Overview

URLhttp://ttlad.com/
IP61.135.129.89
ASNAS4808 CNCGROUP IP network China169 Beijing Province Network
Location China
Report completed2012-11-07 12:47:52 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-07 12:47:12 61.135.129.89 urlQuery Client3FILEMAGIC Macromedia Flash data,
2012-11-07 12:47:13 61.135.129.89 urlQuery Client3FILEMAGIC Macromedia Flash data,
2012-11-07 12:47:13 61.135.129.89 urlQuery Client3FILEMAGIC Macromedia Flash data,
2012-11-07 12:47:13 61.135.129.89 urlQuery Client3FILEMAGIC Macromedia Flash data,
2012-11-07 12:47:13 61.135.129.89 urlQuery Client3FILEMAGIC Macromedia Flash data,
2012-11-07 12:47:13 61.135.129.89 urlQuery Client3FILEMAGIC Macromedia Flash data,
2012-11-07 12:47:13 61.135.129.89 urlQuery Client3FILEMAGIC Macromedia Flash data,
2012-11-07 12:47:14 61.135.129.89 urlQuery Client3FILEMAGIC Macromedia Flash data,
2012-11-07 12:47:14 61.135.129.89 urlQuery Client3FILEMAGIC Macromedia Flash data,
2012-11-07 12:47:21 113.107.76.31 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-07 12:47:25 113.107.76.31 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-07 12:47:28 123.125.115.43 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-07 12:47:23 123.125.115.126 urlQuery Client1BROWSER-IE Microsoft Internet Explorer userdata behavior memory corruption attempt


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 61.135.129.89

Date Alerts / IDS URL IP
2013-02-11 23:39:270 / 3http://ttlad.com/yungao/gongsijian.htm61.135.129.89
2013-02-11 22:15:320 / 2http://ttlad.com/it/right4.htm61.135.129.89
2013-02-11 21:49:180 / 5http://ttlad.com/it/itkuangjia.htm61.135.129.89
2013-02-11 16:34:070 / 3http://ttlad.com/it/right6.htm61.135.129.89
2013-02-11 13:31:200 / 3http://ttlad.com/yungao/kuangjia.htm61.135.129.89
2013-01-29 08:01:050 / 2http://ttlad.com/it/right2.htm61.135.129.89

Last 6 reports on ASN: AS4808 CNCGROUP IP network China169 Beijing Province Network

Date Alerts / IDS URL IP
2013-02-14 23:48:380 / 0http://www.haohuodong.cn/plus/erraddsave.php?aid=302182.18.22.77
2013-02-14 22:11:370 / 1http://www.hao123.com/api/forecast?callback=jQuery172024835031942066715_1360789684341123.125.112.45
2013-02-14 22:11:280 / 1http://s0.hao123img.com/res/js/track.js?37799761.135.185.29
2013-02-14 21:29:190 / 0http://123.123.123.123123.123.123.123
2013-02-14 21:28:340 / 1http://s0.hao123img.com/res/js/track.js?37799661.135.185.29
2013-02-14 21:28:190 / 1http://www.hao123.com/api/forecast?callback=jQuery17207460664056206947_1360786926736123.125.112.45

Last 6 reports on domain: ttlad.com

Date Alerts / IDS URL IP
2013-02-11 23:39:270 / 3http://ttlad.com/yungao/gongsijian.htm61.135.129.89
2013-02-11 22:15:320 / 2http://ttlad.com/it/right4.htm61.135.129.89
2013-02-11 21:49:180 / 5http://ttlad.com/it/itkuangjia.htm61.135.129.89
2013-02-11 16:34:070 / 3http://ttlad.com/it/right6.htm61.135.129.89
2013-02-11 13:31:200 / 3http://ttlad.com/yungao/kuangjia.htm61.135.129.89
2013-01-29 08:01:050 / 2http://ttlad.com/it/right2.htm61.135.129.89



JavaScript

Executed Scripts (47)


Executed Evals (4)

#1 JavaScript::Eval (size: 3849, repeated: 1)

(function() {
    var aa_url = window.union178_url;
    var _has2ap = 0;
    var ua = navigator.userAgent;
    var browser = {
        ie: /msie/i.test(ua),
        ie6: /msie 6/i.test(ua),
        ie7: /msie 7/i.test(ua),
        ie8: /msie 8/i.test(ua),
        ie9: /msie 9/i.test(ua),
        360: /360se/i.test(ua),
        sogou: /;?se.+?MetaSr/i.test(ua),
        maxthon: /Maxthon/i.test(ua),
        tt: /TencentTraveler/i.test(ua),
        ff: /firefox/i.test(ua),
        webkit: /AppleWebKit/i.test(ua),
        opera: /Opera/i.test(ua),
        qqbrowser: /QQBrowser/i.test(ua),
        theworld: /Theworld/i.test(ua)
    };

    function event(e, event, func, act) {
        if (browser.ie) e[act === undefined ? 'attachEvent' : 'detachEvent']('on' + event, func);
        else e[act === undefined ? 'addEventListener' : 'removeEventListener'](event, func, false)
    }
    function pop(url, param) {
        if (!document.body) {
            return setTimeout(function() {
                pop(url, param)
            }, 13)
        }
        try {
            if (browser['webkit'] && browser['maxthon']) {
                if (!func(url)) {
                    a_pop(url)
                }
            } else if (browser['tt']) {
                try {
                    object_pop(url)
                } catch (e) {
                    a_pop(url)
                }
            } else if (browser['sogou']) {
                if (!func(url)) {
                    a_pop(url)
                }
            } else if (browser['webkit'] && browser['qqbrowser']) {
                if (!func(url)) {
                    click_pop(url)
                }
            } else if (browser['webkit'] || browser['opera']) {
                a_pop(url)
            } else if (browser['theworld'] && browser.ie6) {
                if (!object_pop2(url)) {
                    a_pop(url)
                }
            } else if (browser['theworld'] && browser.ie8) {
                if (!func(url)) {
                    try {
                        object_pop(url)
                    } catch (e) {
                        click_pop(url)
                    }
                }
            } else if (browser.ie6) {
                if (!func(url)) {
                    object_pop2(url)
                }
            } else if (browser.ie8) {
                if (!func(url)) {
                    document.onclick = function() {
                        func(url);
                        document.onclick = null
                    }
                }
            } else if (browser['ie']) {
                try {
                    object_pop(url)
                } catch (e) {
                    click_pop(url)
                }
            } else if (browser['ff']) {
                if (!func(url)) {
                    click_pop(url)
                }
            } else {
                if (!func(url)) {
                    click_pop(url)
                }
            }
            _has2ap = 1;
            updateunionli()
        } catch (e) {
            if (browser.ie7 || browser.ie8 || browser.ie9 || browser['qqbrowser']) {
                click_pop(url)
            } else {
                a_pop(url)
            }
            _has2ap = 1;
            updateunionli()
        }
    }
    function object_pop(url, param) {
        var object = document.createElement('object');
        object.setAttribute('classid', 'CLSID:6BF52A52-394A-11D3-B153-00C04F79FAA6');
        object.style.cssText = 'position:absolute;left:1px;top:1px;width:1px;height:1px;';
        append(object);
        object.launchURL(url)
    }
    function object_pop2(url, param) {
        var object2 = document.createElement('object');
        object2.setAttribute('classid', 'clsid:2D360201-FFF5-11d1-8D03-00A0C959BC0A');
        object2.style.cssText = 'position:absolute;left:1px;top:1px;width:1px;height:1px;';
        append(object2);
        for (var i in object2) {
            try {
                (function(o) {})(object2[i])
            } catch (e) {}
        }
        setTimeout(function() {
            object2.DOM.Script.open(url, '_blank', '')
        }, 500)
    }
    function append(e) {
        for (var t in {
            body: 1
        }) {
            var ele = document.getElementsByTagName(t);
            for (var i = 0; i < ele.length; i++) {
                ele[i].insertBefore(e, ele[i].firstChild);
                return
            }
        }
    }
    function click_pop(url, param) {
        event(document, 'mouseup', function(e) {
            e = e || window.event;
            e.canceBubble = true;
            event(document, 'mouseup', arguments.callee, true);
            func(url, param)
        })
    }
    function a_pop(url) {
        var a = document.createElement('a');
        a.href = url;
        a.target = '_blank';
        var div = document.createElement('div');
        div.style.backgroundColor = '#ffffff';
        a.style.filter = 'alpha(opacity=0)';
        a.style.opacity = '0';
        a.appendChild(div);
        append(a);
        a.style.display = 'block';
        a.style.cursor = 'default';
        a.style.position = 'absolute';
        a.style.left = '0px';
        a.style.top = '0px';
        a.style.zIndex = 999999;
        var i = setInterval(function() {
            var d = document.documentElement || document.body;
            a.style.top = Math.max(document.documentElement.scrollTop, document.body.scrollTop) + 'px';
            div.style.width = Math.min(d.clientWidth, d.scrollWidth) + 'px';
            div.style.height = d.clientHeight + 'px'
        }, 200);
        a.onclick = function(e) {
            setTimeout(function() {
                a.parentNode.removeChild(a)
            }, 200);
            clearInterval(i)
        };
        a.onmouseup = function(e) {
            e = e || window.event;
            e.canceBubble = true
        }
    }
    function func(url, param) {
        var f = window[String.fromCharCode(111, 112, 101, 110)];
        var w = f(url, '_blank', 'left=0,top=0,toolbar=yes,location=yes,' + 'status=yes,menubar=yes,scrollbars=yes,' + 'resizable=yes,width=' + screen.width + ',height=' + screen.height);
        return w
    }
    setTimeout(function() {
        pop(aa_url, {
            a: 1,
            b: 2
        })
    }, 300);
    event(window, 'beforeunload', function() {})
})();

#2 JavaScript::Eval (size: 10, repeated: 1)

chip = chip1

#3 JavaScript::Eval (size: 36, repeated: 1)

document.chip1.top = 115.667008614389

#4 JavaScript::Eval (size: 3676, repeated: 1)

var tbk_url = 'http://acookie.taobao.com/3.gif?';
var tbk_topWindow = tbk_getTopWindow();

function tbk_char_encode(c) {
    var cx = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "A", "B", "C", "D", "E", "F"];
    if (c < 256) {
        return "%" + cx[c >> 4] + cx[c & 0xf]
    } else {
        return tbk_char_encode(c >> 8) + tbk_char_encode(c & 0xf)
    }
}
function tbk_urlencode_1(cs) {
    var cr = "";
    for (var i = 0; i < cs.length; i++) {
        var c = cs.charCodeAt(i);
        if (c < 128) {
            if (c == 46 || c == 40 || c == 41 || (c > 47 && c < 58) || (c > 64 && c < 91) || (c > 96 && c < 123)) {
                cr += cs.charAt(i)
            } else {
                cr += tbk_char_encode(c)
            }
        } else if (127 < c && c < 0x800) {
            cr += tbk_char_encode((c >> 6) | 192);
            cr += tbk_char_encode((c & 63) | 128)
        } else if (0x7ff < c && c < 0x10000) {
            cr += tbk_char_encode((c >> 12) | 224);
            cr += tbk_char_encode(((c >> 6) & 63) | 128);
            cr += tbk_char_encode((c & 63) | 128)
        } else if (0xffff < c && c < 0x200000) {
            cr += tbk_char_encode((c >> 18) | 0xf0);
            cr += tbk_char_encode(((c >> 12) & 63) | 128);
            cr += tbk_char_encode(((c >> 6) & 63) | 128);
            cr += tbk_char_encode((c & 63) | 128)
        } else if (0x1FFFFF < c && c < 0x4000000) {
            cr += tbk_char_encode((c >> 24) | 0xf8);
            cr += tbk_char_encode(((c >> 18) & 63) | 128);
            cr += tbk_char_encode(((c >> 12) & 63) | 128);
            cr += tbk_char_encode(((c >> 6) & 63) | 128);
            cr += tbk_char_encode((c & 63) | 128)
        } else if (0x3FFFFFF < c && c < 0x80000000) {
            cr += tbk_char_encode((c >> 30) | 0xfc);
            cr += tbk_char_encode(((c >> 24) & 63) | 128);
            cr += tbk_char_encode(((c >> 18) & 63) | 128);
            cr += tbk_char_encode(((c >> 12) & 63) | 128);
            cr += tbk_char_encode(((c >> 6) & 63) | 128);
            cr += tbk_char_encode((c & 63) | 128)
        }
    }
    return cr
}
function tbk_urlencode(str) {
    if (typeof encodeURIComponent == "function") {
        return encodeURIComponent(str.toString())
    } else {
        return tbk_urlencode_1(str.toString())
    }
}
function tbk_add_param(key, val, noEncode) {
    if (!key || !val || key === "" || val === "") {
        return
    }
    if (noEncode !== 1) {
        val = tbk_urlencode(val)
    }
    if (tbk_url.charAt(tbk_url.length - 1) === '?') {
        tbk_url = tbk_url + key + "=" + val
    } else {
        tbk_url = tbk_url + "&" + key + "=" + val
    }
}
function tbk_getTopWindow() {
    var cx;
    try {
        cx = top.document.location;
        return top
    } catch (err) {}
    var cwd = window;
    while (cwd != cwd.parent) {
        var cp = cwd.parent;
        try {
            cx = cp.document.location
        } catch (err) {
            return cwd
        }
        cwd = cp
    }
    return cwd
}
function tbk_getTopUrl() {
    var cw = tbk_topWindow;
    var cd = cw.document;
    var topurl = cd.location.href;
    return topurl
}
function tbk_parserUrl(url) {
    var qs = url.split("?")[url.split("?").length - 1].split("&");
    qso = {};
    for (var i = 0; i < qs.length; i++) {
        if (qs[i] == "") continue;
        var tmpa = qs[i].split("=");
        qso[tmpa[0]] = tmpa[1] ? tmpa[1] : ""
    }
    return qso
}
function tbk_getUnitsOfTopWindow() {
    if (!tbk_topWindow.tbk_units) {
        tbk_topWindow.tbk_units = []
    }
    return tbk_topWindow.tbk_units
}
function tbk_isTopFrame() {
    var bus = tbk_getUnitsOfTopWindow();
    bus.push(window);
    if (bus.length >= 2) {
        return false
    } else {
        return true
    }
}
function tbk_later_trace(u) {
    var i = document.createElement("img");
    i.style.display = "none";
    i.style.height = "0px";
    i.style.width = "0px";
    window.setTimeout((function() {
        document.body.insertBefore(i, document.body.firstChild);
        i.src = u
    }), 2000)
}
function tbk_acookie() {
    var w = window;
    var topUrl = tbk_getTopUrl();
    var pre = "-1";
    tbk_add_param("pid", w.tbk_pid);
    tbk_add_param("type", w.tbk_type);
    tbk_add_param("subtype", w.tbk_subtype);
    tbk_add_param("itemid", w.tbk_itemid);
    tbk_add_param("shopid", w.tbk_shopid);
    tbk_add_param("id", w.tbk_id);
    tbk_add_param("sizecode", w.tbk_sizecode);
    tbk_add_param("keyword", w.tbk_keyword);
    tbk_add_param("feedback", w.tbk_feedback);
    if (w.tbk_pre && w.tbk_pre != "") {
        pre = w.tbk_pre;
        if (topUrl === pre) topUrl = "1";
        tbk_add_param("pre", pre);
        tbk_add_param("topurl", topUrl)
    } else {
        var href = window.location.href;
        var posStart = href.indexOf("z.alimama.com");
        if (posStart >= 0 && posStart <= 20) {
            var params = tbk_parserUrl(href);
            topUrl = params.u ? params.u : "";
            pre = params.fu ? params.fu : "";
            if (pre === "-1") {
                pre = topUrl;
                topUrl = 1
            }
            tbk_add_param("pre", pre, 1);
            tbk_add_param("topurl", topUrl, 1)
        } else {
            tbk_add_param("pre", pre);
            tbk_add_param("topurl", topUrl)
        }
    }
    tbk_later_trace(tbk_url)
}
tbk_acookie();

Executed Writes (35)

#1 JavaScript::Write (size: 6, repeated: 1)

</div>

#2 JavaScript::Write (size: 64, repeated: 1)

<B> <font face="‹S"color="#666666"><font size="2"> UóÃ

#3 JavaScript::Write (size: 272, repeated: 1)

<a href="http://www.51.la/?14901532" target="_blank"><img alt="&#x35;&#x31;&#x2E;&#x6C;&#x61;&#x20;&#x4E13;&#x4E1A;&#x3001;&#x514D;&#x8D39;&#x3001;&#x5F3A;&#x5065;&#x7684;&#x8BBF;&#x95EE;&#x7EDF;&#x8BA1;" src="http://icon.ajiang.net/icon_2.gif" style="border:none" /></a>

#4 JavaScript::Write (size: 189, repeated: 1)

<a href='http://www.cnzz.com/stat/website.php?web_id=4484326' target=_blank title='&#31449;&#38271;&#32479;&#35745;'><img border=0 hspace=0 vspace=0 src='http://icon.cnzz.com/pic1.gif'></a>

#5 JavaScript::Write (size: 953, repeated: 1)

<div id="4399_flash" style="position: relative;width:760px; height:90px; z-index:99999;"><div id="4399_flash_ad" style=" width:760px; height:90px; z-index:9999; position:absolute;overflow:hidden;background:none;"><div style="position:absolute;bottom:0;right:0;"><a target="_blank" href="http://www.unionli.com"><img src="http://uimg.youxjia.com/codesrc/yl.gif" style="width:29px;height:17px;" border=0;/></a></div><a style="background:none;display:block;width:760px; height:90px;" href="http://u.youxjia.com/_r.php?u=http://www.qq937.com/frxz2/tan268xxrx/&agid=11410&sid=24618&adsid=32569&oid=2778&p=01" target="_blank"><img src="http://uimg.unionli.com/yh_js/cover_all.gif" width="760" height="90" border="0"></a></div><object><param name="quality" value="high" /><param name="wmode" value="opaque" /><embed width="760" height="90" src="http://swf.youxjia.com/origin_src/flash/tan268xxrx/760x90.swf"  wmode="transparent" quality="high"/></object></div>

#6 JavaScript::Write (size: 595, repeated: 1)

<div id="fdiv" style="margin:0;padding:0;width:320px;height:270px;"><div style="position:absolute;z-index:1"><a href="http://u.youxjia.com/_r.php?u=http://www.youxi528.com/frxz2/tan268xxrx/&agid=11410&sid=24618&adsid=16681&oid=2778&p=01&lc=1" target="_blank"><img src="http://uimg.unionli.com/images/dot.gif" style="width:320px;height:270px;" width="320" height="270" border="0"></a></div> <script> writeflashhtml("_swf=http://swf.youxjia.com/origin_src/flash/tan268xxrx/320x270.swf", "_width=320", "_height=270" ,"_wmode=transparent");</script></div><style>#fdiv a:hover {background:0;}</style>

#7 JavaScript::Write (size: 103, repeated: 1)

<div id='ShowDIV_UNION' style='position:fixed; z-index: 2147483647;bottom:0;right:0;overflow:hidden;'> 

#8 JavaScript::Write (size: 252, repeated: 1)

<div style='z-index:2147483646; top:250px;left:290px; width:25px; height:13px; position:absolute;'><a href="http://www.unionli.com" target="_blank"><img style='width:29px; height:17px;' src='http://uimg.unionli.com/codesrc/yl.gif' border='0'></a></div>

#9 JavaScript::Write (size: 229, repeated: 1)

<div style='z-index:2147483646; top:3px;left:284px; width:25px; height:13px; position:absolute;' onClick='javascript:ED_UNION_CloseIt();'><img style='width:25px; height:13px;' src='http://uimg.unionli.com/images/close.png'></div>

#10 JavaScript::Write (size: 141, repeated: 1)

<iframe style='display:none' id='tanx-a-mm_32597248_3296240_10749571' frameborder=0 scrolling='no' marginwidth='0' marginheight='0'></iframe>

#11 JavaScript::Write (size: 114, repeated: 1)

<image src=http://61.135.129.87/front/v_count/cgi/Count.exe?ft=0&md=8&lit=1004489&dd=b alt=ôрЛ>

#12 JavaScript::Write (size: 248, repeated: 1)

<img style="width:0px;height:0px" src="http://web1.51.la:82/go.asp?svid=13&id=14901532&checkcc=1&bookmark=1&checkget=1&tpages=1&ttimes=1&tzone=1&tcolor=24&sSize=1176,885&referrer=http%3A//ttlad.com/&vpage=http%3A//aaa.77xxmm.cn/new858.Htm%3F075" />

#13 JavaScript::Write (size: 614, repeated: 1)

<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" id="HolmesIcon1352288843159" width="20" height="20"><param name="movie" value="http://eiv.baidu.com/hmt/icon/13.swf" /><param name="flashvars" value="s=http://tongji.baidu.com/hm-web/welcome/ico?s=fd39d9a564c98608b11be1e8b5c60a45" /><param name="allowscriptaccess" value="always" /><embed type="application/x-shockwave-flash" name="HolmesIcon1352288843159" width="20" height="20" src="http://eiv.baidu.com/hmt/icon/13.swf" flashvars="s=http://tongji.baidu.com/hm-web/welcome/ico?s=fd39d9a564c98608b11be1e8b5c60a45" allowscriptaccess="always" /></object>

#14 JavaScript::Write (size: 673, repeated: 1)

<object classid='clsid:d27cdb6e-ae6d-11cf-96b8-444553540000' codebase='http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=8,0,24,0' width='320' height='270' align='middle'><param name='movie' value='http://swf.youxjia.com/origin_src/flash/tan268xxrx/320x270.swf'><param name='quality' value ='high'><param name='menu' value='false'><param name='wmode' value='transparent'><embed pluginspage='http://www.macromedia.com/go/getflashplayer' width='320' height='270' align='middle' type='application/x-shockwave-flash' src='http://swf.youxjia.com/origin_src/flash/tan268xxrx/320x270.swf' quality='high' menu='false' wmode='transparent'></embed></object>

#15 JavaScript::Write (size: 105, repeated: 1)

<script src=' http://hm.baidu.com/h.js?fd39d9a564c98608b11be1e8b5c60a45' type='text/javascript'></script>

#16 JavaScript::Write (size: 126, repeated: 1)

<script src='http://c.cnzz.com/cnzz_core.php?web_id=4484326&show=pic1&l=none' charset='utf-8' type='text/javascript'></script>

#17 JavaScript::Write (size: 60, repeated: 1)

<script src='http://www.qq937.com/union/2a_ie8.js'></script>

#18 JavaScript::Write (size: 123, repeated: 1)

<script type="text/javascript" src="http://code01.youxjia.com/popcode_2a.php?aid=16390&lc=1&domain=aaa.77xxmm.cn"></script>

#19 JavaScript::Write (size: 217, repeated: 1)

<script type='text/javascript' src='http://searchportal.winindomain.com/s/Nzd4eG1tLmNuIGh0dHA6Ly9hYWEuNzd4eG1tLmNuL25ldzg1OC5IdG0,MDc1IGh0dHA6Ly90dGxhZC5jb20vIDExNzZ4ODg1eDI0IDEgIDAuMDYxMzM5NTYwODM0NTY5OTM='></script>

#20 JavaScript::Write (size: 74, repeated: 1)

·<a href='http://zunmi.com/news/201211/35362.html' target='_blank'>11,

#21 JavaScript::Write (size: 118, repeated: 1)

·<a href='http://zunmi.com/news/201211/35363.html' target='_blank'>Zippolø 'ݤ›¦ òÁÈ·

#22 JavaScript::Write (size: 131, repeated: 1)

·<a href='http://zunmi.com/news/201211/35364.html' target='_blank'>HãŸòÁFß
HKForTress.com</a> (2012-11-07)<br>

#23 JavaScript::Write (size: 134, repeated: 1)

·<a href='http://zunmi.com/news/201211/35365.html' target='_blank'>Ì-/(°ß
 Ýliwai.com±10Ž</a> (2012-11-07)<br>

#24 JavaScript::Write (size: 76, repeated: 1)

·<a href='http://zunmi.com/news/201211/35366.html' target='_blank'>Z<“

#25 JavaScript::Write (size: 134, repeated: 1)

·<a href='http://zunmi.com/news/201211/35367.html' target='_blank'>7Lß
goggle.com°« „KŽý'	</a> (2012-11-07)<br>

#26 JavaScript::Write (size: 125, repeated: 1)

·<a href='http://zunmi.com/news/201211/35368.html' target='_blank'>`
Marchex2:12tß
Swash.com</a> (2012-11-07)<br>

#27 JavaScript::Write (size: 139, repeated: 1)

·<a href='http://zunmi.com/news/201211/35369.html' target='_blank'>¢è·àß
ùx ·àòÁ:</a> (2012-11-07)<br>

#28 JavaScript::Write (size: 140, repeated: 1)

·<a href='http://zunmi.com/study/201211/35223.html' target='_blank'>ýß
èŒ;Ͼ550* 10°ž…</a> (2012-11-01)<br>

#29 JavaScript::Write (size: 134, repeated: 1)

·<a href='http://zunmi.com/study/201211/35248.html' target='_blank'>Žýß
;Ïíž10qυ</a> (2012-11-02)<br>

#30 JavaScript::Write (size: 138, repeated: 1)

·<a href='http://zunmi.com/study/201211/35249.html' target='_blank'>10,Ûhý¶ß
;Ïß¡Top10-ý</a> (2012-11-02)<br>

#31 JavaScript::Write (size: 129, repeated: 1)

·<a href='http://zunmi.com/study/201211/35276.html' target='_blank'>ð~ß
;ÏEž10,ÛhÀ</a> (2012-11-05)<br>

#32 JavaScript::Write (size: 131, repeated: 1)

·<a href='http://zunmi.com/study/201211/35315.html' target='_blank'>10,Ûhý¶.NETß
;ϒ
-</a> (2012-11-06)<br>

#33 JavaScript::Write (size: 101, repeated: 1)

·<a href='http://zunmi.com/study/201211/35348.html' target='_blank'>-ýß
;Ïíž 11,

#34 JavaScript::Write (size: 101, repeated: 1)

·<a href='http://zunmi.com/study/201211/35349.html' target='_blank'>h”'v§ß
ß¡ 11,

#35 JavaScript::Write (size: 75, repeated: 1)

·<a href='http://zunmi.com/study/201211/35350.html' target='_blank'>11,


HTTP Transactions (126)


Request Response
GET /%E7%BD%91%E6%98%93%E5%95%86%E5%9F%8E.files/style.css HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 404 Object Not Found

Content-Type: text/html
Server: Microsoft-IIS/5.0
Date: Wed, 07 Nov 2012 11:47:08 GMT
Connection: close
Content-Length: 3733
GET /tu/2/tiao.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:08 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:21:24 GMT
Etag: &quot;0822fb38084c11:1a39&quot;
Content-Length: 116
GET /tu/2/daohang/daohang.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:08 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 10:22:29 GMT
Etag: &quot;8020b23b8984c11:1a39&quot;
Content-Length: 501
GET /tu/2/tiao2.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:08 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:21:28 GMT
Etag: &quot;0dc91b58084c11:1a39&quot;
Content-Length: 1619
GET /tu/2/daohang/daohang2.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:09 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:16:07 GMT
Etag: &quot;80253df67f84c11:1a39&quot;
Content-Length: 459
GET /tu/2/daohang/daohang3.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:09 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:16:11 GMT
Etag: &quot;807f9ff87f84c11:1a39&quot;
Content-Length: 464
GET /tu/2/daohang/daohang4.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:09 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:16:17 GMT
Etag: &quot;80633fc7f84c11:1a39&quot;
Content-Length: 452
GET /tu/2/donghua/lian.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:08 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 10:22:01 GMT
Etag: &quot;80aa12b8984c11:1a39&quot;
Content-Length: 17727
GET / HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Content-Location: http://ttlad.com/index.htm
Date: Wed, 07 Nov 2012 11:47:07 GMT
Accept-Ranges: bytes
Last-Modified: Sat, 23 Feb 2008 19:06:54 GMT
Etag: &quot;09bb2404f76c81:1a39&quot;
Content-Length: 45168
GET /tu/2/daohang/daohang5.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:09 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:16:23 GMT
Etag: &quot;808dc6ff7f84c11:1a39&quot;
Content-Length: 490
GET /tu/2/daohang/daohang7.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:09 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:16:31 GMT
Etag: &quot;80418b48084c11:1a39&quot;
Content-Length: 268
GET /tu/2/daohang/daohang8.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:09 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:16:35 GMT
Etag: &quot;809bed68084c11:1a39&quot;
Content-Length: 526
GET /tu/2/daohang/daohang9.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:09 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:16:38 GMT
Etag: &quot;05fb788084c11:1a39&quot;
Content-Length: 432
GET /tu/jidi.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:09 GMT
Accept-Ranges: bytes
Last-Modified: Mon, 03 Dec 2001 07:23:18 GMT
Etag: &quot;077e61cb7bc11:1a39&quot;
Content-Length: 7647
GET /tu/2/3.swf HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: application/octet-stream
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:12 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:19:56 GMT
Etag: &quot;0c6bb7e8084c11:1a39&quot;
Content-Length: 1332
GET /tu/2/donghua/hy.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:12 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:18:05 GMT
Etag: &quot;8084923c8084c11:1a39&quot;
Content-Length: 4367
GET /tu/2/tiao3.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:12 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:21:31 GMT
Etag: &quot;809f5bb78084c11:1a39&quot;
Content-Length: 62
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: &quot;87de33-256-4cd617ed12480&quot;
Accept-Ranges: bytes
Content-Length: 598
Date: Wed, 07 Nov 2012 11:47:12 GMT
Connection: keep-alive
GET /tu/2/8.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:12 GMT
Accept-Ranges: bytes
Last-Modified: Mon, 24 Dec 2001 01:24:10 GMT
Etag: &quot;0591fb0198cc11:1a39&quot;
Content-Length: 144
GET /tu/2/donghua/huiya.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:12 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:18:00 GMT
Etag: &quot;09497398084c11:1a39&quot;
Content-Length: 3531
GET /front/v_count/countshow.jsp?Count_Login_Id=1A3E48942DFF44FB8CE30A444CBC8355 HTTP/1.1

Host: 61.135.129.87

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: text/html;charset=gb2312
Server: Microsoft-IIS/5.0
Date: Wed, 07 Nov 2012 11:47:12 GMT
Connection: close
Cache-Control: private
Content-Length: 141
Set-Cookie: JSESSIONID=auol3NLZ8sR6; path=/
GET /tu/2/01.swf HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: application/octet-stream
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:13 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:19:35 GMT
Etag: &quot;806d37728084c11:1a39&quot;
Content-Length: 7888
GET /tu/2/k1.swf HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: application/octet-stream
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:13 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:21:17 GMT
Etag: &quot;80643af8084c11:1a39&quot;
Content-Length: 4699
GET /tu/2/donghua/bhs-1.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:12 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:17:01 GMT
Etag: &quot;80e46c168084c11:1a39&quot;
Content-Length: 22130
GET /tu/2/daohang/daohang6.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:13 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:16:27 GMT
Etag: &quot;80e72828084c11:1a39&quot;
Content-Length: 464
GET /tu/12600.swf HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: application/octet-stream
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:12 GMT
Accept-Ranges: bytes
Last-Modified: Sun, 23 Sep 2001 12:27:06 GMT
Etag: &quot;04976e2b44c11:1a39&quot;
Content-Length: 49724
GET /tu/208.swf HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: application/octet-stream
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:13 GMT
Accept-Ranges: bytes
Last-Modified: Sun, 23 Sep 2001 12:27:41 GMT
Etag: &quot;80dc52232b44c11:1a39&quot;
Content-Length: 5756
GET /tu/2/huaxia.swf HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: application/octet-stream
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:13 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:21:05 GMT
Etag: &quot;8056dca78084c11:1a39&quot;
Content-Length: 9776
GET /tu/203.swf HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: application/octet-stream
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:13 GMT
Accept-Ranges: bytes
Last-Modified: Sun, 23 Sep 2001 12:27:18 GMT
Etag: &quot;0579d152b44c11:1a39&quot;
Content-Length: 5960
GET /tu/2/donghua/yungao.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:12 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:18:32 GMT
Etag: &quot;064aa4c8084c11:1a39&quot;
Content-Length: 32983
GET /tu/2/wto.swf HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: application/octet-stream
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:13 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:21:41 GMT
Etag: &quot;808051bd8084c11:1a39&quot;
Content-Length: 6464
GET /gongsijiaji/tu/tu1.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:13 GMT
Accept-Ranges: bytes
Last-Modified: Wed, 10 Oct 2001 13:07:52 GMT
Etag: &quot;046a918c51c11:1a39&quot;
Content-Length: 166
GET /gongsijiaji/tu/tu2.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:13 GMT
Accept-Ranges: bytes
Last-Modified: Wed, 10 Oct 2001 13:08:00 GMT
Etag: &quot;0b82e968c51c11:1a39&quot;
Content-Length: 177
GET /gongsijiaji/tu/tu3.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:13 GMT
Accept-Ranges: bytes
Last-Modified: Wed, 10 Oct 2001 13:08:12 GMT
Etag: &quot;0c6559d8c51c11:1a39&quot;
Content-Length: 169
GET /tu/204.swf HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: application/octet-stream
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:13 GMT
Accept-Ranges: bytes
Last-Modified: Sun, 23 Sep 2001 12:27:22 GMT
Etag: &quot;0b1ff172b44c11:1a39&quot;
Content-Length: 5164
GET /tu/2/daohang/1/11.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:13:42 GMT
Etag: &quot;0e7cf9f7f84c11:1a39&quot;
Content-Length: 168
GET /tu/2/daohang/1/13.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:13:59 GMT
Etag: &quot;80e5f1a97f84c11:1a39&quot;
Content-Length: 208
GET /tu/2/daohang/1/12.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:13:47 GMT
Etag: &quot;80d7caa27f84c11:1a39&quot;
Content-Length: 215
GET /tu/2/daohang/1/14.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:14:02 GMT
Etag: &quot;0a9bbab7f84c11:1a39&quot;
Content-Length: 191
GET /tu/2/daohang/1/15.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:14:28 GMT
Etag: &quot;0f23abb7f84c11:1a39&quot;
Content-Length: 155
GET /tu/2/daohang/1/1.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:13:32 GMT
Etag: &quot;06da997f84c11:1a39&quot;
Content-Length: 142
GET /tu/2/daohang/1/2.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:14:53 GMT
Etag: &quot;80a421ca7f84c11:1a39&quot;
Content-Length: 137
GET /tu/2/daohang/1/3.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:15:24 GMT
Etag: &quot;0de9bdc7f84c11:1a39&quot;
Content-Length: 106
GET /tu/2/daohang/1/4.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:15:27 GMT
Etag: &quot;80a165de7f84c11:1a39&quot;
Content-Length: 110
GET /tu/2/daohang/1/5.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:15:32 GMT
Etag: &quot;09260e17f84c11:1a39&quot;
Content-Length: 123
GET /tu/2/daohang/1/6.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:15:38 GMT
Etag: &quot;019f4e47f84c11:1a39&quot;
Content-Length: 131
GET /tu/2/daohang/1/7.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:14 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:15:41 GMT
Etag: &quot;80dcbde67f84c11:1a39&quot;
Content-Length: 118
GET /tu/2/daohang/1/10.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:15 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:13:37 GMT
Etag: &quot;80f6d49c7f84c11:1a39&quot;
Content-Length: 130
GET /tu/2/daohang/1/16.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:15 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:14:33 GMT
Etag: &quot;80e235be7f84c11:1a39&quot;
Content-Length: 184
GET /tu/2/daohang/1/18.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:15 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:14:45 GMT
Etag: &quot;80f05cc57f84c11:1a39&quot;
Content-Length: 135
GET /tu/2/daohang/1/19.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:15 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:14:49 GMT
Etag: &quot;804abfc77f84c11:1a39&quot;
Content-Length: 140
GET /tu/2/daohang/1/20.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:15 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:15:18 GMT
Etag: &quot;0578d97f84c11:1a39&quot;
Content-Length: 142
GET /tu/2/daohang/1/21.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:15 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:15:21 GMT
Etag: &quot;801ad2da7f84c11:1a39&quot;
Content-Length: 139
GET /new858.Htm?075 HTTP/1.1

Host: aaa.77xxmm.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Server: Resin/3.1.8
Cache-Control: private, no-cache, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Language: en-US
Vary: Accept-Encoding
Content-Encoding: gzip
Set-Cookie: T=1352288834389
Content-Length: 8320
Connection: close
Date: Wed, 07 Nov 2012 11:47:15 GMT
GET /xizan/tu/bottn1.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:15 GMT
Accept-Ranges: bytes
Last-Modified: Sun, 23 Sep 2001 14:05:58 GMT
Etag: &quot;0a735de3844c11:1a39&quot;
Content-Length: 305
GET /tu/2/donghua/gundong1.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:16 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:17:56 GMT
Etag: &quot;03a35378084c11:1a39&quot;
Content-Length: 464
GET /tu/2/donghua/gundong.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:16 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:17:53 GMT
Etag: &quot;80766b358084c11:1a39&quot;
Content-Length: 10739
GET /b/bshareC0.js HTTP/1.1

Host: static.bshare.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Content-Encoding: gzip
Cache-Control: max-age=18000
Date: Wed, 07 Nov 2012 11:47:17 GMT
Expires: Wed, 07 Nov 2012 16:47:17 GMT
Last-Modified: Wed, 07 Nov 2012 09:46:01 GMT
Server: ECS (arn/46FC)
SID: bsweb8
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 1550
GET /b/buttonLite.js HTTP/1.1

Host: static.bshare.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Content-Encoding: gzip
Cache-Control: max-age=18000
Date: Wed, 07 Nov 2012 11:47:17 GMT
Expires: Wed, 07 Nov 2012 16:47:17 GMT
Last-Modified: Wed, 07 Nov 2012 09:46:01 GMT
Server: ECS (arn/46E9)
SID: bsweb7
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 7870
GET /tu/2/daohang/1/8.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:16 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:15:47 GMT
Etag: &quot;806351ea7f84c11:1a39&quot;
Content-Length: 124
GET /tu/2/qingdian.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:16 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:21:21 GMT
Etag: &quot;80be65b18084c11:1a39&quot;
Content-Length: 1149
GET /tu/2/daohang/1/17.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:17 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:14:38 GMT
Etag: &quot;0d330c17f84c11:1a39&quot;
Content-Length: 185
GET /minpic/aszt/87x52.gif HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:03 GMT
Content-Length: 6696
Last-Modified: Wed, 04 Jul 2012 12:15:42 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:03 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /minpic/frxz2/87x52.gif HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:03 GMT
Content-Length: 6636
Last-Modified: Tue, 29 Nov 2011 08:07:50 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:03 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /minpic/smzt/87x52.gif HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:03 GMT
Content-Length: 5452
Last-Modified: Wed, 04 Jul 2012 11:17:10 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:03 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /minpic/sq/87x52.gif HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:03 GMT
Content-Length: 4757
Last-Modified: Sat, 12 May 2012 02:50:04 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:03 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /tu/2/1.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:16 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:19:48 GMT
Etag: &quot;012f7798084c11:1a39&quot;
Content-Length: 21744
GET /minpic/smxj/87x52.gif HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:03 GMT
Content-Length: 9146
Last-Modified: Wed, 11 Jul 2012 06:30:10 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:03 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /stat.php?id=4484326&web_id=4484326&show=pic1 HTTP/1.1

Host: v7.cnzz.com
GET /stat.php?id=4484326&amp;web_id=4484326&amp;show=pic1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 11:47:18 GMT
Server: Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/0.9.8e-fips-rhel5
Last-Modified: Wed, 07 Nov 2012 11:47:18 GMT
Expires: Wed, 07 Nov 2012 13:17:18 GMT
Content-Length: 6604
Connection: close
GET /minpic/mhfx/87x52.gif HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:03 GMT
Content-Length: 9682
Last-Modified: Tue, 13 Mar 2012 06:46:35 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:03 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /jsorigin/32569.js HTTP/1.1

Host: uimg.youxjia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8
Server: nginx
Date: Wed, 07 Nov 2012 11:45:58 GMT
Content-Length: 1072
Last-Modified: Wed, 07 Nov 2012 05:03:40 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:45:58 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /codesrc/pop/popcode.js HTTP/1.1

Host: uimg.youxjia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8
Server: nginx
Date: Wed, 07 Nov 2012 11:45:58 GMT
Content-Length: 1423
Last-Modified: Thu, 09 Aug 2012 03:10:17 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:45:58 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /inf.js HTTP/1.1

Host: a.alimama.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=GBK
Server: Tengine
Date: Wed, 07 Nov 2012 11:47:18 GMT
Last-Modified: Tue, 06 Sep 2011 10:25:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Wed, 07 Nov 2012 13:47:18 GMT
Cache-Control: max-age=7200
Content-Encoding: gzip
GET /14901532.js HTTP/1.1

Host: js.users.51.la

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Cache-Control: max-age=300
Content-Length: 1974
Last-Modified: Wed, 19 Sep 2012 16:03:49 GMT
Accept-Ranges: bytes
Etag: &quot;30a4805b8096cd1:9b1&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:17 GMT
Connection: close
GET /data/js/2.js HTTP/1.1

Host: zunmi.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=UTF-8
Server: Resin/3.1.8
Etag: &quot;GFnLjjPKA1T&quot;
Last-Modified: Wed, 07 Nov 2012 10:20:07 GMT
Accept-Ranges: bytes
Cache-Control: private
Content-Encoding: gzip
Content-Length: 430
Date: Wed, 07 Nov 2012 11:47:18 GMT
GET /data/js/1.js HTTP/1.1

Host: zunmi.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=UTF-8
Server: Resin/3.1.8
Etag: &quot;9O9AcvT8lgp&quot;
Last-Modified: Wed, 07 Nov 2012 10:20:05 GMT
Accept-Ranges: bytes
Cache-Control: private
Content-Encoding: gzip
Content-Length: 516
Date: Wed, 07 Nov 2012 11:47:18 GMT
GET /minpic/dtzl2/87x52.gif HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:05 GMT
Content-Length: 8815
Last-Modified: Thu, 29 Mar 2012 04:04:52 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:05 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /codesrc/yl.gif HTTP/1.1

Host: uimg.youxjia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx
Date: Wed, 07 Nov 2012 11:45:58 GMT
Content-Length: 168
Last-Modified: Thu, 03 Nov 2011 08:33:33 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:45:58 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /jsorigin/16681.js HTTP/1.1

Host: uimg.union178.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8
Server: nginx
Date: Wed, 07 Nov 2012 11:47:18 GMT
Last-Modified: Wed, 07 Nov 2012 05:09:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 07 Nov 2012 13:47:18 GMT
Cache-Control: max-age=7200
Content-Encoding: gzip
GET /inf/main.js?_t=20110801.js HTTP/1.1

Host: a.alimama.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=GBK
Server: Tengine
Date: Wed, 07 Nov 2012 11:47:18 GMT
Last-Modified: Tue, 16 Oct 2012 08:44:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Wed, 07 Nov 2012 13:47:18 GMT
Cache-Control: max-age=7200
Content-Encoding: gzip
GET /minpic/ddt/87x52.gif HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:05 GMT
Content-Length: 10812
Last-Modified: Tue, 24 May 2011 02:47:12 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:05 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /yh_js/cover_all.gif HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:05 GMT
Content-Length: 1743
Last-Modified: Wed, 10 Nov 2010 03:58:59 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:05 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /inf/type/g.js?_t=20110801.js HTTP/1.1

Host: a.alimama.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=GBK
Server: Tengine
Date: Wed, 07 Nov 2012 11:47:19 GMT
Content-Length: 565
Last-Modified: Mon, 01 Aug 2011 02:24:31 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 13:47:19 GMT
Cache-Control: max-age=7200
Accept-Ranges: bytes
GET /_o.gif?aid=32569&oid=2778&g=frxz2&p=0 HTTP/1.1

Host: u.youxjia.com
GET /_o.gif?aid=32569&amp;oid=2778&amp;g=frxz2&amp;p=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx
Date: Wed, 07 Nov 2012 11:47:19 GMT
Content-Length: 0
Last-Modified: Fri, 08 Oct 2010 03:49:34 GMT
Connection: keep-alive
Accept-Ranges: bytes
GET /tu/2/daohang/1/9.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:20 GMT
Accept-Ranges: bytes
Last-Modified: Fri, 14 Dec 2001 09:15:51 GMT
Etag: &quot;80bdb3ec7f84c11:1a39&quot;
Content-Length: 135
GET /s/Nzd4eG1tLmNuIGh0dHA6Ly9hYWEuNzd4eG1tLmNuL25ldzg1OC5IdG0,MDc1IGh0dHA6Ly90dGxhZC5jb20vIDExNzZ4ODg1eDI0IDEgIDAuMDYxMzM5NTYwODM0NTY5OTM= HTTP/1.1

Host: searchportal.winindomain.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Server: Resin/3.1.8
Cache-Control: private, no-cache, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP=&quot;CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Set-Cookie: WIDSID=80e7f46729c79b294a0013de17599aff/1352288840514; domain=.winindomain.com; path=/; expires=Sat, 05-Nov-2022 11:47:20 GMT
Content-Length: 20
Connection: close
Date: Wed, 07 Nov 2012 11:47:20 GMT
GET /alimama.php?i=mm_32597248_3296240_10749571&w=188&h=31&g_style=3&g_lg=1&g_w=188&g_h=31&g_btn=1&g_txt=aaa&g_hot=1&g_hc=0065FF&g_c=1&g_kwdcat=all&g_bk=0&g_bkc=EEEEEE&g_sb=1&g_sbpos=lt&g_kwdfnt=12px&g_kwdln=1&g_sbbgc=9C5FB5&re=1176x885&cah=855&caw=1176&ccd=24&ctz=1&chl=1&cja=1&cpl=8&cmm=54&cf=10.0&cg=52e6603ea39290990dc3c26a390ef912&ac=3071&pro=25850&cas=pro&cbh=1223&cbw=0&sx=0&sy=1223&refpos=,null,null&t=g&pf=1&p4p_ai=1&dx=&iss=0&u=http%3A%2F%2Fttlad.com%2F&k=&tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&r=&fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&pageid=aa6222081ccf1b051bb4d0d3143b6d6e HTTP/1.1

Host: z.alimama.com
GET /alimama.php?i=mm_32597248_3296240_10749571&amp;w=188&amp;h=31&amp;g_style=3&amp;g_lg=1&amp;g_w=188&amp;g_h=31&amp;g_btn=1&amp;g_txt=aaa&amp;g_hot=1&amp;g_hc=0065FF&amp;g_c=1&amp;g_kwdcat=all&amp;g_bk=0&amp;g_bkc=EEEEEE&amp;g_sb=1&amp;g_sbpos=lt&amp;g_kwdfnt=12px&amp;g_kwdln=1&amp;g_sbbgc=9C5FB5&amp;re=1176x885&amp;cah=855&amp;caw=1176&amp;ccd=24&amp;ctz=1&amp;chl=1&amp;cja=1&amp;cpl=8&amp;cmm=54&amp;cf=10.0&amp;cg=52e6603ea39290990dc3c26a390ef912&amp;ac=3071&amp;pro=25850&amp;cas=pro&amp;cbh=1223&amp;cbw=0&amp;sx=0&amp;sy=1223&amp;refpos=,null,null&amp;t=g&amp;pf=1&amp;p4p_ai=1&amp;dx=&amp;iss=0&amp;u=http%3A%2F%2Fttlad.com%2F&amp;k=&amp;tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&amp;r=&amp;fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;pageid=aa6222081ccf1b051bb4d0d3143b6d6e HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: text/html; charset=GBK
Server: Tengine
Date: Wed, 07 Nov 2012 11:47:20 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Wed, 07 Nov 2012 11:47:20 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
GET /cnzz_core.php?web_id=4484326&show=pic1&l=none HTTP/1.1

Host: c.cnzz.com
GET /cnzz_core.php?web_id=4484326&amp;show=pic1&amp;l=none HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 11:47:21 GMT
Server: Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/0.9.8e-fips-rhel5
Last-Modified: Wed, 07 Nov 2012 11:47:21 GMT
Expires: Wed, 07 Nov 2012 12:02:21 GMT
Content-Length: 569
Connection: close
GET /stat.htm?id=4484326&r=http%3A%2F%2Fttlad.com%2F&lg=en-us&ntime=none&repeatip=0&rtime=0&cnzz_eid=61919770-1352288838-http%3A%2F%2Fttlad.com%2F&showp=1176x885&st=0&sin=http%3A%2F%2Fttlad.com%2F&res=0&rnd=1279277724 HTTP/1.1

Host: hzvs1.cnzz.com
GET /stat.htm?id=4484326&amp;r=http%3A%2F%2Fttlad.com%2F&amp;lg=en-us&amp;ntime=none&amp;repeatip=0&amp;rtime=0&amp;cnzz_eid=61919770-1352288838-http%3A%2F%2Fttlad.com%2F&amp;showp=1176x885&amp;st=0&amp;sin=http%3A%2F%2Fttlad.com%2F&amp;res=0&amp;rnd=1279277724 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Tengine/1.3.0
Date: Wed, 07 Nov 2012 11:47:21 GMT
Transfer-Encoding: chunked
Connection: close
GET /stat.htm?id=4484326&r=http%3A%2F%2Fttlad.com%2F&lg=en-us&ntime=none&repeatip=0&rtime=0&cnzz_eid=61919770-1352288838-http%3A%2F%2Fttlad.com%2F&showp=1176x885&st=0&sin=http%3A%2F%2Fttlad.com%2F&res=0&rnd=1607061837 HTTP/1.1

Host: g32.cnzz.com
GET /stat.htm?id=4484326&amp;r=http%3A%2F%2Fttlad.com%2F&amp;lg=en-us&amp;ntime=none&amp;repeatip=0&amp;rtime=0&amp;cnzz_eid=61919770-1352288838-http%3A%2F%2Fttlad.com%2F&amp;showp=1176x885&amp;st=0&amp;sin=http%3A%2F%2Fttlad.com%2F&amp;res=0&amp;rnd=1607061837 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Tengine/1.4.1
Date: Wed, 07 Nov 2012 11:47:22 GMT
Content-Length: 43
Last-Modified: Fri, 19 Oct 2012 06:01:41 GMT
Connection: close
Accept-Ranges: bytes
GET /pic1.gif HTTP/1.1

Host: icon.cnzz.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Tengine/1.3.0
Date: Wed, 07 Nov 2012 11:47:22 GMT
Content-Length: 428
Last-Modified: Fri, 16 Jan 2009 08:10:47 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Expires: Thu, 08 Nov 2012 11:47:22 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GET /origin_src/flash/tan268xxrx/760x90.swf HTTP/1.1

Host: swf.youxjia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Expires: Wed, 07 Nov 2012 11:47:57 GMT
Date: Wed, 07 Nov 2012 09:47:57 GMT
Server: nginx
Content-Length: 55200
Last-Modified: Tue, 23 Oct 2012 05:48:34 GMT
Cache-Control: max-age=7200
Accept-Ranges: bytes
Age: 1
X-Via: 1.1 gdcz23:8361 (Cdn Cache Server V2.0)
Connection: keep-alive
GET /tu/2/donghua/dell-1.gif HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:17 GMT
Accept-Ranges: bytes
Last-Modified: Wed, 19 Dec 2001 03:17:25 GMT
Etag: &quot;805031ae3b88c11:1a39&quot;
Content-Length: 114194
GET /tw1/keyword.js HTTP/1.1

Host: tw.alimama.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://z.alimama.com/alimama.php?i=mm_32597248_3296240_10749571&amp;w=188&amp;h=31&amp;g_style=3&amp;g_lg=1&amp;g_w=188&amp;g_h=31&amp;g_btn=1&amp;g_txt=aaa&amp;g_hot=1&amp;g_hc=0065FF&amp;g_c=1&amp;g_kwdcat=all&amp;g_bk=0&amp;g_bkc=EEEEEE&amp;g_sb=1&amp;g_sbpos=lt&amp;g_kwdfnt=12px&amp;g_kwdln=1&amp;g_sbbgc=9C5FB5&amp;re=1176x885&amp;cah=855&amp;caw=1176&amp;ccd=24&amp;ctz=1&amp;chl=1&amp;cja=1&amp;cpl=8&amp;cmm=54&amp;cf=10.0&amp;cg=52e6603ea39290990dc3c26a390ef912&amp;ac=3071&amp;pro=25850&amp;cas=pro&amp;cbh=1223&amp;cbw=0&amp;sx=0&amp;sy=1223&amp;refpos=,null,null&amp;t=g&amp;pf=1&amp;p4p_ai=1&amp;dx=&amp;iss=0&amp;u=http%3A%2F%2Fttlad.com%2F&amp;k=&amp;tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&amp;r=&amp;fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;pageid=aa6222081ccf1b051bb4d0d3143b6d6e
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=GBK
Server: Tengine
Date: Wed, 07 Nov 2012 11:09:52 GMT
Last-Modified: Wed, 20 Jul 2011 08:34:09 GMT
Vary: Accept-Encoding
Expires: Wed, 07 Nov 2012 13:09:52 GMT
Cache-Control: max-age=7200
Content-Encoding: gzip
Age: 2250
Content-Length: 4421
Via: http/1.1 cn119 (ApacheTrafficServer/3.0.2 [cRs f ])
GET /go.asp?svid=13&id=14901532&checkcc=1&bookmark=1&checkget=1&tpages=1&ttimes=1&tzone=1&tcolor=24&sSize=1176,885&referrer=http%3A//ttlad.com/&vpage=http%3A//aaa.77xxmm.cn/new858.Htm%3F075 HTTP/1.1

Host: web1.51.la:82
GET /go.asp?svid=13&amp;id=14901532&amp;checkcc=1&amp;bookmark=1&amp;checkget=1&amp;tpages=1&amp;ttimes=1&amp;tzone=1&amp;tcolor=24&amp;sSize=1176,885&amp;referrer=http%3A//ttlad.com/&amp;vpage=http%3A//aaa.77xxmm.cn/new858.Htm%3F075 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: text/html
Date: Wed, 07 Nov 2012 11:47:27 GMT
Server: Microsoft-IIS/6.0
Content-Length: 0
Expires: Tue, 06 Nov 2012 19:07:27 GMT
Cache-Control: private
GET /icon_2.gif HTTP/1.1

Host: icon.ajiang.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: max-age=14400
Content-Length: 1023
Last-Modified: Fri, 26 May 2006 14:23:12 GMT
Accept-Ranges: bytes
Etag: &quot;083febcf80c61:be3&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 11:47:21 GMT
Connection: close
GET /h.js?fd39d9a564c98608b11be1e8b5c60a45 HTTP/1.1

Host: hm.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/javascript
Etag: a8cc871badb4211832feaca23bf1212f
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Set-Cookie: HMACCOUNT=9692C5616A5ECE45; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
P3P: CP=&quot;CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Connection: close
Content-Length: 5103
Date: Wed, 07 Nov 2012 11:47:22 GMT
Server: apache
GET /_o.gif?aid=16681&oid=2778&lc=1&g=frxz2&p=0 HTTP/1.1

Host: u.youxjia.com
GET /_o.gif?aid=16681&amp;oid=2778&amp;lc=1&amp;g=frxz2&amp;p=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx
Date: Wed, 07 Nov 2012 11:47:23 GMT
Content-Length: 0
Last-Modified: Fri, 08 Oct 2010 03:49:34 GMT
Connection: keep-alive
Accept-Ranges: bytes
GET /codesrc/yl.gif HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:10 GMT
Content-Length: 168
Last-Modified: Thu, 03 Nov 2011 08:33:33 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:10 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /images/close.png HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/png
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:10 GMT
Content-Length: 286
Last-Modified: Wed, 01 Dec 2010 04:21:55 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:10 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /images/dot.gif HTTP/1.1

Host: uimg.unionli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: OdinXu
Date: Wed, 07 Nov 2012 11:47:10 GMT
Content-Length: 43
Last-Modified: Mon, 14 Dec 2009 11:48:25 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 12:47:10 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
GET /union/js/sys/mm.js HTTP/1.1

Host: cb.alimama.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://z.alimama.com/alimama.php?i=mm_32597248_3296240_10749571&amp;w=188&amp;h=31&amp;g_style=3&amp;g_lg=1&amp;g_w=188&amp;g_h=31&amp;g_btn=1&amp;g_txt=aaa&amp;g_hot=1&amp;g_hc=0065FF&amp;g_c=1&amp;g_kwdcat=all&amp;g_bk=0&amp;g_bkc=EEEEEE&amp;g_sb=1&amp;g_sbpos=lt&amp;g_kwdfnt=12px&amp;g_kwdln=1&amp;g_sbbgc=9C5FB5&amp;re=1176x885&amp;cah=855&amp;caw=1176&amp;ccd=24&amp;ctz=1&amp;chl=1&amp;cja=1&amp;cpl=8&amp;cmm=54&amp;cf=10.0&amp;cg=52e6603ea39290990dc3c26a390ef912&amp;ac=3071&amp;pro=25850&amp;cas=pro&amp;cbh=1223&amp;cbw=0&amp;sx=0&amp;sy=1223&amp;refpos=,null,null&amp;t=g&amp;pf=1&amp;p4p_ai=1&amp;dx=&amp;iss=0&amp;u=http%3A%2F%2Fttlad.com%2F&amp;k=&amp;tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&amp;r=&amp;fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;pageid=aa6222081ccf1b051bb4d0d3143b6d6e
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=GBK
Server: Tengine
Date: Wed, 07 Nov 2012 11:09:56 GMT
Last-Modified: Wed, 23 Feb 2011 02:22:36 GMT
Vary: Accept-Encoding
Expires: Wed, 07 Nov 2012 13:09:56 GMT
Cache-Control: max-age=7200
Content-Encoding: gzip
Age: 2246
Content-Length: 43134
Via: http/1.1 cn119 (ApacheTrafficServer/3.0.2 [cRs f ])
GET /tbkunion/js/app/colorpicker.js HTTP/1.1

Host: cb.alimama.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://z.alimama.com/alimama.php?i=mm_32597248_3296240_10749571&amp;w=188&amp;h=31&amp;g_style=3&amp;g_lg=1&amp;g_w=188&amp;g_h=31&amp;g_btn=1&amp;g_txt=aaa&amp;g_hot=1&amp;g_hc=0065FF&amp;g_c=1&amp;g_kwdcat=all&amp;g_bk=0&amp;g_bkc=EEEEEE&amp;g_sb=1&amp;g_sbpos=lt&amp;g_kwdfnt=12px&amp;g_kwdln=1&amp;g_sbbgc=9C5FB5&amp;re=1176x885&amp;cah=855&amp;caw=1176&amp;ccd=24&amp;ctz=1&amp;chl=1&amp;cja=1&amp;cpl=8&amp;cmm=54&amp;cf=10.0&amp;cg=52e6603ea39290990dc3c26a390ef912&amp;ac=3071&amp;pro=25850&amp;cas=pro&amp;cbh=1223&amp;cbw=0&amp;sx=0&amp;sy=1223&amp;refpos=,null,null&amp;t=g&amp;pf=1&amp;p4p_ai=1&amp;dx=&amp;iss=0&amp;u=http%3A%2F%2Fttlad.com%2F&amp;k=&amp;tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&amp;r=&amp;fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;pageid=aa6222081ccf1b051bb4d0d3143b6d6e
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=GBK
Server: Tengine
Date: Wed, 07 Nov 2012 11:27:07 GMT
Last-Modified: Thu, 03 Jun 2010 02:06:48 GMT
Vary: Accept-Encoding
Expires: Wed, 07 Nov 2012 13:27:07 GMT
Cache-Control: max-age=7200
Content-Encoding: gzip
Age: 1217
Content-Length: 5944
Via: http/1.1 cn119 (ApacheTrafficServer/3.0.2 [cRs f ])
GET /origin_src/flash/tan268xxrx/320x270.swf HTTP/1.1

Host: swf.youxjia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Expires: Wed, 07 Nov 2012 12:43:36 GMT
Date: Wed, 07 Nov 2012 10:43:36 GMT
Server: nginx
Content-Length: 54794
Last-Modified: Tue, 23 Oct 2012 05:48:26 GMT
Cache-Control: max-age=7200
Accept-Ranges: bytes
Age: 1
X-Via: 1.1 gdcz23:8361 (Cdn Cache Server V2.0)
Connection: keep-alive
GET /tbk_inf.js HTTP/1.1

Host: z.alimama.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://z.alimama.com/alimama.php?i=mm_32597248_3296240_10749571&amp;w=188&amp;h=31&amp;g_style=3&amp;g_lg=1&amp;g_w=188&amp;g_h=31&amp;g_btn=1&amp;g_txt=aaa&amp;g_hot=1&amp;g_hc=0065FF&amp;g_c=1&amp;g_kwdcat=all&amp;g_bk=0&amp;g_bkc=EEEEEE&amp;g_sb=1&amp;g_sbpos=lt&amp;g_kwdfnt=12px&amp;g_kwdln=1&amp;g_sbbgc=9C5FB5&amp;re=1176x885&amp;cah=855&amp;caw=1176&amp;ccd=24&amp;ctz=1&amp;chl=1&amp;cja=1&amp;cpl=8&amp;cmm=54&amp;cf=10.0&amp;cg=52e6603ea39290990dc3c26a390ef912&amp;ac=3071&amp;pro=25850&amp;cas=pro&amp;cbh=1223&amp;cbw=0&amp;sx=0&amp;sy=1223&amp;refpos=,null,null&amp;t=g&amp;pf=1&amp;p4p_ai=1&amp;dx=&amp;iss=0&amp;u=http%3A%2F%2Fttlad.com%2F&amp;k=&amp;tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&amp;r=&amp;fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;pageid=aa6222081ccf1b051bb4d0d3143b6d6e
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: Tengine
Date: Wed, 07 Nov 2012 11:47:24 GMT
Last-Modified: Wed, 19 Sep 2012 11:51:35 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Wed, 07 Nov 2012 11:47:24 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
GET /popcode_2a.php?aid=16390&lc=1&domain=aaa.77xxmm.cn HTTP/1.1

Host: code01.youxjia.com
GET /popcode_2a.php?aid=16390&amp;lc=1&amp;domain=aaa.77xxmm.cn HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Server: nginx
Date: Wed, 07 Nov 2012 11:47:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
GET /min/?b=libs/yui&f=3.1.0/build/stylesheet/stylesheet-min.js HTTP/1.1

Host: cb.alimama.cn
GET /min/?b=libs/yui&amp;f=3.1.0/build/stylesheet/stylesheet-min.js HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://z.alimama.com/alimama.php?i=mm_32597248_3296240_10749571&amp;w=188&amp;h=31&amp;g_style=3&amp;g_lg=1&amp;g_w=188&amp;g_h=31&amp;g_btn=1&amp;g_txt=aaa&amp;g_hot=1&amp;g_hc=0065FF&amp;g_c=1&amp;g_kwdcat=all&amp;g_bk=0&amp;g_bkc=EEEEEE&amp;g_sb=1&amp;g_sbpos=lt&amp;g_kwdfnt=12px&amp;g_kwdln=1&amp;g_sbbgc=9C5FB5&amp;re=1176x885&amp;cah=855&amp;caw=1176&amp;ccd=24&amp;ctz=1&amp;chl=1&amp;cja=1&amp;cpl=8&amp;cmm=54&amp;cf=10.0&amp;cg=52e6603ea39290990dc3c26a390ef912&amp;ac=3071&amp;pro=25850&amp;cas=pro&amp;cbh=1223&amp;cbw=0&amp;sx=0&amp;sy=1223&amp;refpos=,null,null&amp;t=g&amp;pf=1&amp;p4p_ai=1&amp;dx=&amp;iss=0&amp;u=http%3A%2F%2Fttlad.com%2F&amp;k=&amp;tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&amp;r=&amp;fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;pageid=aa6222081ccf1b051bb4d0d3143b6d6e
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8
Server: nginx
Date: Wed, 07 Nov 2012 10:59:52 GMT
X-Powered-By: PHP/5.2.9
Expires: Wed, 07 Nov 2012 12:59:52 GMT
Vary: Accept-Encoding
Last-Modified: Wed, 31 Mar 2010 04:06:30 GMT
Etag: &quot;pub1270008390;gz&quot;
Cache-Control: max-age=7200, public
Content-Length: 1667
Content-Encoding: gzip
Age: 2852
Via: http/1.1 cn119 (ApacheTrafficServer/3.0.2 [cRs f ])
GET /union/2a_ie8.js HTTP/1.1

Host: www.qq937.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf8
Expires: Wed, 07 Nov 2012 13:11:23 GMT
Date: Wed, 07 Nov 2012 11:11:23 GMT
Server: nginx
Content-Length: 3376
Last-Modified: Mon, 02 Jul 2012 04:47:14 GMT
Cache-Control: max-age=7200
Accept-Ranges: bytes
Age: 1
X-Via: 1.1 stsz69:80 (Cdn Cache Server V2.0), 1.1 zjhz163:18081 (Cdn Cache Server V2.0)
Connection: keep-alive
GET /cms/images/1290404016001.png HTTP/1.1

Host: img.alimama.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://z.alimama.com/alimama.php?i=mm_32597248_3296240_10749571&amp;w=188&amp;h=31&amp;g_style=3&amp;g_lg=1&amp;g_w=188&amp;g_h=31&amp;g_btn=1&amp;g_txt=aaa&amp;g_hot=1&amp;g_hc=0065FF&amp;g_c=1&amp;g_kwdcat=all&amp;g_bk=0&amp;g_bkc=EEEEEE&amp;g_sb=1&amp;g_sbpos=lt&amp;g_kwdfnt=12px&amp;g_kwdln=1&amp;g_sbbgc=9C5FB5&amp;re=1176x885&amp;cah=855&amp;caw=1176&amp;ccd=24&amp;ctz=1&amp;chl=1&amp;cja=1&amp;cpl=8&amp;cmm=54&amp;cf=10.0&amp;cg=52e6603ea39290990dc3c26a390ef912&amp;ac=3071&amp;pro=25850&amp;cas=pro&amp;cbh=1223&amp;cbw=0&amp;sx=0&amp;sy=1223&amp;refpos=,null,null&amp;t=g&amp;pf=1&amp;p4p_ai=1&amp;dx=&amp;iss=0&amp;u=http%3A%2F%2Fttlad.com%2F&amp;k=&amp;tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&amp;r=&amp;fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;pageid=aa6222081ccf1b051bb4d0d3143b6d6e
HTTP/1.1 200 OK

Content-Type: image/png
Server: Tengine
Date: Tue, 06 Nov 2012 01:50:40 GMT
Content-Length: 505
Last-Modified: Mon, 22 Nov 2010 05:43:23 GMT
Expires: Fri, 04 Nov 2022 01:50:40 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Age: 122206
Via: http/1.1 cn119 (ApacheTrafficServer/3.0.2 [cRs f ])
GET /cms/images/1290413484058.png HTTP/1.1

Host: img.alimama.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://z.alimama.com/alimama.php?i=mm_32597248_3296240_10749571&amp;w=188&amp;h=31&amp;g_style=3&amp;g_lg=1&amp;g_w=188&amp;g_h=31&amp;g_btn=1&amp;g_txt=aaa&amp;g_hot=1&amp;g_hc=0065FF&amp;g_c=1&amp;g_kwdcat=all&amp;g_bk=0&amp;g_bkc=EEEEEE&amp;g_sb=1&amp;g_sbpos=lt&amp;g_kwdfnt=12px&amp;g_kwdln=1&amp;g_sbbgc=9C5FB5&amp;re=1176x885&amp;cah=855&amp;caw=1176&amp;ccd=24&amp;ctz=1&amp;chl=1&amp;cja=1&amp;cpl=8&amp;cmm=54&amp;cf=10.0&amp;cg=52e6603ea39290990dc3c26a390ef912&amp;ac=3071&amp;pro=25850&amp;cas=pro&amp;cbh=1223&amp;cbw=0&amp;sx=0&amp;sy=1223&amp;refpos=,null,null&amp;t=g&amp;pf=1&amp;p4p_ai=1&amp;dx=&amp;iss=0&amp;u=http%3A%2F%2Fttlad.com%2F&amp;k=&amp;tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&amp;r=&amp;fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;pageid=aa6222081ccf1b051bb4d0d3143b6d6e
HTTP/1.1 200 OK

Content-Type: image/png
Server: Tengine
Date: Mon, 05 Nov 2012 06:34:20 GMT
Content-Length: 522
Last-Modified: Mon, 22 Nov 2010 08:21:12 GMT
Expires: Thu, 03 Nov 2022 06:34:20 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Age: 191586
Via: http/1.1 cn119 (ApacheTrafficServer/3.0.2 [cRs f ])
GET /b/engines/bs-engine.js?v=20121107 HTTP/1.1

Host: static.bshare.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Content-Encoding: gzip
Cache-Control: max-age=432000
Date: Wed, 07 Nov 2012 11:47:26 GMT
Expires: Mon, 12 Nov 2012 11:47:26 GMT
Last-Modified: Wed, 07 Nov 2012 09:43:35 GMT
Server: ECS (arn/46FE)
SID: bsweb8
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 3333
GET /b/langs/bs-lang-zh.js?v=20121107 HTTP/1.1

Host: static.bshare.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Content-Encoding: gzip
Cache-Control: max-age=432000
Date: Wed, 07 Nov 2012 11:47:26 GMT
Expires: Mon, 12 Nov 2012 11:47:26 GMT
Last-Modified: Wed, 07 Nov 2012 09:42:55 GMT
Server: ECS (arn/46FB)
SID: bsweb8
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 2643
GET /b/components/bsMore.js?v=20121107 HTTP/1.1

Host: static.bshare.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Content-Encoding: gzip
Cache-Control: max-age=432000
Date: Wed, 07 Nov 2012 11:47:26 GMT
Expires: Mon, 12 Nov 2012 11:47:26 GMT
Last-Modified: Wed, 07 Nov 2012 09:44:20 GMT
Server: ECS (arn/46EB)
SID: bsweb8
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 2136
GET /b/styles/bshareS887.js?v=20121107 HTTP/1.1

Host: static.bshare.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Content-Encoding: gzip
Cache-Control: max-age=432000
Date: Wed, 07 Nov 2012 11:47:26 GMT
Expires: Mon, 12 Nov 2012 11:47:26 GMT
Last-Modified: Wed, 07 Nov 2012 09:44:12 GMT
Server: ECS (arn/46E7)
SID: bsweb8
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 2918
GET /frame/images/logos/s4/more.png HTTP/1.1

Host: static.bshare.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/png
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Wed, 07 Nov 2012 11:47:26 GMT
Expires: Fri, 07 Dec 2012 11:47:26 GMT
Last-Modified: Thu, 27 Sep 2012 06:51:32 GMT
Server: ECS (arn/46FA)
SID: bsweb8
X-Cache: HIT
Content-Length: 453
GET /frame/images/logos/s4/sprite/top_logos_sprite.png HTTP/1.1

Host: static.bshare.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/png
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Wed, 07 Nov 2012 11:47:26 GMT
Expires: Fri, 07 Dec 2012 11:47:26 GMT
Last-Modified: Thu, 27 Sep 2012 06:51:32 GMT
Server: ECS (arn/46E4)
SID: bsweb7
X-Cache: HIT
Content-Length: 21798
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1176x885&et=0&fl=10.0&ja=1&ln=en-US&lo=0&nv=1&rnd=2053535274&si=fd39d9a564c98608b11be1e8b5c60a45&st=3&su=http%3A%2F%2Fttlad.com%2F&v=1.0.34&lv=1 HTTP/1.1

Host: hm.baidu.com
GET /hm.gif?cc=1&amp;ck=1&amp;cl=24-bit&amp;ds=1176x885&amp;et=0&amp;fl=10.0&amp;ja=1&amp;ln=en-US&amp;lo=0&amp;nv=1&amp;rnd=2053535274&amp;si=fd39d9a564c98608b11be1e8b5c60a45&amp;st=3&amp;su=http%3A%2F%2Fttlad.com%2F&amp;v=1.0.34&amp;lv=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
Cookie: HMACCOUNT=9692C5616A5ECE45
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: private, max-age=0, no-cache
Pragma: no-cache
X-Content-Type-Options: nosniff
Connection: close
Content-Length: 43
Date: Wed, 07 Nov 2012 11:47:26 GMT
Server: apache
GET /bshare_view?Callback=bShare.viewcb&url=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&h=&uuid=7b844e18-5c08-4599-8836-0ef754d0fa03&sc=1&l=17&lite=1&ref=ttlad.com HTTP/1.1

Host: b.bshare.cn
GET /bshare_view?Callback=bShare.viewcb&amp;url=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;h=&amp;uuid=7b844e18-5c08-4599-8836-0ef754d0fa03&amp;sc=1&amp;l=17&amp;lite=1&amp;ref=ttlad.com HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/json;charset=UTF-8
Server: nginx
Date: Wed, 07 Nov 2012 11:47:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: JSESSIONID=88416062B4E19030BA6CD5E7145685C2; Path=/; HttpOnly v=&quot;1FF8xntdB4OFwM5VDzsj|::&quot;; Version=1; Domain=bshare.cn; Max-Age=62208000; Expires=Tue, 28-Oct-2014 11:47:27 GMT; Path=/
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Cache-Control: no-cache
SID: bsweb10
GET /_pd.gif?aid=16390&lc=1&time=1352288844&g=qsqy&p=0&flag=41c0955bf7ead33342962e30cff97081&domain=aaa.77xxmm.cn&b=0&oid=2778 HTTP/1.1

Host: u.union178.com
GET /_pd.gif?aid=16390&amp;lc=1&amp;time=1352288844&amp;g=qsqy&amp;p=0&amp;flag=41c0955bf7ead33342962e30cff97081&amp;domain=aaa.77xxmm.cn&amp;b=0&amp;oid=2778 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx
Date: Wed, 07 Nov 2012 11:47:28 GMT
Content-Length: 0
Last-Modified: Fri, 17 Dec 2010 06:41:06 GMT
Connection: keep-alive
Accept-Ranges: bytes
GET /3.gif?pid=mm_32597248_3296240_10749571&type=4&subtype=3&pre=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&topurl=http%3A%2F%2Fttlad.com%2F HTTP/1.1

Host: acookie.taobao.com
GET /3.gif?pid=mm_32597248_3296240_10749571&amp;type=4&amp;subtype=3&amp;pre=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;topurl=http%3A%2F%2Fttlad.com%2F HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://z.alimama.com/alimama.php?i=mm_32597248_3296240_10749571&amp;w=188&amp;h=31&amp;g_style=3&amp;g_lg=1&amp;g_w=188&amp;g_h=31&amp;g_btn=1&amp;g_txt=aaa&amp;g_hot=1&amp;g_hc=0065FF&amp;g_c=1&amp;g_kwdcat=all&amp;g_bk=0&amp;g_bkc=EEEEEE&amp;g_sb=1&amp;g_sbpos=lt&amp;g_kwdfnt=12px&amp;g_kwdln=1&amp;g_sbbgc=9C5FB5&amp;re=1176x885&amp;cah=855&amp;caw=1176&amp;ccd=24&amp;ctz=1&amp;chl=1&amp;cja=1&amp;cpl=8&amp;cmm=54&amp;cf=10.0&amp;cg=52e6603ea39290990dc3c26a390ef912&amp;ac=3071&amp;pro=25850&amp;cas=pro&amp;cbh=1223&amp;cbw=0&amp;sx=0&amp;sy=1223&amp;refpos=,null,null&amp;t=g&amp;pf=1&amp;p4p_ai=1&amp;dx=&amp;iss=0&amp;u=http%3A%2F%2Fttlad.com%2F&amp;k=&amp;tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&amp;r=&amp;fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;pageid=aa6222081ccf1b051bb4d0d3143b6d6e
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Server: Tengine
Date: Wed, 07 Nov 2012 11:47:28 GMT
Transfer-Encoding: chunked
Connection: close
P3P: CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV&quot;
Location: http://hz.mmstat.com/a?XzOzGe85AA=1629514861&amp;K9g5CWjDh9=VdypBWLpTVcLWaDIz4lZ-j0-oAT6vrJ-qKHBvxMhxg929TpO.fHwEQ__
Set-Cookie: sc=a0857dc0; path=/; domain=.acookie.taobao.com linezing_session=cb320115093981fbaed5f2c1_1352288848_1; path=/; domain=.acookie.taobao.com
GET /hmt/icon/13.swf HTTP/1.1

Host: eiv.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Etag: &quot;461000679&quot;
Accept-Ranges: bytes
Last-Modified: Tue, 13 Apr 2010 09:38:40 GMT
Expires: Fri, 16 Sep 2022 11:47:27 GMT
Cache-Control: max-age=311040000
Content-Length: 9025
Date: Wed, 07 Nov 2012 11:47:27 GMT
Server: BWS/1.0
GET /a?XzOzGe85AA=1629514861&K9g5CWjDh9=VdypBWLpTVcLWaDIz4lZ-j0-oAT6vrJ-qKHBvxMhxg929TpO.fHwEQ__ HTTP/1.1

Host: hz.mmstat.com
GET /a?XzOzGe85AA=1629514861&amp;K9g5CWjDh9=VdypBWLpTVcLWaDIz4lZ-j0-oAT6vrJ-qKHBvxMhxg929TpO.fHwEQ__ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://z.alimama.com/alimama.php?i=mm_32597248_3296240_10749571&amp;w=188&amp;h=31&amp;g_style=3&amp;g_lg=1&amp;g_w=188&amp;g_h=31&amp;g_btn=1&amp;g_txt=aaa&amp;g_hot=1&amp;g_hc=0065FF&amp;g_c=1&amp;g_kwdcat=all&amp;g_bk=0&amp;g_bkc=EEEEEE&amp;g_sb=1&amp;g_sbpos=lt&amp;g_kwdfnt=12px&amp;g_kwdln=1&amp;g_sbbgc=9C5FB5&amp;re=1176x885&amp;cah=855&amp;caw=1176&amp;ccd=24&amp;ctz=1&amp;chl=1&amp;cja=1&amp;cpl=8&amp;cmm=54&amp;cf=10.0&amp;cg=52e6603ea39290990dc3c26a390ef912&amp;ac=3071&amp;pro=25850&amp;cas=pro&amp;cbh=1223&amp;cbw=0&amp;sx=0&amp;sy=1223&amp;refpos=,null,null&amp;t=g&amp;pf=1&amp;p4p_ai=1&amp;dx=&amp;iss=0&amp;u=http%3A%2F%2Fttlad.com%2F&amp;k=&amp;tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&amp;r=&amp;fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;pageid=aa6222081ccf1b051bb4d0d3143b6d6e
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html
Server: Tengine
Date: Wed, 07 Nov 2012 11:47:29 GMT
Transfer-Encoding: chunked
Connection: close
Set-Cookie: cna=UTghCUcnlE0CAf6oy1DX7e1z; expires=Thu, 31-Dec-2037 16:00:00 GMT; path=/; domain=.mmstat.com ac_session=UTghCUcnlE0CAf6oy1DX7e1z_1352288849_1; path=/; domain=.mmstat.com
P3P: policyref=&quot;http://p3p.mmstat.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV&quot;
Location: http://acookie.taobao.com/3.gif?XzOzGe85AA=1396910705&amp;a3G4ApKGeL=3tjTW9uVudktHxRgKxlOcrth5sRQLyG5amwtPA3DNJk_
GET /3.gif?XzOzGe85AA=1396910705&a3G4ApKGeL=3tjTW9uVudktHxRgKxlOcrth5sRQLyG5amwtPA3DNJk_ HTTP/1.1

Host: acookie.taobao.com
GET /3.gif?XzOzGe85AA=1396910705&amp;a3G4ApKGeL=3tjTW9uVudktHxRgKxlOcrth5sRQLyG5amwtPA3DNJk_ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://z.alimama.com/alimama.php?i=mm_32597248_3296240_10749571&amp;w=188&amp;h=31&amp;g_style=3&amp;g_lg=1&amp;g_w=188&amp;g_h=31&amp;g_btn=1&amp;g_txt=aaa&amp;g_hot=1&amp;g_hc=0065FF&amp;g_c=1&amp;g_kwdcat=all&amp;g_bk=0&amp;g_bkc=EEEEEE&amp;g_sb=1&amp;g_sbpos=lt&amp;g_kwdfnt=12px&amp;g_kwdln=1&amp;g_sbbgc=9C5FB5&amp;re=1176x885&amp;cah=855&amp;caw=1176&amp;ccd=24&amp;ctz=1&amp;chl=1&amp;cja=1&amp;cpl=8&amp;cmm=54&amp;cf=10.0&amp;cg=52e6603ea39290990dc3c26a390ef912&amp;ac=3071&amp;pro=25850&amp;cas=pro&amp;cbh=1223&amp;cbw=0&amp;sx=0&amp;sy=1223&amp;refpos=,null,null&amp;t=g&amp;pf=1&amp;p4p_ai=1&amp;dx=&amp;iss=0&amp;u=http%3A%2F%2Fttlad.com%2F&amp;k=&amp;tt=%E7%BD%91%E7%BB%9C%E6%97%B6%E5%B0%9A%E9%A3%8E%E5%90%91%E6%A0%87%20-%2077xxmm.cn%20-%20%E5%9B%A0%E5%85%AC%E5%8F%B8%E4%B8%9A%E5%8A%A1%E8%BD%AC%E5%9E%8B%EF%BC%8C%E5%9F%9F%E5%90%8D%E4%BD%8E%E4%BB%B7%E8%BD%AC%E8%AE%A9%EF%BC%81%20QQ%EF%BC%9A239288299&amp;r=&amp;fu=http%3A%2F%2Faaa.77xxmm.cn%2Fnew858.Htm%3F075&amp;pageid=aa6222081ccf1b051bb4d0d3143b6d6e
Cookie: sc=a0857dc0; linezing_session=cb320115093981fbaed5f2c1_1352288848_1
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Tengine
Date: Wed, 07 Nov 2012 11:47:29 GMT
Content-Length: 49
Connection: close
P3P: CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV&quot;
Set-Cookie: cna=UTghCUcnlE0CAf6oy1DX7e1z; expires=Thu, 31-Dec-37 16:00:00 GMT; path=/; domain=.taobao.com linezing_session=cb320115093981fbaed5f2c1_1352288848_2; path=/; domain=.acookie.taobao.com
GET /favicon.ico HTTP/1.1

Host: ttlad.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 404 Object Not Found

Content-Type: text/html
Server: Microsoft-IIS/5.0
Date: Wed, 07 Nov 2012 11:47:33 GMT
Connection: close
Content-Length: 3733
GET /9.gif?abc=1&rnd=2093740913 HTTP/1.1

Host: cnzz.mmstat.com
GET /9.gif?abc=1&amp;rnd=2093740913 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aaa.77xxmm.cn/new858.Htm?075


GET /errOr/404.html HTTP/1.1

Host: aaa.1l1l1l.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ttlad.com/