#default#userdata);}. .client {behavior:url(#default#clientCaps);}. </style>. <div id="oPersistDiv" class="userData"></div>. <div id="clientDiv" class="client"></div>. <div id="oFlashDiv"></div>. <script src="hXXp://dup.baidustatic.com/tpl/wh.js"></script>. <div id="cFlashDiv">. <object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="hXXp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,19,0" width="1" height="1" id="BAIDU_CLB_ac_o_flash" title="BAIDU_CLB_ac_o_flash" align="middle">. <param name="allowScriptAccess" value="samedomain" />. <param name="movie" value="c.swf?v=3">. <param name="quality" value="high">. <param name="wmode" value="transparent" />. <embed wmode="transparent" name="BAIDU_CLB_ac_o_flash_embed" id="BAIDU_CLB_ac_o_flash" src="c.swf?v=3" swliveconnect="true" quality="high" width="1" height="1" align="middle" allowscriptaccess="samedomain" type="application/x-shockwave-flash" pluginspage="hXXp://VVV.macromedia.com/go/getflashplayer">. </object> . </div>. <script src="hXXp://dup.baidustatic.com/tpl/ac.js"></script>. &l

<<< skipped >>>

GET /acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415659&ari=1&dbv=0&drs=3&pcs=296x249&pss=300x253&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=2f8bbc640f2a4043&tt=1456737415628.141.1360.1360 HTTP/1.1

Accept: */*

Referer: hXXp://show.bianya.cc/gg/huyan.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Length: 3659

Content-Type: text/html

Date: Mon, 29 Feb 2016 09:18:48 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Mon Feb 29 17:18:48 2016

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

X-Xss-Protection: 0

<!DOCTYPE html>.<html>. . <head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <title>..................</title>...<link rel="stylesheet" href="hXXp://cpro.baidustatic.com/cpro/ui/noexpire/css/2.0.1/template.min.css" />...<style type="text/css">.container{padding-left:0px;padding-right:0px;padding-top:0px;padding-bottom:0px;margin-top:0px;border-style:solid;border-top-width:0px;border-right-width:0px;border-bottom-width:0px;border-left-width:0px;border-color:#ffffff;width:300px;height:250px;background-color:#ffffff;position:relative;overflow:hidden;float:none;}.item{width:300px;height:250px;}.item a{width:300px;height:250px;position:absolute;opacity:0;top:0;left:0;display:block;z-index:9;background-color:#ffffff;filter:alpha(opacity=0);;}.item a:hover{}.item div{width:300px;height:250px;}.column-space{width:20px;height:0px;}.row-space{width:100%;height:0px;}</style>. </head>. . <body><div style="display:none;"><img src="hXXp://wn.pos.baidu.com/adx.php?c=d25pZD1lNzg3ZTEyNWUwMWE4YzZiAHM9ZTc4N2UxMjVlMDFhOGM2YgB0PTE0NTY3Mzc1MjgAc2U9MQBidT01AHByaWNlPVZ0UU0tQUFFVHI1N2pFcGdXNUlBOHA4OVNDM2JCVHc1c2l3TkxBAGNoYXJnZV9wcmljZT0xNDIAc2hhcmluZ19wcmljZT0xNDIwMDAAd2luX2RzcD01AGNobWQ9MQBiZGlkPTc1MjI0MzMxOTRFMTQ4M0JFNDBBQTE5QkMzMUNGQUNGAGNwcm9pZD0AYmNobWQ9MAB2PTEAaT1jOTJjMDliOQ" height="1px" width="1px" alt="" /></div>. . <div class="container" id="container" ><div class=

<<< skipped >>>

GET /wh/c.swf?v=3 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Accept-Ranges: bytes

Connection: keep-alive

Content-Length: 547

Content-Type: application/x-shockwave-flash

Date: Mon, 29 Feb 2016 09:18:50 GMT

Etag: "56d3f2c0-223"

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Server: nginx

CWS.....x..Q.r.A.};.a'$...D..8y.KrM..*....)..aw...k..*7oz..[..*....g..~...=..RQ.0........Y|....M.w.&..#......}t.D5..D. b.4;...p%.y....P.].4_..........0....D.4.....%gIK.@.... %..1......K.K.o.?...B..!..Q.e2.U........q= .)b.......6$...T.&D...[G.}$.b...|.J..mg...J.....P.D.....y;.S....l..%.....{......^.....-O'X....H.co}d( u.X.n..9v..C...=L..F.NK.s.<Q..b...f..WZ..LK..XU">0.\...........I...sy....xDY..:...j....7.....M...Fu:.MF...Yr.W....?.X.....g..kFs.lk.....<.s...N.....&.r..~o....ZSk[z.....b...6..xi...].f...w~w.../.........s.^.....P.8b:.;..1.?....2nt>....

GET /wh/c.swf?v=3 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Accept-Ranges: bytes

Connection: keep-alive

Content-Length: 547

Content-Type: application/x-shockwave-flash

Date: Mon, 29 Feb 2016 09:18:50 GMT

Etag: "56d3f2c0-223"

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Server: nginx

CWS.....x..Q.r.A.};.a'$...D..8y.KrM..*....)..aw...k..*7oz..[..*....g..~...=..RQ.0........Y|....M.w.&..#......}t.D5..D. b.4;...p%.y....P.].4_..........0....D.4.....%gIK.@.... %..1......K.K.o.?...B..!..Q.e2.U........q= .)b.......6$...T.&D...[G.}$.b...|.J..mg...J.....P.D.....y;.S....l..%.....{......^.....-O'X....H.co}d( u.X.n..9v..C...=L..F.NK.s.<Q..b...f..WZ..LK..XU">0.\...........I...sy....xDY..:...j....7.....M...Fu:.MF...Yr.W....?.X.....g..kFs.lk.....<.s...N.....&.r..~o....ZSk[z.....b...6..xi...].f...w~w.../.........s.^.....P.8b:.;..1.?....2HTTP/1.1 200 OK..Accept-Ranges: bytes..Connection: keep-alive..Content-Length: 547..Content-Type: application/x-shockwave-flash..Date: Mon, 29 Feb 2016 09:18:50 GMT..Etag: "56d3f2c0-223"..Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT..Server: nginx..CWS.....x..Q.r.A.};.a'$...D..8y.KrM..*....)..aw...k..*7oz..[..*....g..~...=..RQ.0........Y|....M.w.&..#......}t.D5..D. b.4;...p%.y....P.].4_..........0....D.4.....%gIK.@.... %..1......K.K.o.?...B..!..Q.e2.U........q= .)b.......6$...T.&D...[G.}$.b...|.J..mg...J.....P.D.....y;.S....l..%.....{......^.....-O'X....H.co}d( u.X.n..9v..C...=L..F.NK.s.<Q..b...f..WZ..LK..XU">0.\...........I...sy....xDY..:...j....7.....M...Fu:.MF...Yr.W....?.X.....g..kFs.lk.....<.s...N.....&.r..~o....ZSk[z.....b...6..xi...].f...w~w.../.........s.^.....P.8b:.;..1.?....2..

<<< skipped >>>

GET /fxroombg/20140827184515870962.jpg HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s3.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:32 GMT

Content-Type: image/jpeg

Content-Length: 91017

Connection: keep-alive

Keep-Alive: timeout=20

Last-Modified: Wed, 27 Aug 2014 10:45:15 GMT

Expires: Mon, 14 Mar 2016 15:47:07 GMT

Cache-Control: max-age=2592000

Kugou-Memory: HIT

Accept-Ranges: bytes

......Exif..II*.................Ducky.......P.....zhXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ab6d73e4-de12-9f41-bd72-a2d6b7981fed" xmpMM:DocumentID="xmp.did:F5F4F97C28D911E4A836C4B1911007EF" xmpMM:InstanceID="xmp.iid:F5F4F97B28D911E4A836C4B1911007EF" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:662355ae-debd-d043-b5f0-1de44e13a7b2" stRef:documentID="xmp.did:ab6d73e4-de12-9f41-bd72-a2d6b7981fed"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................................y......................................................................!1Q.Aa.q......."2.BbR.........................1!A............?..d..[....*.....>......b...............g.99Ax.|...EI..W..ZT.......}e............_XMX.8J..}2....\..Q...dT.. .C..US. .ub.W.......#4W....:.....Ab._.*.Vh..TJ...JE..eqR%./..rz..\...i...m1.^.......cK....r.\i:.....!...Z......L\.F.k..Z..t.&...

<<< skipped >>>

GET /fxstatic/images/roombg_3eb04e4.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:37 GMT

Content-Type: image/png

Content-Length: 131107

Keep-Alive: timeout=20

Last-Modified: Sat, 30 Jan 2016 15:11:52 GMT

Expires: Mon, 14 Mar 2016 14:48:36 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

.PNG........IHDR...............].....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D369F27923B611E58F24DD0B365CBD36" xmpMM:InstanceID="xmp.iid:D369F27823B611E58F24DD0B365CBD36" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8EEB4751FAEB11E49A6EAD8D1BD27543" stRef:documentID="xmp.did:8EEB4752FAEB11E49A6EAD8D1BD27543"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.`......IDATx..].`T....&.d%....@..$..".....".jEq...Skk]Zm.Z.[..W-*j...D..76E lBX$.@......y..'....;..IB.p>..d.v......O@..RPPPPPPh..T]........^AAAAAA.<.Eu.Bsb..u.1"..X...e...Q..?....C(:$...... .(..(?..}..a>.;...W}.....M[n...j.jO.kOT@..K.....J;O.HA.V....j...>.z...oU..M....].....Q....TX......?..........4...s2.(.^.Y.3...<.>....\... .P..^.5..%..u"y.....j3.....C.....|..k....0XT...es......R..B..g.....b.Z..m.o...........q.......F.../.eb.|>.=.......y{|.F....D!..oc..<[...^.PK....).f.te.\.t.r..].?...}.ii.....g......V.kZM.b..`Q\U..D...**W.Q.i...A...`.E. .`.M._.....Z9.(......t..Iq..;

<<< skipped >>>

GET /gg/huyan.html HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: show.bianya.cc

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:46 GMT

Content-Type: text/html

Content-Length: 909

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

Cache-Control: max-age=1800

ETag: "568cc0d7-38d"

Last-Modified: Wed, 06 Jan 2016 07:23:03 GMT

Expires: Mon, 29 Feb 2016 08:42:53 GMT

Accept-Ranges: bytes

Age: 377

X-Cache: HIT(R) from bgp-ha-lya-133; MISS(S)|HIT(R) from gtt-de-fra-099

X-Request-Id: de5eef00237e81f26bff9df85fc8778a; 3cac6d802750431fa0562b831cbfa84d

Via: T.51102.S.2, T.12814.R.1, V.ntt-cn-hkg-012, T.51102.R.1, M.gtt-de-fra-099

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="hXXp://VVV.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<title></title></head>.<body scroll="no" style="overflow: hidden;padding:0px;margin:0px;">..<script type="text/javascript">. /*......-......300x250_6.........*/. var cpro_id = "u2229533";.</script>.<script src="hXXp://cpro.baidustatic.com/cpro/ui/c.js" type="text/javascript"></script>.<div style="display:none;"><script type="text/javascript">var cnzz_protocol = (("https:" == document.location.protocol) ? " hXXps://" : " hXXp://");document.write(unescape("3E"));</script>.</div>.</body></html>...

<<< skipped >>>

GET /api/tongji4?param=v1 HTTP/1.1

Host: tc.hiv-hiv.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/8.5

X-AspNetMvc-Version: 5.1

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Mon, 29 Feb 2016 09:18:13 GMT

Content-Length: 128

803205E80E6D2BD3E6D55CBDD54DA21E748B5A5135ED5C5C3619F5EB07AF6349094A7BB4C9A39C6E1746A89D2D8722EF916B43FBAE0308BF7DF03F4B208031CCHTTP/1.1 200 OK..Cache-Control: private..Content-Type: text/html; charset=utf-8..Server: Microsoft-IIS/8.5..X-AspNetMvc-Version: 5.1..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Mon, 29 Feb 2016 09:18:13 GMT..Content-Length: 128..803205E80E6D2BD3E6D55CBDD54DA21E748B5A5135ED5C5C3619F5EB07AF6349094A7BB4C9A39C6E1746A89D2D8722EF916B43FBAE0308BF7DF03F4B208031CC..

GET /adx.php?c=d25pZD00ZmM0YzU2NzA0NmIwODdjAHM9NGZjNGM1NjcwNDZiMDg3YwB0PTE0NTY3Mzc1MDMAc2U9MQBidT01AHByaWNlPVZ0UU0zd0FPUDlON2pFcGdXNUlBOHVETGcyMlhzaG01MmpFWmJRAGNoYXJnZV9wcmljZT0xAHNoYXJpbmdfcHJpY2U9MTAwMAB3aW5fZHNwPTUAY2htZD0xAGJkaWQ9NzUyMjQzMzE5NEUxNDgzQkU0MEFBMTlCQzMxQ0ZBQ0YAY3Byb2lkPQBiY2htZD0wAHY9MQBpPTJmMGNiODFj HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2480739&dc=2&di=u2480739&dri=0&dis=0&dai=1&ps=74x308&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391&qn=bc8e12d50064a9a9&tt=1456737391050.438.1891.1891

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: wn.pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:25 GMT

Content-Type: image/gif

Content-Length: 49

Connection: keep-alive

Expires: Mon, 26 Jul 1997 05:00:00 GMT

GIF89a...................!.......,...........T..;HTTP/1.1 200 OK..Server: nginx..Date: Mon, 29 Feb 2016 09:18:25 GMT..Content-Type: image/gif..Content-Length: 49..Connection: keep-alive..Expires: Mon, 26 Jul 1997 05:00:00 GMT..GIF89a...................!.......,...........T..;..

GET /adx.php?c=d25pZD05ZWY5YzM2OGY2ODVmYjM2AHM9OWVmOWMzNjhmNjg1ZmIzNgB0PTE0NTY3Mzc1MDQAc2U9MQBidT00AHByaWNlPVZ0UU00QUFBMFNwN2pFcGdXNUlBOHFzVHlnTWZuTTdtb0JoMWRBAGNoYXJnZV9wcmljZT0xAHNoYXJpbmdfcHJpY2U9MTAwMAB3aW5fZHNwPTQAY2htZD0xAGJkaWQ9NzUyMjQzMzE5NEUxNDgzQkU0MEFBMTlCQzMxQ0ZBQ0YAY3Byb2lkPQBiY2htZD0wAHY9MQBpPTAyNWFlZjY1 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: wn.pos.baidu.com

Connection: Ke

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:25 GMT

Content-Type: image/gif

Content-Length: 49

Connection: keep-alive

Expires: Mon, 26 Jul 1997 05:00:00 GMT

GIF89a...................!.......,...........T..;HTTP/1.1 200 OK..Server: nginx..Date: Mon, 29 Feb 2016 09:18:25 GMT..Content-Type: image/gif..Content-Length: 49..Connection: keep-alive..Expires: Mon, 26 Jul 1997 05:00:00 GMT..GIF89a...................!.......,...........T..;..

GET /tpl/wh.js HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: dup.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:49 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: close

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Expires: Mon, 29 Feb 2016 10:07:51 GMT

Age: 658

Cache-Control: max-age=3600

Ohc-Content-Crc: 204290763

Server: hkg01-sys-jorcol07.hkg01.baidu.com

Content-Encoding: gzip

400a..............k{.8....."..N.... ..q.....]..Kw.....%.V.....8.{~.y..R.,_.]s..3=.P."............h9..w...G..?.^.O...r2Zv?..O.'...'../.^67..F....t.?.<..v....r~.....t.....b..b2;z2.......hz>...........{...[/<..E.r5......b.d8..O>>.ir\^]tF.ns.?e.f........p4..94...8.............M.&.......v..........ao...F...|.._....`..r>=?~.?:x9.;..;.......O'.......n....|.az<...3..b..?>8.A9|...?9...N......`............?.,F............M.c;.~......qo..l.c.s.././...g..N..:.....`p4.<......w......fd.K..........^0..G.._X^.v..1N....q:.8....r.Xv......x}..B......[.y...^~D.g..):.a.....cb{.[.......0.;1.#.......#.C ....m4.XMnF.....a.YI....D..ON!LO.j.F............VK.;........./\.....hvv1.O.....N\O..b.7......0...........j.1.t........O..g.Q....t.5.......8..;.|{..I.'M...?|..py.}..z)..........@$...=....(..f...Q..E..z...b6?.n..G.-......[.M......4...nAR:........!.......;l....v..sM..v...iY. a.o%.#.<"a..4...~..Q..}^... :...L.....n.l.~..WN|...yz<9_...9.....V.p...0....g.^|..........7.._w_L..n.....X..0:u.8.....A....~^!.q....U.b>;.....w...S...w...._~D/..........O....|...-...p..........d.8....._.<_...?.~rz.....&...9.p...._L. ...p...$..d......;.W...W....]......R.]....v..o......d...W....g....NR;......._....J.Y.7;..v.j6.B|.....f2.}6xZO..f...gc..Ac. ...L...[....R.......-....tS.U.....A......6w^.?P /I.H.{....-m6..2`}.a.....G..t......9......l2x..}.....Z...l8..;......P.I....=.F....{.};.8.......0X;.X..8.....!..:.k...........m.><.rxJ.....d`..>.Eb.z...X.S.?Y..b..w...O.._..o.......x....~...n.J.^t<?..~?.0.;%j .1.....yk...

<<< skipped >>>

GET /cpro/ui/noexpire/js/2.0.1/oojs.js HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415659&ari=1&dbv=0&drs=3&pcs=296x249&pss=300x253&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=2f8bbc640f2a4043&tt=1456737415628.141.1360.1360

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cpro.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:50 GMT

Content-Type: application/x-javascript

Content-Length: 2176

Connection: close

ETag: "5667c7a9-880"

Last-Modified: Wed, 09 Dec 2015 06:18:17 GMT

Expires: Mon, 08 Dec 2025 04:16:59 GMT

Age: 6930111

Cache-Control: max-age=315360000

Content-Encoding: gzip

Ohc-Content-Crc: 1071315068

Server: hkg01-sys-jorcol09.hkg01.baidu.com

...........Xmo.6.. ..0..!;_.c...^q.a.@..k..D..*.....b.....L.v.@.S#j8/..q..T..V9y...F.w...}..7.Q\..W@.....'..]...T.F;..Z...o...;HK..........D...y...w.B9K.b....s9).p.Q73...Y...o..E.U.]...{.u..;.D.-.2...W.j.JP.b..'..@..d:...`....V.,.....rw`....~..@8.....;Y..Z}....E......X..H...hj&&. ..c\.S.H!.h.......F....N..g-...r*. ...y...c-.z.fE....T...V..X...A.Z ^.....(.b........t...Z..W..2.. %...T&@...........r......j/i...p........\....Y/$`b...W...O..&Mp....?&.*J....v.....].t...o..~...6.B8@....1.J.....F.6j......K#5...I.Bi...^..1R.....V.q5.:..c,..r...)x].z.}.'..J..W.9Dc.y......I......9....t.<...V...R...QMP.P......m..KQ.....~5......,..~.&*.:.$..s._..G....J..,$...J.................cb.......O.,Y..!&G...^)C.L. l.H.M...c.... (8.~.....R.l...w......u......%..M....i4..;..8./.b;x..../..(.r.....F..$F......KWT...w...%...j......bw.zG:.l...xI.v..w.......}.u...b..f...h@..[...#...d....yy.U,.....m.-l....!..$?......!.).br8y..NR.Fm....6....*:...... .....p..n..M.......=p..A>...J....B\..@..!p..w.,.j....O.5.T....0....{./..I..Mj.........d.,..N.....wX...7.1})b../.U(7....O...s...r...]..d6i.B_&...X.............|.&.?x..$s...J#{.KF1.0R...7=}...S[.h....=.`.G.....'^..]..>.7[R..=@.PU`[.Y...Qa..~.C1..2.fz.U.0......!..9E..G.|..Sxr8.0...8"...4.B...............i....N.G.4.|...N.$..1.vN..KE......k.,..A..|b..f....{......).I.B.A..3./V...mi...,....`.?........C.......-.b.uP..5Q...Dn).F.......C.byb/.bX.A8.OJ...k...H.......s.6Q.^.5..{H.^9......../...n..@..w4.b .eW.$... .. .T.T.2.........v...`....Na I@.<...,........Fh@..D......X.....0..gbs7..hj..I...5.....V

<<< skipped >>>

GET /1028630 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: fanxing.kugou.com

Connection: Keep-Alive

Cookie: __fx_union_access__=1-1-1; __fx_union_page__=3-3:5-2-2; __fx_unionId__=111-17614

HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=120

Content-Type: text/html; charset=utf-8

Date: Mon, 29 Feb 2016 09:18:25 GMT

Expires: Mon, 29 Feb 2016 09:19:25 GMT

Last-Modified: Mon, 29 Feb 2016 09:16:50 0000

Server: ECS (ams/D1F9)

X-Cache: HIT

Content-Length: 273960

<!DOCTYPE HTML>..<!--kugoubegin-->..<html>...<head>....<script type="text/javascript">var timeStartLoad = new Date().getTime();</script>....<meta http-equiv='Content-Type' content='text/html;charset=utf-8'></meta>....<meta http-equiv="X-UA-Compatible" content="IE=edge" />....<meta name="renderer" content="webkit|ie-comp|ie-stand">.. <title>......---...... | ......... | ......... | ....................................</title>....<meta name='keywords' content='......---......_........._..............._......_............_............_............' />....<meta name='description' itemprop="description" content='......---.........................................................................................................K..............................................................................' />....<meta itemprop="name" content='......---...... | ...............' />....<meta itemprop="image" content='hXXp://p3.fx.kgimg.com/v2/fxuserlogo/T1vgAyBXJb1RCvBVdK.jpg_85x85.jpg' />......<script type="text/javascript" src="hXXp://login-user.kugou.com/v1/kguser.js"></script>....<script type="text/javascript" src="hXXp://serveraddr.serviceweb.kugou.com/KgAck.js"></script>....<script type="text/javascript">....var userRegName = "";....var userNickName = "";.. var staticVersion = "5.47.0";....var vServiceUrl = "http://visitor.fanxing.kugou.com/VServices.php";....var vCDNServiceUrl=

<<< skipped >>>

GET /fxstatic/images/userfile/successIcon_754795c.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:32 GMT

Content-Type: image/png

Content-Length: 1295

Keep-Alive: timeout=20

Last-Modified: Sat, 30 Jan 2016 15:11:52 GMT

Expires: Mon, 14 Mar 2016 13:16:22 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

.PNG........IHDR...1...1.....DB......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...ePLTE...o.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.O..........utRNS..;y....z?..D..].^=.>........ ...@...I1..ON-#.....!...qp_Cwv.d..e..E.H.....:...B.L...U.............FMut.on$.2G......{..?.....bKGD....H....pHYs..........o.d....IDATH....C.0...R`.mN..1...7..)....1..._..S|. .j..sI..m..}.r....]r...h.....agxhP.....1...#J2.7B...)'(.....4..etL.o.O.......'3i.01e....>;....f>7..3.~`n..,,z.j,....9/p.@..%....t.pE4^.F..u......q.oZ^A..-e.o....r......d.B..u.*U.@......L.....::.,..h...D..nk4....A........h=....l....6UnZ.....Mt..h.y(........s.l.6..0.)p...6../..8...Ge.p..w.....M</..bb\.G....S/.....g.w.[....B...._BZ.!......;..h...7N....E...om.....I.:..G.._..*.>..../.,V.7....;,.......r... .....}......t...e......A.....4...~...."...s.jI....... ...z.k..P. ..qW..............wZ....v....|..#.?.E....dA..$=J...'....Oy..{...kO...Lw...>#...........S..~....Ul.......1..........Pi..U......j....3.N.. 0/....IEND.B`...

<<< skipped >>>

GET /tpl/wh.js HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: dup.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:49 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: close

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Expires: Mon, 29 Feb 2016 10:08:53 GMT

Age: 596

Cache-Control: max-age=3600

Ohc-Content-Crc: 204290763

Server: hkg01-sys-jorcol08.hkg01.baidu.com

Content-Encoding: gzip

400a..............k{.8....."..N.... ..q.....]..Kw.....%.V.....8.{~.y..R.,_.]s..3=.P."............h9..w...G..?.^.O...r2Zv?..O.'...'../.^67..F....t.?.<..v....r~.....t.....b..b2;z2.......hz>...........{...[/<..E.r5......b.d8..O>>.ir\^]tF.ns.?e.f........p4..94...8.............M.&.......v..........ao...F...|.._....`..r>=?~.?:x9.;..;.......O'.......n....|.az<...3..b..?>8.A9|...?9...N......`............?.,F............M.c;.~......qo..l.c.s.././...g..N..:.....`p4.<......w......fd.K..........^0..G.._X^.v..1N....q:.8....r.Xv......x}..B......[.y...^~D.g..):.a.....cb{.[.......0.;1.#.......#.C ....m4.XMnF.....a.YI....D..ON!LO.j.F............VK.;........./\.....hvv1.O.....N\O..b.7......0...........j.1.t........O..g.Q....t.5.......8..;.|{..I.'M...?|..py.}..z)..........@$...=....(..f...Q..E..z...b6?.n..G.-......[.M......4...nAR:........!.......;l....v..sM..v...iY. a.o%.#.<"a..4...~..Q..}^... :...L.....n.l.~..WN|...yz<9_...9.....V.p...0....g.^|..........7.._w_L..n.....X..0:u.8.....A....~^!.q....U.b>;.....w...S...w...._~D/..........O....|...-...p..........d.8....._.<_...?.~rz.....&...9.p...._L. ...p...$..d......;.W...W....]......R.]....v..o......d...W....g....NR;......._....J.Y.7;..v.j6.B|.....f2.}6xZO..f...gc..Ac. ...L...[....R.......-....tS.U.....A......6w^.?P /I.H.{....-m6..2`}.a.....G..t......9......l2x..}.....Z...l8..;......P.I....=.F....{.};.8.......0X;.X..8.....!..:.k...........m.><.rxJ.....d`..>.Eb.z...X.S.?Y..b..w...O.._..o.......x....~...n.J.^t<?..~?.0.;%j .1.....yk...

<<< skipped >>>

GET /v2/fxuserlogo/T1vgAyBXJb1RCvBVdK.jpg_85x85.jpg HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: p3.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:32 GMT

Content-Type: image/jpeg

Content-Length: 4819

Keep-Alive: timeout=20

Last-Modified: Thu, 25 Feb 2016 12:50:42 GMT

Expires: Wed, 30 Mar 2016 09:15:24 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Connection: close

......JFIF.............C....................................................................C.......................................................................U.U.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..w.......... ...>......]>.^u......9...d...3|U.........v...u."V.U..!....}x......(h.k.....sq.(...L...N........^(..w?(,y.'?.{..RT..U...pY.7..M......oW.../......:..?..|B......e.9...>....-........5K....$..)..l........Z..F.a.|Pn..../1..^C7....1.g.|?..... d...O.@...MZi E.A.p_...............b.j.SI.._.^"..H..Y.b1...s...I...*G.m.{.4.?.^$..i...V.x8 b.. ~u.|...o<m.Yi..... .....y...............V........h.$r.......)bi.m...e9.K.o.N2.W..m.........1..Z..v.7.....#...e.3...\..B"...^....T.J....7U.`........x}E.D.........W.|G.&{..c.L....N.g.......19.N<..g..oV.&..A(.....I....So. W.-.S..%...xG....xsO[V.. KGHwD..Z"...Oz.g....z|r....^A._.Z..4.-^O&{{dP.......~Z|}.E......?.....=..-..|.......R......OZ.e....>.K..?W....E.vj...9.....}5.T....V....d...?..J..Yot..V.....y.M{P.Y..p...r..h.|?dm.|...~tW.b.]G.....Y`............-..........;..dv..1.... .........1............Z8......L[I.q..#.x...~....<=.../2d..pI....p...?

<<< skipped >>>

GET /fxstatic/images/sprite/css/room/room2014_z_4dae78b.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:35 GMT

Content-Type: image/png

Content-Length: 137807

Keep-Alive: timeout=20

Last-Modified: Thu, 14 Jan 2016 08:56:40 GMT

Expires: Sat, 13 Feb 2016 13:16:21 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-42

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

.PNG........IHDR.............C..... .IDATx...y..u...OUu.t..L&.N6..@ ..@....z....8xq_.z..^..#.....(G.(." . ..D. @2!.>..,=.kU.?~=K.Y3.353...U...~....Lg.....Y'.9...........i....w...Z?.i...........1.1A.)h1A.)h1.i..... .....4|s.ZL.s..........';.'......9...;@.....#""""CA.0......./a.`...Z`..e$""""CB.0...........w..l..lDDDDdH..&"""#.w._cF|..^.~p...........DDDD.$.........W./.........DDDd$....,.!.....IGDDD..*....U..-4.RDDD........u;p..d#""".g.j.9|.P.!.H.N............3...B&bUT.|.YY..... .... .....4|s.ZL.s.Z.r..N.....)...t.....RL.s.k.........G............l......]L.s.ZL.s.Z.r..9.-&.9.-F9.1.H.gjk.........G.8..Ih.;..dW..{q1dB..$......o,...c.7&......B.0....nN.~.L.!.qL..vP2.........O....8..........3/Wu[....MbU4Ck....g.M.Sk.B..<B..'.v..V......m............R.0....N..<I...o.g.......~m....p...p.U.....<5..._.e.....B.?..{.y..)....F.~I..=.cW7`W7..a.E6.4.LDDD..)./..=.........DDDd...H?8..{j...o.).j..........8.6c.eqJ.x.6..VA&D..EX.q..$.....r(k.Lx..........4.LDDD..r`5=..^..A./....L-1......B....8%...$~....\|)~C).^m%.g.C..l.?...&....Y....&"""AU...\.K..0 =.....H_...?r....x..=...0..-b..>....1&azW.miabs3Gn....<0...O..M.or..l#..M.=...1d.?..........`.,...X%I,......6s ..:.....l.8....=........1..O....d~2E...................).=..........DD....].(........x-.'....j.3.adGE..^}5.M..@S4...1c.e2|]...b.f.H?...pS...\B..]X.Y..A.H2!X?...:..[...&YSE...q....c9>..7.....z...$~..TQ{.|g..B...< .d.L6..F....3...Z...H.....R.........8...D$`B.<IxaM..3.......E...?".X9e....s....}...X.m. g5B.2$.?.oKY.M..R.......N.m.....-^...O.Z..gr=x.V(I..]...Dg

<<< skipped >>>

GET /article/kankan/go.html HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: VVV.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:16 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

Cache-Control: max-age=10800

ETag: W/"082ff541f37d11:0"

Last-Modified: Tue, 15 Dec 2015 09:59:48 GMT

Expires: Mon, 29 Feb 2016 05:35:47 GMT

Age: 6711

X-Cache: MISS(S)|MISS(S) from ctn-gd-zhs2-008; HIT|HIT from gtt-de-fra-100

X-Request-Id: 1bf44f4c6c7140d71873b96f3f2fe556; 5a1f6ac861d83f1e2d6dac9758c8e803

Via: T.5199.H.2, T.5199.H.1, M.gtt-de-fra-100

Content-Encoding: gzip

c9b............m..n%G...}...1.I..Wu.G;..!.C.....8.x..g<8g>"...`...$r3H...@....?...).}......>............._......gG/...............=o.9j.;{u...K.o.^..........._..?...7..G..u~....?9t..........._.....1.....O...........onn...._=..<.~.......8>:..v......?..............I....|{q{.f..o..e....]..}r.;}..=.>:?....b..I.....d..4....f.Ylf...d.4.i.....L#.Fp.03n0.....[..tUO....U=....=/....b.....F..F..F-^\..8P....PL#.s..lW...]%.J.Q.....&g2y....Y%...wv..qg...wv..q'...hr....l..I.[.B.v.4...J...J..S.`9...J)*....R.b..=.....:*.O.,.QQ8...Je.J.q.....$....{...B..-*.d.....(;P..ThQ.E...ZThQ.E...Zf...C.Y.e.buT.Q....g4...UQVEY...G.9:..4.iD....u.X..u.(....b..,.|.-d._..e...sV.Y.f.....r....!..|...|X.k.>.dozq..Q....`{.!..|...|x....|..(....Tz...B{...B{.a....;..F..z.$GY.Q..e.G..!.5:*]o...s.........7.9:uCt..Ct....N..]...2D.F..z..:.g..T..{..F..Q......i..7.].-.QC....{.e.F..Q.*..4..z.......QR{..I...(...s....M...]........=..g.hR.i....*4...F.....uo....w...K%.o./...7;D.....)...=.S.]u.@}..qgW...........M.......,.g..<<......&.w....P...C..N..av1...y....a.z....P.....y..~.7(....Y/.{..t....Q......Z/....d=....(...7.Q...fktx... Q? .Y..*t.....e.<........4....I.N..R.......].....:..&.?........v.G..B0.......i..z..1..U.:.....d!.,...j.=[....Z..a.......4..kW..ilj...h.....LL.j.2M.j.....3.p...Y/.nM..I.5.MM.,.dRt..jR.........G...(.4..q..8D.....*...............*.........C.......i..(.%*..p....'Za....W.kVnL.u0Z..x..~.}J...z.....;..h...}......6*..`...j0....@...B..-...B...*4.....*4Z.......4..=h..6/h.......j...`M...`M.J#(......`..*%...R.J.....).kJ.

<<< skipped >>>

GET /article/a/201511/17323.html HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: VVV.fafala123.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: marco/0.9

Date: Mon, 29 Feb 2016 09:18:16 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Source: C/200

Cache-Control: max-age=10800

ETag: W/"0781d54615ad11:0"

Last-Modified: Fri, 29 Jan 2016 06:50:24 GMT

Expires: Mon, 29 Feb 2016 07:57:10 GMT

Age: 9350

X-Cache: HIT from ntt-cn-hkg-017; MISS(S)|HIT from gtt-de-fra-100

X-Request-Id: a467610ac2e3eb6dc40a7e7175f79a47; a2bce4cca08f6062e04307a17059116e

Via: T.51102.S.2, T.12814.H.1, V.ntt-cn-hkg-003, T.51102.H.1, M.gtt-de-fra-100

Content-Encoding: gzip

3db4.............}iS.Y...... k:...../....s.F.L.T..q.D.!@...D!..'.......1....fc.......L}..p.7SK..R.B....2B..d....v..=.....r.......K..n.W.....{.....j..k.T.OO T..7.x....o......{0,.\.............p.....jU....u..4\E.~..k...........B..'J^R_p-.i.>P..}.$.R...']....Z|.a_0.....~P5.x.>P..Z..K=P..<.....>..Z.... ..|../..V..........W...(?....d.f..56....pS;..t............~.4:.*....B...p]kX$=Uz%.......N[......hu...`S........t.%.I..lI......j=!o%>$...?.{C.^o8..qS...../.....zl...*....~.&O..........|.U.s..............#}.V.Z.../...P..i.'.......U..........=.cEE.S..P]..Pe..W.*no....9}..9.L<...n...?k....4........p..Z.5..:...*.....7j..o......OL./..P.^....Sw~a..S[.2..p.^@$...YS..{...o.._.?Wd,9....<..5.4....[....R@.O..Y.<~.....DS.5..Gw~-...%.~.6X.,.5....9.z7Ti...=V..=...u..8.8D@g^...>._>..?...v..Cd.U........w....}I.G...Qs.Z.......*.....]d.">../{..V....o........$I@.f.$...M.H.. i{h....u.M.Vz....I..=...~.rqS...l.c..M^_.1....9......5...G>.Y.Z.........^.h4k.g."FHW..<53?...g..r0.....W..(nv...{....?......L...&..Oc.3Y....[E.....[._..#Ys.y|...xq....g....V..../.....T E........8...<P?.....YM..._..<-..@...0|......i.54..*.l...QI..g..?P7..B..tR.}=l.B.z..6..7...L.IR%k.M...$..r..j..`...W.....uJ{..H.".[.4.<>Q.M.).r....&........|y.K.G.....:h........6........yVS........^.......Y..7..;..L......Y.....^.......r.B........OJ.....S...~U.....:.;%..*..........5.0.~Hq/if....?.......?.H...:.....'./x......Z..M.r.6..6...L*....|.O>/.......[....${.F.. ..4.1a.-..f.y.`kK.A;...T.4Zc.V[.3...{:.=..L..H..2....x....'y...(...

<<< skipped >>>

GET /adx.php?c=d25pZD1jY2Y4YjJiYmYyYzQxYTVhAHM9Y2NmOGIyYmJmMmM0MWE1YQB0PTE0NTY3Mzc1MjgAc2U9MQBidT01AHByaWNlPVZ0UU0tQUFFYkNCN2pFcGdXNUlBOGh0MWtkekdpb2V5enR4UGV3AGNoYXJnZV9wcmljZT0yMjkAc2hhcmluZ19wcmljZT0yMjkwMDAAd2luX2RzcD01AGNobWQ9MQBiZGlkPTc1MjI0MzMxOTRFMTQ4M0JFNDBBQTE5QkMzMUNGQUNGAGNwcm9pZD0AYmNobWQ9MAB2PTEAaT1mNmNlMTgzMQ HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415691&ari=1&dbv=0&drs=3&pcs=300x250&pss=300x250&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html?s&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=ee6118cd6aef5aef&tt=1456737415675.94.1344.1344

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wn.pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:49 GMT

Content-Type: image/gif

Content-Length: 49

Connection: keep-alive

Expires: Mon, 26 Jul 1997 05:00:00 GMT

GIF89a...................!.......,...........T..;HTTP/1.1 200 OK..Server: nginx..Date: Mon, 29 Feb 2016 09:18:49 GMT..Content-Type: image/gif..Content-Length: 49..Connection: keep-alive..Expires: Mon, 26 Jul 1997 05:00:00 GMT..GIF89a...................!.......,...........T..;..

GET //js/m.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: cbjs.baidu.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:18 GMT

Content-Type: application/x-javascript

Content-Length: 33406

Connection: close

ETag: "56d3f2c0-827e"

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Expires: Mon, 29 Feb 2016 09:44:20 GMT

Age: 2038

Cache-Control: max-age=3600

Content-Encoding: gzip

Ohc-Content-Crc: 1526179793

Server: hkg01-sys-jorcol04.hkg01.baidu.com

....O..V..m.js..;iw.8..E.K d.S..8.a..q...........G....E.A..X...U8xH.st...B.@.P.......ar...t6...Q.......aI...X.$v..p.......#.L$w...).l5.(H.y '.g"..S......<..2.|....j..y=..........9}....$.....t....!.(HS.v..8If...%y..:...]~.:.8dW<f..E...%W..n.../L..)... '<..<.|..3..m..C._...Y.............^....2...".C...4.......z*.u.c~.&..w..... <...Ze.$H.n.s.....n.U........u...LK..{.`......e......M....zO.Dcp5..Q..QUt.a...%ApT1.......k...n..P..,..u|.C;....G...B.$...X|.}.A..k5.H(q.2y..2q...z8z.......|.r..K..\........-I.F.a..K.8..w6......"....."hli..I7.4.4.'k4.....(1#.S"...%.R...24.X[..l......t.-..j...Q_.pY.b3).E...W........h....U.j..Xj..."...S.p..`.$.j.s.%..]k3.hpK.&}.f....~...9Anj..~.#k..$J..... J..q.t....0. .S..3.F..................5.3U6.J.......\.<)..|...q..A;....y.y..D..E..$t...-.X04.q..(.3....n5..gP!c.:....q ...`.E .......7.:@.....9.....t..R3{r.>....... >.#.5.bg.\.<ba.....7..X.....fiWo.....8Jb....CK..N.V.. .....,I..l..Z....#......B..O#..`.M%......S.p....M ..'.WXZ...@d...y3....=."...B.....7....g6...u.{K..:.Zt\.^-.T.d$c..SO.5..L..E.L..\f2tI.%........4...F|..`6....k..S.$.... ..[u,..G@.!>:....%...8......H.R....\s...!....LK..?}.o.r...........<...j.l.tL1,...eK.R...........c3. =.R...@.k.J.R....v)...4`.Y.$..e...g._..It.@N.B2...A........P....|#........2..<... .x......q......^.t...c.:.Q..!.Q..&IK.b..[|.#.M.......H6M..$.4.J6.a..(3....9]..0p......cGfj..C........p..U...,.# 2...P....H.......N..2%..... @..@t.M..2..1..B*a;..........).%s..BN.r.7.....tF..^EA.]P..<..=..i.......... ..c= .........}>..%.1.FT

<<< skipped >>>

GET /staticPub/js/room/roomFunction2014_dd2507b.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:37 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Tue, 16 Feb 2016 10:39:52 GMT

Vary: Accept-Encoding

Expires: Thu, 17 Mar 2016 10:43:34 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

449f.............}{w......)..#u.K-....\....._..$..h..K.....~HV,..dx...I ..\....8....MXk...%..|......:U].j....,......s..g.....^.....X..6k...r....u..J;h4rn.b......{rV.Si{^.h...../......%.q.*..|....W..A{E..m.....X.......n........o....kh....k.......^..T.[.|yz......6o.....V......N.1D.; ..xx... ]Z.O.1....#o...1....A..C...C..._......[[_.....K.,b....^..Q..Z.h....b..>.n.,...n.%{f...hr3..s...?...&.......k...0F...m...z....F).#Gy..c..*.. .I...A1..iE.!yI..I2m.Y..G1.g@VD2kn{.b...6Z.z.U..... ...tP....:...../z]..../..U.k/.]......{..Q...<...zw...../......|.*,......v.X..6r...X..........I7_.Z..5{~K.G'.N......14..J.Sm..X..J.f.....(~.....A.o..y.`.J.<.N._...>6D.-..`u.....b........*.....yX.yU.....5^...<..... /.._l..hya....'|...{1...[....-]`...`bZO ...6..^...J=../^..a.jjb..](...:.......g.l............/w..>...'...*.....Jq....r...X#p.9.E.t'{..#.....e..,.Q_2..:..aK..?....^.........v}.....olnR..)..Z}:......].7..S1-B..U<g.q,.k.k...........O.^r.^.[.z.....zk.g....=N..............;...e.....@qg.~.;..K..$........T.*..E......9q<.(.[.n....f...v.~..........9.q......R....[........~.9.....k.3[.;^.!...0...A.kw7...s..Ak...-..c.....e.a6..9.....ui.s.Y.'...b..kz.c..^....WI.q ...{.[-/.n..){.JP..x|.h....8m.F.l-....:|f.Ut..N.".X..?0..........4-........K3.{......A.G.Tu...8.Iw.XH...........6.....:...!.bfV..h.S.....w..P.b1.G@.J.i{n...p<.R......]..Q.b..8]x:.^7..S..Y.....q.w/v>....9...V.^.N.......Xv ..N. .17.e..F&..J..z..".%.:8.....n..sf|....`.E..r....e./3y.T...ui......U.7f.......[._....`.A.k..6QR...%..;[......~..[.y/........6......

<<< skipped >>>

GET /usr/uploads/201511/20151130161134_14413.flv HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://ubmcmm.baidustatic.com/media/v1/0f000nTH6UlUciFfpq-CKs.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.flv.uuzuonline.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Fri, 08 Jan 2016 03:53:19 GMT

Server: nginx/0.0.1

Content-Type: video/x-flv

Content-Length: 1885491

Last-Modified: Mon, 30 Nov 2015 08:04:34 GMT

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 fuzhou190:8104 (Cdn Cache Server V2.0), 1.1 db77:10 (Cdn Cache Server V2.0)

Connection: keep-alive

FLV........................onMetaData.......duration.@#G..z.H..width.@.........height.@~........videodatarate.@.p.......framerate.@9........videocodecid.@.........canSeekToEnd.......................onXMPData.......liveXML...<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151805, 2013/04/09-12:08:21 ">. <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/". xmlns:creatorAtom="hXXp://ns.adobe.com/creatorAtom/1.0/". xmlns:xmpDM="hXXp://ns.adobe.com/xmp/1.0/DynamicMedia/". xmlns:stDim="hXXp://ns.adobe.com/xap/1.0/sType/Dimensions#". xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:dc="hXXp://purl.org/dc/elements/1.1/". xmp:CreatorTool="Adobe Premiere Pro CC (Windows)". xmp:CreateDate="2015-11-30T15:45:33 08:00". xmp:MetadataDate="2015-11-30T16:03:46 08:00". xmp:ModifyDate="2015-11-30T16:03:46 08:00". xmpDM:videoFrameRate="25.000000". xmpDM:videoFieldOrder="Progressive". xmpDM:videoPixelAspectRatio="1/1". xmpDM:startTimeScale="25". xmpDM:startTimeSampleSize="1". xmpMM:OriginalDocumentID="xmp.did:e424f941-95aa-ba47-8b48-bb0e19cc6270". xmpMM:InstanceID="xmp.iid:fb6f993b-e47b-154d-965d-2e27f79ce8e6". xmpMM:DocumentID="xmp.did:60f4f14d-8020-314e-9b3f-737f0a

<<< skipped >>>

GET /adx.php?c=d25pZD1lNzg3ZTEyNWUwMWE4YzZiAHM9ZTc4N2UxMjVlMDFhOGM2YgB0PTE0NTY3Mzc1MjgAc2U9MQBidT01AHByaWNlPVZ0UU0tQUFFVHI1N2pFcGdXNUlBOHA4OVNDM2JCVHc1c2l3TkxBAGNoYXJnZV9wcmljZT0xNDIAc2hhcmluZ19wcmljZT0xNDIwMDAAd2luX2RzcD01AGNobWQ9MQBiZGlkPTc1MjI0MzMxOTRFMTQ4M0JFNDBBQTE5QkMzMUNGQUNGAGNwcm9pZD0AYmNobWQ9MAB2PTEAaT1jOTJjMDliOQ HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415659&ari=1&dbv=0&drs=3&pcs=296x249&pss=300x253&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=2f8bbc640f2a4043&tt=1456737415628.141.1360.1360

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wn.pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:49 GMT

Content-Type: image/gif

Content-Length: 49

Connection: keep-alive

Expires: Mon, 26 Jul 1997 05:00:00 GMT

GIF89a...................!.......,...........T..;HTTP/1.1 200 OK..Server: nginx..Date: Mon, 29 Feb 2016 09:18:49 GMT..Content-Type: image/gif..Content-Length: 49..Connection: keep-alive..Expires: Mon, 26 Jul 1997 05:00:00 GMT..GIF89a...................!.......,...........T..;..

GET /cpro/ui/noexpire/js/rs/business/anticheat.js?v=1.0.0 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737415659&ari=1&dbv=0&drs=3&pcs=296x249&pss=300x253&cfv=11&cpl=0&chi=0&cce=true&cec=utf-8&tlm=1452064983&ltu=http://show.bianya.cc/gg/huyan.html&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737416&qn=2f8bbc640f2a4043&tt=1456737415628.141.1360.1360

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cpro.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:52 GMT

Content-Type: application/x-javascript

Content-Length: 1112

Connection: close

ETag: "5667c7a9-458"

Last-Modified: Wed, 09 Dec 2015 06:18:17 GMT

Expires: Mon, 08 Dec 2025 05:18:33 GMT

Age: 6926419

Cache-Control: max-age=315360000

Content-Encoding: gzip

Ohc-Content-Crc: 2985892639

Server: hkg01-sys-jorcol13.hkg01.baidu.com

....8.\U..anticheat.js..Vms.6.. ......._:...\z3..4....Q`:B.....l.P....m..@/./ .>.... .@.N...Q*.J.-&......m...q......`Qd..*..K$..%.N..m....1.k...t .....B._Ba........1.}..8.. "../.....g.m.7...2....J"q o....../..q........k& .o..k.@._.U......p..*....Fad(s..-bs....6....:..(......h.dl......_..c....,%..Q....^.8.?....e8e..v.....Fb.!Gt.....4/s.h.'Z..l...L......J..fF(...2.-.#.8eGE.'E...8...|.Y.vDqNFRl.~a.@...5D..6....l...Z.u.B..vm..r8dFZu. .S6...~|..t.......q..\.YY.p^.>.iX.....P ...{.!$Vwj#.......Gfu:... w....'k...{..Z..]...E.... ..i..........y...y......k......h8..:.."..a4........d....4...!k..".....?..T.X'.^N....}.....)D. 8.....7j.V.49t.........t...R<B...%..s........d@.....E...|..,?2: ]4u{...n.r)36....ys.N...U..`.AZ^!Tk.j.uW...%.]bg......s..^w.?>.P.E...F.>..`.."r.#Y.....H.._...;..._Z.h.....F...w,R.U.....-z.:O..-V5.O....Id.'z*.g.6.....T....u..%.0..e...V.. ..~. ...Z8....=~..H..Sj.F(X-.!|. ..:..P!...,>...&....U......<;..^f....=....5L.j.6.es..t....Y..}.>....p .........^.'M=.e..Z..m.<~.`mt5..-..%...o'.o=A....8dQdl5."p*hk..t....P-.........(.G......?.....85_p.L`..9c..k..>.F..GME.....i..x}....v:j......;..`pF.c.....

GET /media/v1/0f000jioG2SODfD3KlS1j6.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://pos.baidu.com/acom?rdid=2229533&dc=2&di=u2229533&dri=0&dis=0&dai=1&ps=-2x-2&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ubmcmm.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:51 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 13002

Connection: close

Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT

Expires: Thu, 05 Jan 2017 18:50:45 GMT

Age: 4631286

Cache-Control: max-age=31536000

media: media

Ohc-Content-Crc: 3688519439

Server: hkg01-sys-jorcol14.hkg01.baidu.com

CWS.GE..x..{.X.K.no^..9KVP`......EE......v." bF....$.QPAA.b....d..(9.0pg.L...|.....;.LOUW.]U].3.;..X...m..a.......B........31......jC.../............@..QT...R$( * .C....@.1B>.*)./.@0!Q=C.A42%P.N.=(.4=..........T.......I.P. .)*)...8...q..H..8P(...t)13.".W.&..M.R!x............'.@....%.y........6AU[Es-AS.@.EwYrY..D#z.i...j.JJ.*..%um..m5._...]Q.x..#.%...b.......O ...h@..wi*......T.. ....J...$A.. =be.m.H...=I.&..C.L..6V3TU..4S1..0USR2"...*.* .)....k0..].;...34..H[A..7.~Q...9..C.r./P..4U.......*.*.......:...ih...../ ~.J.!....B(..^.".PI.H.I|..=L..j...&3.5u.5c.......T..y..!-.......?C....e.....?....1?.............gL;^..$...5*..J.Y..S....@........D:.b.<.....N.#.{.g.]....i...../....t.....a.Mv.p.%1%........@....t....B......b.M.......`.^....c..6....-}Q....F..].`?...tA...$.............%..iy(.1..1.mc.n.M. .a.X...."..\.A.eR..(...h3....5..!....k.Jg5...........t.#{.(....>t).....i..W...y.%)....z..../G\P.>...... .W.............y.ki..,....=H.P..^`.Q..A..o1`K7....@..&..x...[..D ;...>]>...D..(.3Tm..08..D......j$..@...n.q.%... m.(!).j....nD.s".......g.......fv^....;C3.. ...5...j...i.a...p4..h...pq..!@.9m.H....=y...R.vWZ.....=R.Sg.z. ...#.`=.8pem...}.'........2EdJ......l.U..w...lw....!...J..g........F.wJ..N4..Q..........a?.w_{NX.....a..E...i3XrK...q...r}.U(.`..`..R.a&E.|....u.....XU.....M2...P.Vv..1.yq.E...f...f............O_B|v&la:'...7.....!.6.......w..E....I.WVP{...........Z./.K..o^8,.1*.................'..Oo.Qt.............wr.e.Re....S..#.8.c......../. ...a.m'........X.nIs9...s.Zf.../ev/..3.9!....-.].....:.. .....

<<< skipped >>>

GET /staticPub/js/DD_belatedPNG_79c3052.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:33 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Fri, 15 Jan 2016 07:56:53 GMT

Vary: Accept-Encoding

Expires: Sun, 14 Feb 2016 16:40:31 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-42

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close

a20.............Ymo.F.. ..........u<.N.......I....\....$%......]R$...].....pw.....b.........n...m..e=..*Y~T.......O.d..,..[.(.w.E!...$~.'.c.....TT*K-{.db...rR...Z..gG..*R...........Usp.*R...L..<Q...,..E...$f..=...)..#)..........v.2..5.tX......wJY.RU.Z.*i.D..g....).v...Z.....^G*.......e......-.n}..-.C.....B5w.X6...?.p...7...k...............w7.V_...2.s..yV*2../.,....-..p......Y.#oU....w.N.TN.....5/.....i..{>...,..1......*.B..zr#..2.S.......`..ZS..f^.....).gc..........T....Ho.3..YQ.i5%..........G...."........{.[....*......,D.q@..v..(.A......Y...r).@.~!".-|.uYd.4`.....5p.m......y.?...o..I.N}Q.......#5b.w..(p...f..Yv."..W6..Z.@..}E[.:._~xH.uY..e..Y4w....6B=ao.s.P...p...........[...q...........<.#.:..5.q...r.(.5b...Z..x...._V....B.y..M.....l>../..........h......M*...a3...\...9@...... ....#.... :..Df...$..`...@...}-..)............8<0.......L.U4.F#...........c^...,.?.Nw...0.........;.*.pw.cQ......3..fx.U..4.....*{...`.U^'..P..,..&.\j..M8GU."...)..4.(*...\..../..$q....TA0..9...L..l9.....*.(d...m.lU.X..|....e.2Pql9D......E.:.e.z...q...=..{K..u.@....!E..uK..?..sKA..1...B.....B.l{z..DQ..sm.....K..7..|a.(&(}....P.. %.#a..uP3[....*.!_.W{..}M..x..6&.kx.gcn^?.......).......H{.Z.....MC....=...T.S:...n.....4.......Rg....>A.. 3....t....<.S.w.6.jM......H...uZ&c.Av D.<?K...T..B..r..!....x=...7..o...W.B/.......WH.~..N./.j9..g :Y..Y......G.@.))...i.WcF'..^.y...eXuJ.~.. U..X....hE..|.G..].....0...d:.i....I...........d..F.!!....C.!..r. x $E.NW..@9.p.|.[.......Dm...;..m.....s.,@...K.zg..N]...X.zX).{D...G.. ./N

<<< skipped >>>

GET /it/u=1856364587,2693382950&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: t12.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Wed, 30 Mar 2016 19:18:26 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: a80923335e80c0198b1873baaedd9f47

Content-Length: 59994

Date: Mon, 29 Feb 2016 09:18:26 GMT

Server: lighttpd

......JFIF.............C....................................................................C............................................................................"...........................................=.................................!"1.$A.#%2Qa.q..5B...&4Rd...................................?.........................!.1."AQ..2aq...#.BRb.....3Cc.$.Tr...............?..z..=.......'S...7..Z....s._Hj..h....&.....5..;.g.S..S..}.. ..k3...k..}Y...E....0N.-..[.@....7:..&.X.....9t......%.'.#...20Q...7.[.^1.-..0...&../.|<[l.......).rb........_.....v.Q..._...>Se=.5.z..y...$=.m.kC.......f...\J^I.......@..8CcZ......h.....pV.J......G...FY./.9$..<)...$......%..(.........G....;i..w.A...v7..y. 2..x.r~..*.^UU...........J.D(B...-.......`.u.G...q....5..., ..#.....3.5.3H1o"q..J.Y.G_..n.. ..I..j<'..0w...s4.....R.9.>wf...4.M..7KX.J0..n.D(*3...,.-.....6#..q.......[.s...:......T -..-.H.......U.Td4....j...).Mb.[.F...k,.Uk.,...G..6..e.T.......KQ:.E<.I....9.vp..U...2....U.....L..'5.....9!..../.#T....j.p.g.36.F.....G...A..ho......b..<..]Q1..h.U6.W.......#.w0i\i..1]e...K=q..Y.S.8........CI).L...5.#...|..~;.e....I.[._Qi..l........x!..zJX..rw...p..N....Y:..qH9..q..............%@.8..K/ ...^....../...............~s......A.....*<.d."..."CUO.2... >..|.@.. ........E..-.....-t.yg;FLxMN~....P'......../.9_la.Q k.:#..%....R4....X...~....C.#.C...!..b1eL.`......YSh..s`.B.z..^...u\.*.SiU..1..a...J...4.&.4d}.....B.K..R%5....Y.`....V`......}....jJ..eV.....v.....<c.$zk{..b[c... 7..X .........p...]..c..)....bE.....

<<< skipped >>>

GET /tpl/ac.js HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: dup.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:50 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: close

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Expires: Mon, 29 Feb 2016 09:25:36 GMT

Age: 3194

Cache-Control: max-age=3600

Ohc-Content-Crc: 2805665849

Server: hkg01-sys-jorcol03.hkg01.baidu.com

Content-Encoding: gzip

5f7.............V.S.8......7A..L.u{.]..@...K..?Q..%.V.-....$..>..I....n2.HzO....g.N ...0yXm.).T..;n..]].4N..i..@........q..k.....U....u.P.....d0H.z..XU.H........T.pJ......q.^/........p..J..S.....%... ........4&u.y.........Xe.cl. ifa..t...!.._y....0..:m.=.......N.x.l...w9..~.d_.p..].m.@)N...t<.K....B..G.`...;.T(.....Uz/..w.{.%C....&Cq.|...8.u.f....W8.i.j..I..I..j..N-8...t9Cc..Jg.k.{t.....!...G^..bH(.!...f....V....h .E.......... .m..c3s.W....8g...B.....w{.}.............,]>.....e.y...];x,B....*8|;8....,.<.v.t..{......S/......Gh.FpoP.[.C/..E..H...pv..Yn........h.qF..=U7.m.(..l...rS[.L./x..t..........2.0F..E@...1|.[|.............6cn5.E.!H...T..*.:.&._#....-......PX...V51..e.U./s....-.........R...>.....b;..r...T.$.d......P.......L J..............LL:...Zr]y.n.....eI.<....F..:....l.|..![.b..9..`.....P. ..0.wdx....!..h......h.@.,.rI.'...;.e0j..o....QA.Uo.....................%v2?......~..|<.........D...F.Bd..... G...OI...T....{........'O\\.^....6...6.q......z..=.q.B.w......^.k)U..i.i.7.zu..b... p.....1...m.q..|JT%......D..5..uj..J..O.......'(~..-.>>........0\.-m......JB.Z......%.V\z..N...Wz...,.;..^G..0.!Z3...._..O..U=....%;...M.&Onn......\,...........H..........[.v...X.....[v........4'..... ..._A.w.`p?...aL1.....}%`.....r....O.0w....BG9.UTS1.$.E.Q.F.T...4.~....m....J.9...).t.[6.0.Fd...'....b1...n......#h..X.G?...@6...V.,..k,........q...}.\'...>../._vN}~ON.]^v....'...ho.......<......-(.~{.7.7...[.c|..p..q.z...h..y.#.}.pq.z..R.2e..2.q.q(..e/|....hf.Nx..~.`y%-.......!z....sS..........)0M.Ac

<<< skipped >>>

GET /emar?yguid=61b5dd9346a5421099a85a5027961cfc&ver=1 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2480739&dc=2&di=u2480739&dri=0&dis=0&dai=1&ps=74x308&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391&qn=bc8e12d50064a9a9&tt=1456737391050.438.1891.1891

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

Connection: Keep-Alive

Host: cm.pos.baidu.com

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:26 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT

Connection: keep-alive

GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Server: nginx..Date: Mon, 29 Feb 2016 09:18:26 GMT..Content-Type: image/gif..Content-Length: 43..Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT..Connection: keep-alive..GIF89a.............!.......,...........L..;..

GET /fxstatic/images/yellow_warn2_b8d73e7.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:29 GMT

Content-Type: image/png

Content-Length: 1124

Keep-Alive: timeout=20

Last-Modified: Sat, 30 Jan 2016 15:11:52 GMT

Expires: Mon, 14 Mar 2016 14:09:57 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

.PNG........IHDR..............sO/....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E12878A9A5E211E49D77EC7E91FBAC91" xmpMM:DocumentID="xmp.did:E12878AAA5E211E49D77EC7E91FBAC91"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E12878A7A5E211E49D77EC7E91FBAC91" stRef:documentID="xmp.did:E12878A8A5E211E49D77EC7E91FBAC91"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>L.. ....IDATx.b......p.q.....1..q ^..S....i6..u@,...,.8.....>H..M......=...b-d.x.6s2....x..3..H.i.......@..3 ..<.....f .'.9d.....o..q{..v ....w2.....g.4.,...d.....R]q..w0"..E >...Dh.%cs.0@.<N@.> ..i....A%..8....i..._...P... ....,.Qu......IEND.B`...

<<< skipped >>>

GET /it/u=990497764,1232924695&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?sz=300x250&rdid=2355443&dc=2&di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=02ff9997d2308bbb&tt=1456737391050.1781.2172.2172

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: t11.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Wed, 30 Mar 2016 19:18:26 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 1069d53929425e8d1db957548c94542b

Content-Length: 42112

Date: Mon, 29 Feb 2016 09:18:26 GMT

Server: lighttpd

......JFIF.............C....................................................................C............................................................................"...........................................A..........................!..1."A.Q.#2a.q...B...$3..%Rr.b...&4C..................................I......................!...1.AQa."q..2..#....B...$34R....Vbst.CDScdr..............?..S#b.R@u..E.. o.......r@.R....."............^....K.'y....).X.]..Y .V....:...1..S..4Y.....&. .8..@.......y.T[.e1V...Y.ao....3..,G{...3B...T...]....O.....5>#...M....mJ...Oq........8.^.`.T...iq.PTB.N.J....O9&......qKBU.M..&...].....`..[....ON ....S.=?.\{...cq..o.r....l..X,.:..O..b.2o...i..y=Y..../.V*8./....p..9..\".>.B..$..F...'r2..bH........}m........5.....X..l.."4..>~.! ....NV#.s........*.lIR....@F.c....]v.......L..(i....V.#..T"m..C.Lw.`. Z...".......'&>.s.^k%.....&....g.\...Z..E...x-~...99>F5.9....;.i$o-.c.T....]|.. MF,W....{......k.g.ejVY.................x..9...<;..-^...v,..^P<...E.......R.F.....KF0.....].".l.....I!...<E.B.f....RV.Lu.9...;.zV.e...B...ROX...q._..9..azk.z.e..l....Q.!..dK!#..q........R~...I....#....|.xgz..O%...LJ.J.q....L.......*....5..*.,.ZGU.F~.:O....x.(..Nx.c.ebD.{.".Ti...S'a*...Y.18.'....]..K....W...w5.......n.W.d..x?K.6.?..x.v$..t....V...nA.k9{.k,lEr.:n.3J...MR.....S..J@0..&....M...e....[..cR...3kZ.....,......d...L.V".(K....a.bHK......./...V-.)..r./`..J.......l<..u..w...hn..../c%..u.KF\...K0(.j...t...0..e..?.Y....X.{4..Hj<o.%..c..`.X...Ux]....bh...obbN.k7.......N8....l.L..

<<< skipped >>>

GET /stat.htm?id=1254817266&r=&lg=en-us&ntime=none&cnzz_eid=223312916-1456732646-&showp=1276x846&t=&h=1&rnd=289534767 HTTP/1.1

Accept: */*

Referer: hXXp://show.bianya.cc/gg/huyan.html?s

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: oz.cnzz.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine/1.4.6

Date: Mon, 29 Feb 2016 09:18:47 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Mon, 09 Mar 2015 09:01:02 GMT

Connection: close

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;..

GET /fxstatic/images/fx_loading_c785dd3.gif HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:33 GMT

Content-Type: image/gif

Content-Length: 1404

Keep-Alive: timeout=20

Last-Modified: Tue, 27 Oct 2015 12:28:36 GMT

Expires: Sat, 13 Feb 2016 13:58:31 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-42

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

GIF89aH......a....i......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:146BFF791A8911E2983DF11C711E32A8" xmpMM:DocumentID="xmp.did:146BFF7A1A8911E2983DF11C711E32A8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:146BFF771A8911E2983DF11C711E32A8" stRef:documentID="xmp.did:146BFF781A8911E2983DF11C711E32A8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! .................................!.......,....H.....@.o......K&*....,x........Y....[...........|.^.."..7e...:.F)s5u...!.......,....H.......o.............{e.G..h....(.....j0.S}.......Z..!.......,............o.....b.By...'-p......b..'....!.......,............o.....b.By...'-p......b..'....!......., ...........o.....b.By...'-p......b..'....;..

<<< skipped >>>

GET /fxstatic/images/fxtpl_loading_c785dd3.gif HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:41 GMT

Content-Type: image/gif

Content-Length: 1404

Keep-Alive: timeout=20

Last-Modified: Sat, 30 Jan 2016 15:11:52 GMT

Expires: Mon, 14 Mar 2016 13:08:53 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

GIF89aH......a....i......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:146BFF791A8911E2983DF11C711E32A8" xmpMM:DocumentID="xmp.did:146BFF7A1A8911E2983DF11C711E32A8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:146BFF771A8911E2983DF11C711E32A8" stRef:documentID="xmp.did:146BFF781A8911E2983DF11C711E32A8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! .................................!.......,....H.....@.o......K&*....,x........Y....[...........|.^.."..7e...:.F)s5u...!.......,....H.......o.............{e.G..h....(.....j0.S}.......Z..!.......,............o.....b.By...'-p......b..'....!.......,............o.....b.By...'-p......b..'....!......., ...........o.....b.By...'-p......b..'....;..

<<< skipped >>>

GET /fxstatic/images/room/video_6f4f75f.gif?333 HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:39 GMT

Content-Type: image/gif

Content-Length: 7323

Keep-Alive: timeout=20

Last-Modified: Sat, 30 Jan 2016 15:11:52 GMT

Expires: Mon, 14 Mar 2016 13:20:01 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

GIF87a..0....333..33f3fff.......f3...f333fff3f33f3.3ff33.f???!..NETSCAPE2.0.....!.......,......0......I..8....`(.di.h..l..p,.tm.x..|....pH,....r.l:...tJ.Z...`..t%[..K......\h...6.M/H.v.\r.. xh....'.[jt..}rnxnwyqt.j..............tZk]{..wp....v.m}.{..syu.u....M..j..........r..........mk....>...v.........}Z...].p..........9w........dkQ.0..R.......b.[s...d....[(.S79."N.@...........*5.....%..[#y..s.....`*].. .F.. C.H.-v...<Z...|.&~bJ..!jsZI.dm....|...........;.Z.]..| .(.#.n....-.D...< .....G......3.Q......e..V.....1?.1....O...(....O m...U...c...#.S.9sh1.(.N......k.>.....1../.........a......._A>z...........\........}..` ....@.... .......8....>h.....a..~....R(....8....hb."..a..Bh ........9..8.X..4.G$.9....I....T.a#.OR.d.5.x#.Fj.f.!..e.hR.%.S..%.W.y..[..'.r....O..e.c.Y&...)....ia....$...... ....w....GZZ(......HL...:6.....h....z....j........f.*..vZ"...:......z.D.7_{..h.x.R.........v..... ....k.............. ....k.............S...!.......,....y........)..F.]...wi Z$...t..y..h.x........%....... !.-.#.<...'.Z.]..&H[.N]\..K..9k.O.i..xt.*d....^}r:t.{exy7.j_N.Y..>~a.C....B|..F..p.n......q.>.;]..s.PeO...u.v......6...........8.K...............Qk..Q3</.'1/X ....".x..!.......,....y......P.I.08.Z....I.%..t..Jr.......=Sy.r.\ .K....10$.`.......A).j...^.......^.X..;...b#w..m\....h_{..s.uY~>.B.vgl.8i.0...j.H.L...x...%.s.9k..A.E....pN...8......7..`....}.......@....tK............cx2)1.Z..-'... 4.."...!.......,....y.......H@ ...[E...}S.........y.O...a.|o.=.*......2`.,]...v3r........J....x-.(X.~..mt.....2

<<< skipped >>>

GET /KgAck.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: serveraddr.serviceweb.kugou.com

Connection: Keep-Alive

Cookie: __fx_union_access__=1-1-1; __fx_union_page__=3-3:5-2-2; __fx_unionId__=111-17614

HTTP/1.1 200 OK

Server: kugou_server/1.2.8.6

Date: Mon, 29 Feb 2016 09:18:27 GMT

Content-Type: application/x-javascript

Last-Modified: Mon, 14 Dec 2015 04:22:58 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Mon, 29 Feb 2016 10:18:27 GMT

Cache-Control: max-age=3600

Content-Encoding: gzip

b4a.............X.o.V.. ..v.......u&n..iY.v.&E.......8..G.'...PQ..U..JE...!...........m......L.m..v.;.q.9......O6^.o;3K.........,.#M_.`..F...'......-............C{..m.P..f}dO...e...{..e.4K..g......T....BA........8.-kG_%"[&..[8..2..Z9......W.t.....i.voh.....z.....#....B...m1}X.T.ok\......tK..4a[N..w.......uF......~C.5}.S..P.).>iis........).[.X..?Q....5.V#.].u:.&^.r..gu,^."v.. A4>..n.4......"....t....3z.c ...^."L...x9....9.<.........}...-46...p..5.....4S.9.Z..._...0..........mN.R..E&.H/v.S....Yl..'c...gaW%...D.6.gX`.b...6X..>...mX..7.R..;zA....w..3QZ..R.#..w.W,....w.Ox.B...V...N....s,.`{..`..].n.`.4xz.9.&, K.B......I..G..<x....<...3../....AJ....iS. .jf.&'./B....k..H7..t8.t...w..5O$...>E1...*.eS...Q........i...u.sx..6.URmxZTCJ....c}fD..x..u.I...~.6.hk........_..?.<.t.m3. G.Rkw.(....5kt..c.h....e....:. Z...];.N..j............J..gr......F4....a"..3o.....1..........T..x....R... .a.f%4..93C3.z#:{..o..v...s...{..o.... s...IJ.f K........j...3..&...#.....W.j>.2....HA0..O.cW..`.j.,.....<.v.0F.sz;..d.C..4.04....B7..*...P..-...:..... .........h..a..A;.C..<%.,TD..R.Kl..... E.$)~.1W).4hxd.0.G.......c 8E.uR*..@..v:.J<r..H..;...D..PhL......R..Y..i@.o7.....2x..4.&-K..I!...F....8.4.2.g".o.fh.?.(w..Y........u.rb.37k3G.N..c........g.G..k...........V.....jP...OR..*...dzA..D..q...<.i3.....f$...TF...2.........8.B.)O..F. ...=...x..Pd.....~.5...e../....0oE*.p.E..."....d.........s.*..d.FOA..[.Lo<.p...(...b.[.E*.....Z...d...ms..mN..o..]C....cwK..h$.c.=..}..M....A>.M.N.[..n...C....hLc.1i0....&

<<< skipped >>>

GET /log?type=ssplog&id=-1&error=responseEmpty&status=renderFail&async=-1&from=ssp&tm=1456737392722&.stamp=0.5117792924746438 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: cbjslog.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483B674531893B65DDDF:FG=1

HTTP/1.1 200 OK

Content-Type: image/jpg

ETag: "4281908110"

Accept-Ranges: bytes

Last-Modified: Mon, 10 Jan 2011 10:46:59 GMT

Content-Length: 0

Date: Mon, 29 Feb 2016 09:18:24 GMT

Server: lighttpd

HTTP/1.1 200 OK..Content-Type: image/jpg..ETag: "4281908110"..Accept-Ranges: bytes..Last-Modified: Mon, 10 Jan 2011 10:46:59 GMT..Content-Length: 0..Date: Mon, 29 Feb 2016 09:18:24 GMT..Server: lighttpd..

GET /fxstatic/images/blank_5307b88.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: KugouCDN

Date: Mon, 29 Feb 2016 09:18:32 GMT

Content-Type: image/png

Content-Length: 949

Keep-Alive: timeout=20

Last-Modified: Tue, 27 Oct 2015 12:28:35 GMT

Expires: Sat, 13 Feb 2016 13:11:54 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-42

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close

.PNG........IHDR.............(.4.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:ECCE9351EB5711E18EF4F84FBAF3F77E" xmpMM:DocumentID="xmp.did:ECCE9352EB5711E18EF4F84FBAF3F77E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ECCE934FEB5711E18EF4F84FBAF3F77E" stRef:documentID="xmp.did:ECCE9350EB5711E18EF4F84FBAF3F77E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..).....PLTE......U..~....tRNS.@..f....IDATx.b`..0.....OmY.....IEND.B`...

GET /tpl/ac.js HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: dup.baidustatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 29 Feb 2016 09:18:50 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: close

Last-Modified: Mon, 29 Feb 2016 07:26:56 GMT

Expires: Mon, 29 Feb 2016 09:25:36 GMT

Age: 3194

Cache-Control: max-age=3600

Ohc-Content-Crc: 2805665849

Server: hkg01-sys-jorcol03.hkg01.baidu.com

Content-Encoding: gzip

5f7.............V.S.8......7A..L.u{.]..@...K..?Q..%.V.-....$..>..I....n2.HzO....g.N ...0yXm.).T..;n..]].4N..i..@........q..k.....U....u.P.....d0H.z..XU.H........T.pJ......q.^/........p..J..S.....%... ........4&u.y.........Xe.cl. ifa..t...!.._y....0..:m.=.......N.x.l...w9..~.d_.p..].m.@)N...t<.K....B..G.`...;.T(.....Uz/..w.{.%C....&Cq.|...8.u.f....W8.i.j..I..I..j..N-8...t9Cc..Jg.k.{t.....!...G^..bH(.!...f....V....h .E.......... .m..c3s.W....8g...B.....w{.}.............,]>.....e.y...];x,B....*8|;8....,.<.v.t..{......S/......Gh.FpoP.[.C/..E..H...pv..Yn........h.qF..=U7.m.(..l...rS[.L./x..t..........2.0F..E@...1|.[|.............6cn5.E.!H...T..*.:.&._#....-......PX...V51..e.U./s....-.........R...>.....b;..r...T.$.d......P.......L J..............LL:...Zr]y.n.....eI.<....F..:....l.|..![.b..9..`.....P. ..0.wdx....!..h......h.@.,.rI.'...;.e0j..o....QA.Uo.....................%v2?......~..|<.........D...F.Bd..... G...OI...T....{........'O\\.^....6...6.q......z..=.q.B.w......^.k)U..i.i.7.zu..b... p.....1...m.q..|JT%......D..5..uj..J..O.......'(~..-.>>........0\.-m......JB.Z......%.V\z..N...Wz...,.;..^G..0.!Z3...._..O..U=....%;...M.&Onn......\,...........H..........[.v...X.....[v........4'..... ..._A.w.`p?...aL1.....}%`.....r....O.0w....BG9.UTS1.$.E.Q.F.T...4.~....m....J.9...).t.[6.0.Fd...'....b1...n......#h..X.G?...@6...V.,..k,........q...}.\'...>../._vN}~ON.]^v....'...ho.......<......-(.~{.7.7...[.c|..p..q.z...h..y.#.}.pq.z..R.2e..2.q.q(..e/|....hf.Nx..~.`y%-.......!z....sS..........)0M.Ac

<<< skipped >>>

GET /default/index.html?v=03AD446F3A574AFE0281630A166E51D7FAB141130AE0C8AAD6E453962939C4CD189605251DC32B837AF9D107201FD8A478B90BD175458A857845A26B90C627E59C5E41535A47A5C2E41FF1EA05222EDE HTTP/1.1

Host: tongji.hiv-hiv.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/plain; charset=utf-8

Server: Microsoft-IIS/8.5

X-AspNetMvc-Version: 5.0

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Mon, 29 Feb 2016 09:18:08 GMT

Content-Length: 4

100!HTTP/1.1 200 OK..Cache-Control: private..Content-Type: text/plain; charset=utf-8..Server: Microsoft-IIS/8.5..X-AspNetMvc-Version: 5.0..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Mon, 29 Feb 2016 09:18:08 GMT..Content-Length: 4..100!..

GET /sspcm/cm?dsp_id=100692&dsp_uid=0 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?rdid=2480739&dc=2&di=u2480739&dri=0&dis=0&dai=1&ps=74x308&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391&qn=bc8e12d50064a9a9&tt=1456737391050.438.1891.1891

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: cm.yigao.com

Connection: Keep-Alive

HTTP/1.1 302 Found

Server: Tengine

Date: Mon, 29 Feb 2016 09:18:25 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 111

Connection: keep-alive

Location: hXXp://cm.pos.baidu.com/emar?yguid=61b5dd9346a5421099a85a5027961cfc&ver=1

Set-Cookie: uid=61b5dd9346a5421099a85a5027961cfc; domain=yigao.com; path=/; expires=Wed, 28-Feb-2018 09:18:25 GMT

The URL has moved <a href="hXXp://cm.pos.baidu.com/emar?yguid=61b5dd9346a5421099a85a5027961cfc&ver=1">here</a>.HTTP/1.1 302 Found..Server: Tengine..Date: Mon, 29 Feb 2016 09:18:25 GMT..Content-Type: text/html; charset=utf-8..Content-Length: 111..Connection: keep-alive..Location: hXXp://cm.pos.baidu.com/emar?yguid=61b5dd9346a5421099a85a5027961cfc&ver=1..Set-Cookie: uid=61b5dd9346a5421099a85a5027961cfc; domain=yigao.com; path=/; expires=Wed, 28-Feb-2018 09:18:25 GMT..The URL has moved <a href="hXXp://cm.pos.baidu.com/emar?yguid=61b5dd9346a5421099a85a5027961cfc&ver=1">here</a>...

GET /acom?di=1172330&dri=0&dis=0&dai=1&ps=794x288&dcb=BAIDU_SSP_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737392 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: pos.baidu.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Length: 536

Content-Type: text/javascript;charset=UTF-8

Date: Mon, 29 Feb 2016 09:18:23 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Mon Feb 29 17:18:23 2016

P3p: CP=" OTI DSP COR IVA OUR IND COM "

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

Set-Cookie: BAIDUID=7522433194E1483B674531893B65DDDF:FG=1; expires=Tue, 28-Feb-47 09:18:23 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1

X-Xss-Protection: 0

BAIDU_SSP_define({"tuid" : "1172330_0","queryid" : "eee29b83352566ba","placement" : {"basic" : {"cname":"54010049_7_cpr","flowType":1,"groupId":448404,"rspFormat":1,"sellType":1,"sspId":8,"tuId":1172330,"userId":5893023}.,"container" : {"anchoredType":1,"height":60,"sizeType":1,"width":640}.,"fillstyle" : {},"userdefine" : "","complement_type" : 7},"extends" : "","pdb_deliv" : {"deliv_id" : "0","deliv_des" : {},"brandad" : 0},"order_deliv" : {"deliv_id" : "0","demand_id" : "0"},"rtb_deliv" : {"deliv_id" : "0","demand_id" : "0"}});HTTP/1.1 200 OK..Cache-Control: post-check=0, pre-check=0..Connection: keep-alive..Content-Length: 536..Content-Type: text/javascript;charset=UTF-8..Date: Mon, 29 Feb 2016 09:18:23 GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Last-Modified: Mon Feb 29 17:18:23 2016..P3p: CP=" OTI DSP COR IVA OUR IND COM "..P3p: CP=" OTI DSP COR IVA OUR IND COM "..Pragma: no-cache..Server: nginx..Set-Cookie: BAIDUID=7522433194E1483B674531893B65DDDF:FG=1; expires=Tue, 28-Feb-47 09:18:23 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1..X-Xss-Protection: 0..BAIDU_SSP_define({"tuid" : "1172330_0","queryid" : "eee29b83352566ba","placement" : {"basic" : {"cname":"54010049_7_cpr","flowType":1,"groupId":448404,"rspFormat":1,"sellType":1,"sspId":8,"tuId":1172330,"userId":5893023}.,"container" : {"anchoredType":1,"height":60,"sizeType":1,"width":640}.,"fillstyle" : {},"userdefine" : "","complement_type" : 7},"extends" : "","pdb_deliv" : {"deliv_id" : "0","deliv_des" : {},"brandad" : 0},"order_deliv" :

<<< skipped >>>

GET /acom?di=u2355443&dri=0&dis=0&dai=2&ps=114x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&sz=300x250 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Length: 1010

Content-Type: text/javascript;charset=UTF-8

Date: Mon, 29 Feb 2016 09:18:23 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Mon Feb 29 17:18:23 2016

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

X-Xss-Protection: 0

BAIDU_UNION_define({"tuid" : "u2355443_0","queryid" : "02ff9997d2308bbb","placement" : {"basic" : {"cname":"54010049_cpr","flowType":1,"rspFormat":1,"sellType":2,"sspId":1,"tuId":9223372032562163955,"userId":5893023}.,"container" : {"anchoredType":1,"floated":{},"height":250,"sizeType":1,"slide":{},"width":300}.,"fillstyle" : {"backgroundColor":"#FFFFFF","cloudTheme":{"skin":5,"stid":5},"elements":[0,2,1,4,5],"flush":0,"layout":[1],"lu":{"borderWidth":0,"number":0},"opacity":100,"search":{},"txt":{"align":1,"cbackground":"#FFFFFF","cborder":"#FFFFFF","cdesc":"#444444","cflush":"#e10900","ctitle":"#0000ff","curl":"#008000","fontName":"......","fontSize":12,"number":3},"video":{}}.,"userdefine" : "cpro_template=text_default_300_250|cpro_cpro_lu=1,#dfe4f9,#000000,......|cpro_version=2.0","complement_type" : 2},"extends" : "","pdb_deliv" : {"deliv_id" : "0","deliv_des" : {},"brandad" : 0},"order_deliv" : {"deliv_id" : "0","demand_id" : "0"},"rtb_deliv" : {"deliv_id" : "0","demand_id" : "2355443"}});....

GET /acom?rdid=2480739&dc=2&di=u2480739&dri=0&dis=0&dai=1&ps=74x308&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x896&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737391&qn=bc8e12d50064a9a9&tt=1456737391050.438.1891.1891 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Encoding: gzip

Content-Length: 2065

Content-Type: text/html

Date: Mon, 29 Feb 2016 09:18:23 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Mon Feb 29 17:18:23 2016

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

X-Xss-Protection: 0

...........W.n...}.....,f....-......P.)K6i...F.l.~...Q....y.... ...I.f3..j...;.$ ......TUWu..nx}...Q.....mo...O..s...r-.$.....lr..s.q..(..*!\..K}.#.....6L...d}M...\..b....r...........?|......_....z....7oz......}.fU@.CH.5.....#.i..$...v..f8s.........(&..MI...u.DM...0.pF...5A]..S..F..<:.....).F$}H.e....d.uP..>)R.v^k.8y%.q..a..qj..3..S..|m.C....T..K...............o.f..i.7..../.........c...8.._......8.@^ .....I.A\v...H..g.u.8"..M....=#........6 :y...l.Y.A.:..}:..K!.U..b...x7...#~..'.....x.-../da.<.x...#...j.J...B@.....V..}).Z_.l.0b.:...F..sO.....znh7hj~...Y.6...Oib.....hr.Z}.~,.....D.5.{.}NH.\........z......PFMH...k...6.'...[..d5Dh.*H.i....f....Z.$ .l..f.E.yf9..\eh............3.e.H..&*..k.H..A...`~.B..v....ap=;H....4....|7R'f....O....x.^.H.Y....Vwbi...R.V.k]b..../...R.R...x.^..Y9W5I?p2.e M.|.\...V).b..F..H....n.kH........v.V...%.pP...?....)%Yg>%s."T&3.z8.~E.......|5..S.....l.y.)....c.t...kx#...].3...Lf..^y.{_.<4....._ t..'g.....t.....}.<..;U?.o.Yv.....Y....n]^..$.9...,.....&.-5..o..#-A.~^...X.O.F..e.F..Jvl].#.0......y....R..O.Xx"5...?.M..8.^.oG.2.V.........j..w.@........~.(&z4uNW........|...X..........E_Xxs....o....)'.._.es7."!.....z..R^....Oo..r....._.U.7.....$.....K7..q-...%.!..i..D.7Nb....FW..#..].......:...l..G.}U......I#...R.Ie.~.....d.m.!...k......}$..SO..U>.......::. .0......T.....q.v..:...H..l........A..............;.W...*Z.B..u...uQ]...{n.R.s..4...|.;...~....d..Myf7_..-...... Q..P..m..W.i..8a........nDU)'a...b8.....C.!./.aD].(...1..!.!........G.....m.....j.^.,.u.......o....B. .;.....m.

<<< skipped >>>

GET /acom?sz=300x250&rdid=2355460&dc=2&di=u2355460&dri=0&dis=0&dai=3&ps=1233x988&coa=at=3&rsi0=300&rsi1=250&pat=17&tn=baiduCustNativeAD&rss1=%23FFFFFF&conBW=1&adp=1&ptt=0&titFF=%25E5%25BE%25AE%25E8%25BD%25AF%25E9%259B%2585%25E9%25BB%2591&titFS=&rss2=%23000000&titSU=0&dcb=BAIDU_UNION_define&dtm=BAIDU_DUP_SETJSONADSLOT&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1456737391159&ti=别闹！教主的结婚照原来是这么拍的……&ari=1&dbv=0&drs=3&pcs=1580x896&pss=1580x3449&cfv=11&cpl=0&chi=1&cce=true&cec=utf-8&tlm=1454050224&ltu=http://VVV.fafala123.com/article/a/201511/17323.html#pxxDb9a=1&ecd=0&psr=1276x846&par=1276x818&pis=-1x-1&ccd=32&cja=true&cmi=0&col=en-us&cdo=-1&tcn=1456737393&qn=3a3da2ebe2e4ff2e&tt=1456737391050.1875.2281.2281 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.fafala123.com/article/a/201511/17323.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=7522433194E1483BE40AA19BC31CFACF:FG=1

HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Encoding: gzip

Content-Length: 7111

Content-Type: text/html

Date: Mon, 29 Feb 2016 09:18:24 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Mon Feb 29 17:18:24 2016

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

X-Xss-Protection: 0

...........=i..Fv.. .H."@....F5.gFZst.H.,....$4 A....X.l%..l..#{U6....Q...UIE...Ur9..#\:.O..y....G3...Mk8.......^w?...._^..u..................E...x......k......s4.YF.O....n..l0j....*c...X....w........\c__Y.8@=}..m.<. ..... .|.......{...O?.3.X*DZ.......f.&U..&.w4..z.4.......SYCyh...:....G......pF&:.;...5.}......74M.6F.c....X......u..,4l..w..=..j..,..j.V...S&Da...1..F..2"....Nz...a....>-v......P.........ud[y.2.."..j.Heal...~82l.`.z.)/....kcUo{..mk......e..o.#....w]..F.v.0..2..34y.5*.....e..-C.-.....s.G..U.i.....c....c.slUa.`.Y.1...^Kw........6..6....r.Kn..#h.t,.(P...i..A......:U...E..<..m .;7..a..(.9.N.S..)u.E...yG....O..........`B.....c..I[.&G~[..4..b..v`..c..L.....Z..W.0y..c.~`..C!..i.d.....w..wQ;....d.......5.e..e..G..m...(...I8./D!n...D....1...)....7..c..{....{..M.5.J...%............C.j..mT6.. k.;....r;.o...B.aK7.uPO.]....hys.q96.uc..>...N=.;|..=.O..i.&...v...U2..)..M..y.x.[...V~d9.bA...B.hm<j.Z.H.n.....D..Q..[..."....n<F.1..)o..!...m.C._....2...$H.G.I[C.^..W..P..cI..s2.......w..P)k....TR....RYX....._Z.&.E[....(..C..OP.W...h..q.F4.^.G... ...AI....%..g........./..L...a...>.......?..*.T..^....[G.w4..y{.-5......l.....{..{.[wW...j..]Ul...Wv.....b..<._]Q..z.............m^.q[............-.6.M...]s.....k....^..6ol.wol^.,_[...n.vix.F.@..wo... [.n..h]u.....kg...(........ ;WWnI}.h9\....n^...G.....fy..{....wuoWh57V[;....^.n.^.n..*..u$s.........4....fB.bk}..e..*...Y.!.. #.jY...T..x..b2@9<y.^u..@..x!.j.#...#.A..(....ch...o.EkBi.8..ec..C$.4.D...i.....iU...NZ.*.<..F3.1..WD1m8m....{JY..U..v.z.(

<<< skipped >>>

GET /fxstatic/images/starLevel/pc/18.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s3.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:32 GMT

Content-Type: image/png

Content-Length: 1580

Connection: keep-alive

Keep-Alive: timeout=20

Last-Modified: Wed, 15 Jul 2015 08:08:41 GMT

Expires: Mon, 14 Mar 2016 13:15:25 GMT

Cache-Control: max-age=2592000

Kugou-Memory: HIT

Accept-Ranges: bytes

.PNG........IHDR...............Db....tEXtSoftware.Adobe ImageReadyq.e<...qiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:84f25697-8665-8440-ab93-67645edd1a8b" xmpMM:DocumentID="xmp.did:50AE905A238F11E58460B583C9546F04" xmpMM:InstanceID="xmp.iid:50AE9059238F11E58460B583C9546F04" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:a8c04915-e617-c74e-9c72-cc8383c4a2db" stRef:documentID="xmp.did:84f25697-8665-8440-ab93-67645edd1a8b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>a6.r...QIDATx..T.k.Q....f....M.XA.j{.Dz.A=. z.?A(b@/B..z.........W.$....x.RA/.K.h.6i.M..y..&&..D.|....7.|.^.7...:&x*.... .Y'..W....`F0"X....d.a...8...Z0..,.K.. 2....".{....!.[...... ........K|A...n.E..!.yU.........m.._..<.a{>.w.Dz...E..Q..]....d.H.#.o.9.}?..3.R.jT.2.D.........h^!}.>......dlv=Sx d.; 6.Ol..&...jD."..A6#6).9.....kR!.c.].;.$......6.I...! b0.8K.Q})I..~^.K..G...j.:...cQ...z.M..D........R.U....H.....*....N&.a;.,..]...u.Cv.....B$./......~.7U..Y...?.....4.<c.......fh....G..)]...........C.y.ur.#.

<<< skipped >>>

GET /clanBadge/20150807/20150807142332126222.gif HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s3.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:32 GMT

Content-Type: image/gif

Content-Length: 239

Connection: keep-alive

Keep-Alive: timeout=20

Last-Modified: Fri, 07 Aug 2015 06:23:32 GMT

Expires: Mon, 14 Mar 2016 13:40:03 GMT

Cache-Control: max-age=2592000

Kugou-Memory: HIT

Accept-Ranges: bytes

GIF89a(..............................$.9.....E.....5......P..!.......,....(........@..8ki..@(.di..QL. .H,.$R..A..|...!...c$..b"..N..H......P.....0H-......}..^[...y.dt..6.."qs|MOE..hij}lDP.w'u.S!Cn".B..</.][ROq6#J.-.%...."9.. '..(*........;....

GET /fxstatic/images/blank.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s3.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:32 GMT

Content-Type: image/png

Content-Length: 949

Connection: keep-alive

Keep-Alive: timeout=20

Last-Modified: Mon, 02 Feb 2015 09:28:17 GMT

Expires: Mon, 14 Mar 2016 13:08:50 GMT

Cache-Control: max-age=2592000

Kugou-Memory: HIT

Accept-Ranges: bytes

.PNG........IHDR.............(.4.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:ECCE9351EB5711E18EF4F84FBAF3F77E" xmpMM:DocumentID="xmp.did:ECCE9352EB5711E18EF4F84FBAF3F77E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ECCE934FEB5711E18EF4F84FBAF3F77E" stRef:documentID="xmp.did:ECCE9350EB5711E18EF4F84FBAF3F77E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..).....PLTE......U..~....tRNS.@..f....IDATx.b`..0.....OmY.....IEND.B`.....

GET /fxstatic/images/room/2014/icon_original_95e3302.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s3.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:33 GMT

Content-Type: image/png

Content-Length: 450

Connection: keep-alive

Keep-Alive: timeout=20

Last-Modified: Sat, 30 Jan 2016 15:11:52 GMT

Expires: Mon, 14 Mar 2016 13:14:07 GMT

Cache-Control: max-age=2592000

Kugou-Memory: HIT

Accept-Ranges: bytes

.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs...........~....&IDAT8.c.o_..a...@X:.....Y[.. ..[......].v...C.'.C.R..=..j.....>c`Xx................3......][.. -...,..p...>......q...."....Q..#.AM.....rd.....1...F.Kd... A......0....bXp......x.....h!...A....B..20.9..za....".K.v:8-....t..^........V!.2f20d..._x.......";... ..K...=.;D..z.. Q.....B..N......G.jz..#.YOE0......IEND.B`.....

GET /fxstatic/images/footer2_fd36cbe.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s3.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:33 GMT

Content-Type: image/png

Content-Length: 13389

Connection: keep-alive

Keep-Alive: timeout=20

Last-Modified: Sat, 30 Jan 2016 15:11:52 GMT

Expires: Mon, 14 Mar 2016 13:16:08 GMT

Cache-Control: max-age=2592000

Kugou-Memory: HIT

Accept-Ranges: bytes

.PNG........IHDR...p..........}......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:4F7114FC292A11E58E24EAB375A74354" xmpMM:DocumentID="xmp.did:4F7114FD292A11E58E24EAB375A74354"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4F7114FA292A11E58E24EAB375A74354" stRef:documentID="xmp.did:4F7114FB292A11E58E24EAB375A74354"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......0.IDATx.....U...gwY........,...5*.1V,$j,Q?bL...Q.. .O...4F.b.........PQ..E.-tX.....;....................vf..6..XkM...BI..[...-.l....%%%.......~~....m.R .....K......\.XI.$.......]...S.d...9$.iA....G..Q.~..40. ........@W...3.......g........%.v.qi..?$..wB5.E=B^....L..tibL.M..g|...b.XZ$.....uiC.nT.....=.....*."..!...r..2H............{..m...@.h...b...Y...J..Sp..<S]...Ya.^w.Np._..Z.vrdw."...fg.J...d....d.L....j..yG.k`.~t.....Y.z..P..w...F.).Z..^_u..^&..Sf.....\.(..<..8...g..6.Y}."$IV......A....G).63a.J".....3..G.UZ....@.g..{`]....[]....1y>r.X...Im..s...D..............).c.......{`,.&gt

<<< skipped >>>

GET /fxstatic/images/loading.gif HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1028630

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s3.fx.kgimg.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: nginx

Date: Mon, 29 Feb 2016 09:18:34 GMT

Content-Type: image/gif

Content-Length: 875

Connection: keep-alive

Keep-Alive: timeout=20

Last-Modified: Mon, 02 Feb 2015 09:28:17 GMT

Expires: Mon, 14 Mar 2016 13:20:00 GMT

Cache-Control: max-age=2592000

Kugou-Memory: HIT

Accept-Ranges: bytes

GIF89a..........aaa..........................................................................................!..NETSCAPE2.0.....!..Built with GIF Movie Gear 4.0.!..Made by AjaxLoad.info.!.......,..........P .di..0.l!*.`.......5......[..<.i.P.........),.IZ..$b..H..8..5&.x.5k <...y....B.!.......,..........h .G..h*.....@$E}..........eh..... @..L...cQG..B...P5. <.5UdQ. ."..g.0......Ak..#A..<P70.<...0.Y.8*...#!.!.......,..........` .#..(..H*..P..-..1.3..:C.1K.H....H..$..y........j...WD@..Y..0H...,0.B...k.J...U?5w..|$k.\)...!.!.......,..........R .di.. ..1..@..C.....k....!B.`?......#E.8zBQX.c.m.v..". ...`.`..UF..r....p.).f..!.!.......,..........` .di..@.E1....m]....H....(....4. .(,..F!aH.XS...m5...bDH.....ab,..%.p3.c.#.'...".467P&*X/.(..$!.!.......,.........._ .di..H..@..@4....A"I.....`.>n..I0$....K7..H,...-t.*..E.....-.`..`....1.....@..C7h./1.f.\)..&!.;.........HTTP/1.1 200 OK..Server: nginx..Date: Mon, 29 Feb 2016 09:18:34 GMT..Content-Type: image/gif..Content-Length: 875..Connection: keep-alive..Keep-Alive: timeout=20..Last-Modified: Mon, 02 Feb 2015 09:28:17 GMT..Expires: Mon, 14 Mar 2016 13:20:00 GMT..Cache-Control: max-age=2592000..Kugou-Memory: HIT..Accept-Ranges: bytes..GIF89a..........aaa..........................................................................................!..NETSCAPE2.0.....!..Built with GIF Movie Gear 4.0.!..Made by AjaxLoad.info.!.......,..........P .di..0.l!*.`.......5......[..<.i.P.........),.IZ..$b..H..8..5&.x.5k <...y....B.!.......,..........h .G..h*

<<< skipped >>>

Map

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps

picview.exe_1064:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

@.reloc

@.reloc

\$4 \$,

\$4 \$,

QSSh@

QSSh@

8%u,j

8%u,j

Mj.hl3E

Mj.hl3E

MD5 part of OpenSSL 1.0.2 22 Jan 2015

MD5 part of OpenSSL 1.0.2 22 Jan 2015

RegOpenKeyTransactedW

RegOpenKeyTransactedW

RegCreateKeyTransactedW

RegCreateKeyTransactedW

RegDeleteKeyTransactedW

RegDeleteKeyTransactedW

FRegDeleteKeyExW

FRegDeleteKeyExW

\Data\tongjiData.ini

\Data\tongjiData.ini

adurl

adurl

windows936

windows936

windows932

windows932

windows874

windows874

windows1257

windows1257

windows1256

windows1256

windows1255

windows1255

windows1254

windows1254

windows1253

windows1253

windows1252

windows1252

windows1251

windows1251

windows1250

windows1250

Invalid or unsupported charset:

Invalid or unsupported charset:

kernel32.dll

kernel32.dll

F:\boost_1_55_0\boost/property_tree/detail/ptree_implementation.hpp

F:\boost_1_55_0\boost/property_tree/detail/ptree_implementation.hpp

F:\boost_1_55_0\boost/property_tree/detail/json_parser_read.hpp

F:\boost_1_55_0\boost/property_tree/detail/json_parser_read.hpp

F:\boost_1_55_0\boost/property_tree/string_path.hpp

F:\boost_1_55_0\boost/property_tree/string_path.hpp

0.0.0.0

0.0.0.0

%s {%s}

%s {%s}

d-d-d d:d:d

d-d-d d:d:d

\\.\PhysicalDrive%d

\\.\PhysicalDrive%d

\\.\Scsi%d:

\\.\Scsi%d:

urllist

urllist

D:\common_app\PicView\bin\release\picview.pdb

D:\common_app\PicView\bin\release\picview.pdb

WINMM.dll

WINMM.dll

KERNEL32.dll

KERNEL32.dll

EnumWindows

EnumWindows

USER32.dll

USER32.dll

GDI32.dll

GDI32.dll

COMDLG32.dll

COMDLG32.dll

RegOpenKeyExW

RegOpenKeyExW

RegCreateKeyExW

RegCreateKeyExW

RegCloseKey

RegCloseKey

RegCreateKeyW

RegCreateKeyW

RegDeleteKeyW

RegDeleteKeyW

RegOpenKeyW

RegOpenKeyW

RegQueryInfoKeyW

RegQueryInfoKeyW

RegEnumKeyExW

RegEnumKeyExW

ADVAPI32.dll

ADVAPI32.dll

ShellExecuteW

ShellExecuteW

SHELL32.dll

SHELL32.dll

ole32.dll

ole32.dll

OLEAUT32.dll

OLEAUT32.dll

MSVCP100.dll

MSVCP100.dll

PathIsURLW

PathIsURLW

SHLWAPI.dll

SHLWAPI.dll

gdiplus.dll

gdiplus.dll

?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z

?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z

?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ

?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ

?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ

?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ

?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z

?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z

DuiLib_u.dll

DuiLib_u.dll

MSVCR100.dll

MSVCR100.dll

_amsg_exit

_amsg_exit

_wcmdln

_wcmdln

_crt_debugger_hook

_crt_debugger_hook

InternetOpenUrlW

InternetOpenUrlW

HttpQueryInfoW

HttpQueryInfoW

InternetCrackUrlW

InternetCrackUrlW

HttpSendRequestW

HttpSendRequestW

HttpAddRequestHeadersW

HttpAddRequestHeadersW

HttpOpenRequestW

HttpOpenRequestW

WININET.dll

WININET.dll

SensApi.dll

SensApi.dll

IPHLPAPI.DLL

IPHLPAPI.DLL

GetProcessHeap

GetProcessHeap

.?AVwindows_file_codecvt@@

.?AVwindows_file_codecvt@@

.?AVCFrmTrayWebAD@@

.?AVCFrmTrayWebAD@@

.?AUDWebBrowserEvents2@@

.?AUDWebBrowserEvents2@@

.?AVCWebBrwoser2EventListener@@

.?AVCWebBrwoser2EventListener@@

.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@

.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@

.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@

.?AVHttpContent@@

.?AVHttpContent@@

.?AVCFrmAdvertisementWeb@@

.?AVCFrmAdvertisementWeb@@

.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@D@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@D@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@D@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@D@classic@spirit@boost@@U?$optional@V?$chset@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@D@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@D@classic@spirit@boost@@U?$optional@V?$chset@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@

.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@

.?AUIHttpSecurity@@

.?AUIHttpSecurity@@

.?AVCXWebBrowser@@

.?AVCXWebBrowser@@

cOXY/P.Z0.0.QR00/ZPP0000000/0PPZR.BI@/DE0,

cOXY/P.Z0.0.QR00/ZPP0000000/0PPZR.BI@/DE0,

2&2[2`2|2

2&2[2`2|2

6-626

6-626

? ?$?(?,?

? ?$?(?,?

$0(0,0004080

$0(0,0004080

3*4/444:4

3*4/444:4

1 1$1(1,101

1 1$1(1,101

7%7&858{8

7%7&858{8

7"767;7~7

7"767;7~7

; ;$;(;,;0;4;8;

; ;$;(;,;0;4;8;

; ;(;0;

; ;(;0;

2$2,242@2

2$2,242@2

Advapi32.dll

Advapi32.dll

HKEY_CLASSES_ROOT

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

HKEY_CURRENT_CONFIG

\internet explorer\iexplore.exe

\internet explorer\iexplore.exe

%s::%d InitConfig Error

%s::%d InitConfig Error

FrmTrayWebAD

FrmTrayWebAD

iexplore.exe

iexplore.exe

FrmTrayWebAD.xml

FrmTrayWebAD.xml

FrmWebPlay

FrmWebPlay

shell.Explorer.2

shell.Explorer.2

OKS.exe

OKS.exe

picbus.exe

picbus.exe

Data\img.ico

Data\img.ico

PicView.%s

PicView.%s

Software\Classes\%s

Software\Classes\%s

Software\Classes\%s\DefaultIcon

Software\Classes\%s\DefaultIcon

Software\Classes\%s\Shell

Software\Classes\%s\Shell

Software\Classes\%s\Shell\Open

Software\Classes\%s\Shell\Open

Software\Classes\%s\Shell\Open\Command

Software\Classes\%s\Shell\Open\Command

%s "%%1"

%s "%%1"

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\OpenWithList

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\OpenWithList

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\OpenWithProgids

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\OpenWithProgids

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\UserChoice

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\UserChoice

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s

Dump generation request %s

Dump generation request %s

hXXp://load.hiv-hiv.com/api/tongji2

hXXp://load.hiv-hiv.com/api/tongji2

hXXp://as.hiv-hiv.com/API/GetAdvConfig?param=v1

hXXp://as.hiv-hiv.com/API/GetAdvConfig?param=v1

hXXp://tc.hiv-hiv.com/api/tongji4?param=v1

hXXp://tc.hiv-hiv.com/api/tongji4?param=v1

Software\Microsoft\Windows\CurrentVersion\Run

Software\Microsoft\Windows\CurrentVersion\Run

hXXp://sd.hiv-hiv.com/api/tongji3

hXXp://sd.hiv-hiv.com/api/tongji3

firsturl

firsturl

hXXp://tongji.hiv-hiv.com/default/index.html

hXXp://tongji.hiv-hiv.com/default/index.html

%s%s\%d.ico

%s%s\%d.ico

%s::%d GetTempPath fail.

%s::%d GetTempPath fail.

AhXXp://updatever.hiv-hiv.com/tj2.ashx

AhXXp://updatever.hiv-hiv.com/tj2.ashx

hXXp://updatever.hiv-hiv.com/tj4.ashx

hXXp://updatever.hiv-hiv.com/tj4.ashx

hXXp://updatever.hiv-hiv.com/tj1.ashx

hXXp://updatever.hiv-hiv.com/tj1.ashx

hXXp://updatever.hiv-hiv.com/tj7.ashx

hXXp://updatever.hiv-hiv.com/tj7.ashx

WinFileMenu.xml

WinFileMenu.xml

res.rs

res.rs

*.jpeg;*.jpg;*.png;*.bmp

*.jpeg;*.jpg;*.png;*.bmp

WinMainFrame.xml

WinMainFrame.xml

WinOperMenu.xml

WinOperMenu.xml

0X:X:X:X:X:X

0X:X:X:X:X:X

Data\tongjiData.ini

Data\tongjiData.ini

Software\Microsoft\Windows NT\CurrentVersion

Software\Microsoft\Windows NT\CurrentVersion

t%s\%s

t%s\%s

hXXp://VVV.baidu.com

hXXp://VVV.baidu.com

1.15.0.1

1.15.0.1

2000-01-01

2000-01-01

logger.log

logger.log

Mozilla/4.0 (Compatible; MSIE6.0;)

Mozilla/4.0 (Compatible; MSIE6.0;)

hXXp://

hXXp://

HTTP/1.0

HTTP/1.0

FrmAdvert.xml

FrmAdvert.xml

kF:\boost_1_55_0\boost/smart_ptr/shared_ptr.hpp

kF:\boost_1_55_0\boost/smart_ptr/shared_ptr.hpp

F:\boost_1_55_0\boost/optional/optional.hpp

F:\boost_1_55_0\boost/optional/optional.hpp

F:\boost_1_55_0\boost/smart_ptr/scoped_ptr.hpp

F:\boost_1_55_0\boost/smart_ptr/scoped_ptr.hpp

F:\boost_1_55_0\boost/spirit/home/classic/core/impl/match.ipp

F:\boost_1_55_0\boost/spirit/home/classic/core/impl/match.ipp

val.is_initialized()

val.is_initialized()

c.stack.size() >= 1

c.stack.size() >= 1

DWebAdWin

DWebAdWin

AppEvents\Schemes\Apps\Explorer\Navigating\.Current

AppEvents\Schemes\Apps\Explorer\Navigating\.Current

CWebAdWinClose

CWebAdWinClose

360se.exe

360se.exe

TheWorld.exe

TheWorld.exe

UCBrowser.exe

UCBrowser.exe

baiduBrowser.exe

baiduBrowser.exe

SogouExplorer.exe

SogouExplorer.exe

QQBrowser.exe

QQBrowser.exe

Maxthon.exe

Maxthon.exe

chrome.exe

chrome.exe

firefox.exe

firefox.exe

lvseie.exe

lvseie.exe

360chrome.exe

360chrome.exe

liebao.exe

liebao.exe

safari.exe

safari.exe

2345Explorer.exe

2345Explorer.exe

Juzi.exe

Juzi.exe

krBrowser.exe

krBrowser.exe

TaoBrowser.exe

TaoBrowser.exe

dbghelp.dll

dbghelp.dll

rpcrt4.dll

rpcrt4.dll

%s\%s.dmp

%s\%s.dmp

x-x-x-xx-xxxxxx

x-x-x-xx-xxxxxx

OKS.exe_916:

.idata

.idata

.rdata

.rdata

`.rsrc

`.rsrc

kernel32.dll

kernel32.dll

Windows

Windows

MSWHEEL_ROLLMSG

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

MSH_SCROLL_LINES_MSG

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

oleaut32.dll

oleaut32.dll

EVariantBadIndexError

EVariantBadIndexError

ssShift

ssShift

htKeyword

htKeyword

EInvalidOperation

EInvalidOperation

u%CNu

u%CNu

%s[%d]

%s[%d]

%s_%d

%s_%d

EInvalidGraphicOperation

EInvalidGraphicOperation

USER32.DLL

USER32.DLL

comctl32.dll

comctl32.dll

uxtheme.dll

uxtheme.dll

IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")

IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")

JumpID("","%s")

JumpID("","%s")

TKeyEvent

TKeyEvent

TKeyPressEvent

TKeyPressEvent

HelpKeyword|XA

HelpKeyword|XA

crSQLWait

crSQLWait

%s (%s)

%s (%s)

imm32.dll

imm32.dll

AutoHotkeys

AutoHotkeys

AutoHotkeys$

AutoHotkeys$

ssHotTrack

ssHotTrack

TWindowState

TWindowState

poProportional

poProportional

TWMKey

TWMKey

KeyPreview

KeyPreview

WindowState

WindowState

OnKeyDown

OnKeyDown

OnKeyPressD

OnKeyPressD

OnKeyUph

OnKeyUph

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

vcltest3.dll

vcltest3.dll

User32.dll

User32.dll

getservbyport

getservbyport

WSAAsyncGetServByPort

WSAAsyncGetServByPort

WSAJoinLeaf

WSAJoinLeaf

WS2_32.DLL

WS2_32.DLL

127.0.0.1

127.0.0.1

TIdSocketListWindows

TIdSocketListWindows

TIdStackWindowsU

TIdStackWindowsU

IdStackWindows

IdStackWindows

Uh.hE

Uh.hE

%s, %.2d %s %.4d %s %s

%s, %.2d %s %.4d %s %s

%s, %d %s %d %s %s

%s, %d %s %d %s %s

ftpTransfer

ftpTransfer

ftpReady

ftpReady

ftpAborted

ftpAborted

ClientPortMin

ClientPortMin

ClientPortMax

ClientPortMax

Port`

Port`

EIdCanNotBindPortInRange

EIdCanNotBindPortInRange

EIdInvalidPortRangeSVW

EIdInvalidPortRangeSVW

saUsernamePassword

saUsernamePassword

Password

Password

Port

Port

0.0.0.1

0.0.0.1

TIdTCPConnection

TIdTCPConnection

IdTCPConnection

IdTCPConnection

EIdTCPConnectionError

EIdTCPConnectionError

TIdTCPClient

TIdTCPClient

IdTCPClient

IdTCPClient

BoundPort

BoundPort

PortU

PortU

password

password

Password

Password

IdHTTPHeaderInfo

IdHTTPHeaderInfo

ProxyPassword

ProxyPassword

ProxyPort

ProxyPort

Mozilla/3.0 (compatible; Indy Library)

Mozilla/3.0 (compatible; Indy Library)

libeay32.dll

libeay32.dll

ssleay32.dll

ssleay32.dll

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_file

SSL_get_peer_certificate

SSL_get_peer_certificate

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_check_private_key

SSL_CTX_check_private_key

X509_STORE_CTX_get_current_cert

X509_STORE_CTX_get_current_cert

des_set_key

des_set_key

sslvrfFailIfNoPeerCert

sslvrfFailIfNoPeerCert

TPasswordEvent

TPasswordEvent

Certificate

Certificate

RootCertFile

RootCertFile

CertFile

CertFile

KeyFileHIF

KeyFileHIF

OnGetPassword

OnGetPassword

EIdOSSLLoadingRootCertError

EIdOSSLLoadingRootCertError

EIdOSSLLoadingCertErrorxUF

EIdOSSLLoadingCertErrorxUF

EIdOSSLLoadingKeyError

EIdOSSLLoadingKeyError

CommentURL

CommentURL

TIdHTTPMethod

TIdHTTPMethod

IdHTTP

IdHTTP

TIdHTTPOption

TIdHTTPOption

TIdHTTPOptions

TIdHTTPOptions

TIdHTTPProtocolVersion

TIdHTTPProtocolVersion

TIdHTTPOnHeadersAvailable

TIdHTTPOnHeadersAvailable

TIdHTTPOnRedirectEvent

TIdHTTPOnRedirectEvent

TIdHTTPResponse

TIdHTTPResponse

TIdHTTPResponse(

TIdHTTPResponse(

TIdHTTPRequest

TIdHTTPRequest

TIdHTTPProtocol

TIdHTTPProtocol

TIdCustomHTTP

TIdCustomHTTP

TIdHTTP

TIdHTTP

TIdHTTP$

TIdHTTP$

HTTPOptions

HTTPOptions

PortX

PortX

EIdHTTPProtocolException

EIdHTTPProtocolException

HTTPS

HTTPS

https

https

This request method is supported in HTTP 1.1

This request method is supported in HTTP 1.1

HTTP/1.0 200 OK

HTTP/1.0 200 OK

HTTP/

HTTP/

%s, ClassID: %s

%s, ClassID: %s

ole32.dll

ole32.dll

PSAPI.dll

PSAPI.dll

SPHttp

SPHttp

KERNEL32.DLL

KERNEL32.DLL

\Windows\

\Windows\

iexplore.exe

iexplore.exe

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

\Rec.DAT

\Rec.DAT

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

hXXp://

hXXp://

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

\SOSAVE.DAT

\SOSAVE.DAT

Data\tongjiData.ini

Data\tongjiData.ini

\SOSAVE.dll

\SOSAVE.dll

0123456789

0123456789

picview.exe

picview.exe

TPSC.dll

TPSC.dll

/db/tpck/db.zip

/db/tpck/db.zip

hXXp://update.yinyue.fm

hXXp://update.yinyue.fm

?456789:;

?456789:;

!"#$%&'()* ,-./0123

!"#$%&'()* ,-./0123

.Mg*i;

.Mg*i;

n.pPn$S

n.pPn$S

w%sWp

w%sWp

npxWnoxßn

npxWnoxßn

KWindows

KWindows

UrlMon

UrlMon

0IdHTTPHeaderInfo

0IdHTTPHeaderInfo

IdTCPServer

IdTCPServer

IdTCPStream

IdTCPStream

Font.Charset

Font.Charset

Font.Color

Font.Color

Font.Height

Font.Height

Font.Name

Font.Name

Font.Style

Font.Style

Icon.Data

Icon.Data

ProxyParams.BasicAuthentication

ProxyParams.BasicAuthentication

ProxyParams.ProxyPort

ProxyParams.ProxyPort

Request.ContentLength

Request.ContentLength

Request.ContentRangeEnd

Request.ContentRangeEnd

Request.ContentRangeStart

Request.ContentRangeStart

Request.Accept

Request.Accept

Request.BasicAuthentication

Request.BasicAuthentication

Request.UserAgent

Request.UserAgent

7Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

7Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

iphlpapi.dll

iphlpapi.dll

GetKeyboardType

GetKeyboardType

RegOpenKeyA

RegOpenKeyA

version.dll

version.dll

MapVirtualKeyA

MapVirtualKeyA

GetKeyboardLayout

GetKeyboardLayout

EnumThreadWindows

EnumThreadWindows

ActivateKeyboardLayout

ActivateKeyboardLayout

GetCPInfo

GetCPInfo

?G*.GKI

?G*.GKI

SetWindowsHookExA

SetWindowsHookExA

gdi32.dll

gdi32.dll

GetKeyState

GetKeyState

EnumWindows

EnumWindows

user32.dll

user32.dll

UnhookWindowsHookEx

UnhookWindowsHookEx

'%XWw

'%XWw

.ip ]

.ip ]

D(%Dn

D(%Dn

Jur%uY0

Jur%uY0

.hR3

.hR3

A

A

@wAjU%d@]-

@wAjU%d@]-

r@%DJ

r@%DJ

ý]y

ý]y

(#%4x

(#%4x

w-tu}

w-tu}

.We!@

.We!@

2*%sM

2*%sM

'.ZL\Qh

'.ZL\Qh

@5%dv

@5%dv

LoadKeyboardLayoutA

LoadKeyboardLayoutA

GetKeyNameTextA

GetKeyNameTextA

InternetOpenUrlA

InternetOpenUrlA

GetKeyboardLayoutList

GetKeyboardLayoutList

The ordinal %u could not be located in the dynamic link library %s

The ordinal %u could not be located in the dynamic link library %s

GetWindowsDirectoryA

GetWindowsDirectoryA

wininet.dll

wininet.dll

hThe procedure entry point %s could not be located in the dynamic link library %s

hThe procedure entry point %s could not be located in the dynamic link library %s

RegCloseKey

RegCloseKey

.GkNZ

.GkNZ

advapi32.dll

advapi32.dll

.eYth

.eYth

MLkernel32.dll

MLkernel32.dll

shell32.dll

shell32.dll

,%S&|

,%S&|

RegCreateKeyExA

RegCreateKeyExA

GetKeyboardState

GetKeyboardState

ShellExecuteA

ShellExecuteA

SetViewportOrgEx

SetViewportOrgEx

RegOpenKeyExA

RegOpenKeyExA

SELECT * FROM __InstanceOperationEvent WITHIN 1 WHERE TargetInstance ISA

SELECT * FROM __InstanceOperationEvent WITHIN 1 WHERE TargetInstance ISA

1.0.0.0

1.0.0.0

1.0.0.20150912

1.0.0.20150912

/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters

/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters

DCOM not installedNUnable to retrieve a pointer to a running object registered with OLE for %s/%s

DCOM not installedNUnable to retrieve a pointer to a running object registered with OLE for %s/%s

Error creating SSL context. Could not load root certificate.

Error creating SSL context. Could not load root certificate.

Could not load certificate.#Could not load key, check password.

Could not load certificate.#Could not load key, check password.

SSL status: "%s"

SSL status: "%s"

OLE error %.8x.Method '%s' not supported by automation object

OLE error %.8x.Method '%s' not supported by automation object

5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

Command not supported.

Command not supported.

Address type not supported.$Error accepting connection with SSL.

Address type not supported.$Error accepting connection with SSL.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Operation already in progress.

Operation already in progress.

Socket operation on non-socket.

Socket operation on non-socket.

Protocol not supported.

Protocol not supported.

Socket type not supported."Operation not supported on socket.

Socket type not supported."Operation not supported on socket.

Protocol family not supported.0Address family not supported by protocol family.

Protocol family not supported.0Address family not supported by protocol family.

Chunk StartedDThis authentication method is already registered with class name %s.

Chunk StartedDThis authentication method is already registered with class name %s.

%s is not a valid service.

%s is not a valid service.

Socket Error # %d

Socket Error # %d

%s is not a valid IP address.

%s is not a valid IP address.

Operation would block.

Operation would block.

Operation now in progress.

Operation now in progress.

File "%s" not found1Only one TIdAntiFreeze can exist per application."%d: Circular links are not allowed

File "%s" not found1Only one TIdAntiFreeze can exist per application."%d: Circular links are not allowed

No data to read.$Can not bind in port range (%d - %d)

No data to read.$Can not bind in port range (%d - %d)

Invalid Port Range (%d - %d)

Invalid Port Range (%d - %d)

Max line length exceeded.*Error on call Winsock2 library function %s&Error on loading Winsock2 library (%s)

Max line length exceeded.*Error on call Winsock2 library function %s&Error on loading Winsock2 library (%s)

Resolving hostname %s.

Resolving hostname %s.

Connecting to %s.

Connecting to %s.

No help keyword specified.

No help keyword specified.

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.4Failed attempting to retrieve time zone information.

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.4Failed attempting to retrieve time zone information.

No help found for %s#No context-sensitive help installed$No topic-based help system installed

No help found for %s#No context-sensitive help installed$No topic-based help system installed

Alt Clipboard does not support Icons/Menu '%s' is already being used by another form

Alt Clipboard does not support Icons/Menu '%s' is already being used by another form

Cannot focus a disabled or invisible window!Control '%s' has no parent window

Cannot focus a disabled or invisible window!Control '%s' has no parent window

Thread creation error: %s

Thread creation error: %s

Thread Error: %s (%d)

Thread Error: %s (%d)

Unsupported clipboard format

Unsupported clipboard format

$''%s'' is not a valid component name

$''%s'' is not a valid component name

Invalid property value List capacity out of bounds (%d)

Invalid property value List capacity out of bounds (%d)

List count out of bounds (%d)

List count out of bounds (%d)

List index out of bounds (%d) Out of memory while expanding memory stream

List index out of bounds (%d) Out of memory while expanding memory stream

Error reading %s%s%s: %s

Error reading %s%s%s: %s

Resource %s not found

Resource %s not found

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

Property %s does not exist

Property %s does not exist

Ancestor for '%s' not found

Ancestor for '%s' not found

Cannot assign a %s to a %s

Cannot assign a %s to a %s

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

Class %s not found

A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates

A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates

Cannot create file "%s". %s

Cannot create file "%s". %s

Cannot open file "%s". %s

Cannot open file "%s". %s

Unable to write to %s

Unable to write to %s

Operation not supported

Operation not supported

External exception %x

External exception %x

Interface not supported

Interface not supported

%s (%s, line %d)

%s (%s, line %d)

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

System Error. Code: %d.

1Format '%s' invalid or incompatible with argument

1Format '%s' invalid or incompatible with argument

No argument for format '%s'"Variant method calls not supported

No argument for format '%s'"Variant method calls not supported

Invalid variant operation%Invalid variant operation (%s%.8x)

Invalid variant operation%Invalid variant operation (%s%.8x)

%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Integer overflow Invalid floating point operation

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

Invalid class typecast0Access violation at address %p. %s of address %p

Privileged instruction(Exception %s in module %s at %p.

Privileged instruction(Exception %s in module %s at %p.

!'%s' is not a valid integer value('%s' is not a valid floating point value

!'%s' is not a valid integer value('%s' is not a valid floating point value

'%s' is not a valid date

'%s' is not a valid date

'%s' is not a valid time!'%s' is not a valid date and time

'%s' is not a valid time!'%s' is not a valid date and time

I/O error %d

I/O error %d

OKS.exe_916_rwx_0049D000_00001000:

EnumWindows

EnumWindows

comctl32.dll

comctl32.dll

user32.dll

user32.dll

UnhookWindowsHookEx

UnhookWindowsHookEx

OKS.exe_916_rwx_004D8000_00002000:

LoadKeyboardLayoutA

LoadKeyboardLayoutA

GetKeyNameTextA

GetKeyNameTextA

ole32.dll

ole32.dll

InternetOpenUrlA

InternetOpenUrlA

GetKeyboardLayoutList

GetKeyboardLayoutList

The ordinal %u could not be located in the dynamic link library %s

The ordinal %u could not be located in the dynamic link library %s

picbus.exe_928:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

@.reloc

@.reloc

MD5 part of OpenSSL 1.0.2 22 Jan 2015

MD5 part of OpenSSL 1.0.2 22 Jan 2015

windows936

windows936

windows932

windows932

windows874

windows874

windows1257

windows1257

windows1256

windows1256

windows1255

windows1255

windows1254

windows1254

windows1253

windows1253

windows1252

windows1252

windows1251

windows1251

windows1250

windows1250

Invalid or unsupported charset:

Invalid or unsupported charset:

kernel32.dll

kernel32.dll

%s {%s}

%s {%s}

d-d-d d:d:d

d-d-d d:d:d

D:\common_app\third_party\libadclick\Release\tqbus.pdb

D:\common_app\third_party\libadclick\Release\tqbus.pdb

WINMM.dll

WINMM.dll

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

RegOpenKeyW

RegOpenKeyW

RegCloseKey

RegCloseKey

ADVAPI32.dll

ADVAPI32.dll

ole32.dll

ole32.dll

OLEAUT32.dll

OLEAUT32.dll

MSVCP100.dll

MSVCP100.dll

MSVCR100.dll

MSVCR100.dll

_amsg_exit

_amsg_exit

_wcmdln

_wcmdln

_crt_debugger_hook

_crt_debugger_hook

PathIsURLW

PathIsURLW

SHLWAPI.dll

SHLWAPI.dll

UrlMkSetSessionOption

UrlMkSetSessionOption

urlmon.dll

urlmon.dll

SHELL32.dll

SHELL32.dll

InternetOpenUrlW

InternetOpenUrlW

InternetCrackUrlW

InternetCrackUrlW

HttpSendRequestW

HttpSendRequestW

HttpAddRequestHeadersW

HttpAddRequestHeadersW

HttpQueryInfoW

HttpQueryInfoW

HttpOpenRequestW

HttpOpenRequestW

WININET.dll

WININET.dll

SensApi.dll

SensApi.dll

.?AUIHttpSecurity@@

.?AUIHttpSecurity@@

.?AVCXWebBrowser@@

.?AVCXWebBrowser@@

.?AVHttpContent@@

.?AVHttpContent@@

4$5(5,50545

4$5(5,50545

7 7$7(7,7074787

7 7$7(7,7074787

3 3$3(3,383

3 3$3(3,383

5 5$5(5,5054585

5 5$5(5,5054585

; ;$;(;,;0;4;8;

; ;$;(;,;0;4;8;

hXXp://asad.lczchina.com/api/tongji5

hXXp://asad.lczchina.com/api/tongji5

%s::%d InitConfig Error

%s::%d InitConfig Error

Shcore.dll

Shcore.dll

\internet explorer\iexplore.exe

\internet explorer\iexplore.exe

document.body.onunload = null;

document.body.onunload = null;

window.onbeforeonunload = null;

window.onbeforeonunload = null;

[URL]:%s.[AdID]:%s.[MaxClick]:%d.[InsertPos]:%d.[PopProbability]:%d.[TaskType]:%d.[UserAgent]:%s.[PixelX]:%d.[PixelY]:%d.[Weight]:%d.

[URL]:%s.[AdID]:%s.[MaxClick]:%d.[InsertPos]:%d.[PopProbability]:%d.[TaskType]:%d.[UserAgent]:%s.[PixelX]:%d.[PixelY]:%d.[Weight]:%d.

AppEvents\Schemes\Apps\Explorer\Navigating\.Current

AppEvents\Schemes\Apps\Explorer\Navigating\.Current

@logger.log

@logger.log

Mozilla/4.0 (Compatible; MSIE6.0;)

Mozilla/4.0 (Compatible; MSIE6.0;)

hXXp://

hXXp://

HTTP/1.0

HTTP/1.0