Trojan.Win32.FlyStudio_08008acead

by malwarelabrobot on April 17th, 2014 in Malware Descriptions.

Gen:Variant.Strictor.22223 (B) (Emsisoft), Gen:Variant.Strictor.22223 (AdAware), Trojan.Win32.FlyStudio.FD, GenericEmailWorm.YR, GenericPhysicalDrive0.YR, TrojanFlyStudio.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, EmailWorm


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: 08008acead8b70d75e0d653ee262b21f
SHA1: e0ecc45f3019f46fde84e6c243e9dc1f5b1e6873
SHA256: 05398aa5c4d077bbbc79f479a4598fd8a613755d029e53ee361b0267e60a52e1
SSDeep: 24576:u3ICohUFgqgnP0nweEL8mTZaqdiXSp0c02uFG6dAk3CMNPoefGqx:uFgS9m8mTZaqdwk0c05HGi6el
Size: 1863680 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6, MicrosoftVisualC, MicrosoftVisualCv50v60MFC, MicrosoftVisualC50, Armadillov171
Company: AirInstaller
Created at: 2013-08-01 16:53:41
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Behaviour Description
EmailWorm Worm can send e-mails.


Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

%original file name%.exe:588

File activity

The process %original file name%.exe:588 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Cookies\index.dat (66516 bytes)
C:\SkinH_EL.dll (88 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@iwofeng[1].txt (4578 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@iwofeng[2].txt (4444 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Cookies\Current_User@iwofeng[1].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@iwofeng[2].txt (0 bytes)

Registry activity

The process %original file name%.exe:588 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Multimedia\DrawDib]
"vga.drv 1024x768x32(BGR 0)" = "31,31,31,31"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 12 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "58 C0 7C A7 DE A4 10 3A 2B C7 B4 8E 82 CF 1C 93"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"%original file name%.exe" = "c:\%original file name%.exe"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5 File path
147127382e001f495d1842ee7a9e7912 c:\SkinH_EL.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name:
Product Name: iphone????
Product Version: 1.0.0.0
Legal Copyright: ?????? ????????
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.0.0.0
File Description: ?????
Comments: ??????????(http://www.eyuyan.com)
Language: English (United States)

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 776722 778240 4.47287 582f6b138f6949c8b452c28344f85b87
.rdata 782336 977258 978944 5.41432 edefa1c10f64e6f81f4322ef9b4ba482
.data 1761280 272682 69632 3.40031 b1eb8c8b4a2c32ebefec3f3eee212ee5
.rsrc 2035712 29184 32768 3.444 6b46f4caaceed649ebc786d514293e3a

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL IP
hxxp://208.73.211.250/ok.txt
hxxp://208.73.211.250/tc.txt


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /ok.txt HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=99
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:32 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=6-TngYqLY5VCnWe1w8-4s6DI8G2ChMIpkrv425oxsV0ePC8zOF4YAqMQQWJ
X1CjA6gUZbJ9zhbbwBcmwOD1HgQoHKRPK9DjMsLslPzAFzRIlyihDupJ3x1kadLukdI7av
uUZT2T0Lnhj-7WCemgATW1QT23KoxrUJj0alH4UT-rpSZqe6qcaagAgkN6vvwAA4H8BAAB
AgFsLAAAUGb5NWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=6-TngYqLY5VCnWe1w8-4s6DI8G2ChMIpkrv425oxsV0ePC8zOF4YAqMQQWJX1
CjA6gUZbJ9zhbbwBcmwOD1HgQoHKRPK9DjMsLslPzAFzRIlyihDupJ3x1kadLukdI7avuU
ZT2T0Lnhj-7WCemgATW1QT23KoxrUJj0alH4UT-rpSZqe6qcaagAgkN6vvwAA4H8BAABAg
FsLAAAUGb5NWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1363
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:33 GMT
Connection: Keep-Alive
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=1hKla4EtqQovLKiwtEEmLgB3KbIfJBROkdzFH4cOtsuqZ7cayx4vJAJJCUE
ya9CAgKwvosGufbhkGk5E92bgvI9CLGDczkL3dGDcyOM99RdRFVWFkhqq5ZBoz7LxULbNV
Ac9rezw96RZSDc1p5RM2dRDGtJPGfVTNOqnGkwAwAQAY3AAIJDer78AAKB_AQAAQIBbCwA
A3KXIfllTJllBMTZoWkKUAAAA8A" name="iwofeng.com">. </frameset>
;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?e
pl=1hKla4EtqQovLKiwtEEmLgB3KbIfJBROkdzFH4cOtsuqZ7cayx4vJAJJCUEya9CAgKw
vosGufbhkGk5E92bgvI9CLGDczkL3dGDcyOM99RdRFVWFkhqq5ZBoz7LxULbNVAc9rezw9
6RZSDc1p5RM2dRDGtJPGfVTNOqnGkwAwAQAY3AAIJDer78AAKB_AQAAQIBbCwAA3KXIfll
TJllBMTZoWkKUAAAA8A">Click here to go to iwofeng.com</a>.<
/body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=98
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:35 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=mBF5LeWi0oGH8274WUvX3IC0njNBSCicIrmLf40Eeuv0XHqhudKiEJQeIkj
yhokIlFlYRNxl5cwVtjAqFdFzHOwQxCQhVY9gxpsb5unzJAwDqdKJEs4ETXRI3RFkNR1x2
XbaE2HaEdpU3IzapGEoPeqnNtVmiqfSP1UDVD80ABqopzblUQ11ACCQ3q-_AADgfwEAAEC
AWwsAAGk9Z4JZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=mBF5LeWi0oGH8274WUvX3IC0njNBSCicIrmLf40Eeuv0XHqhudKiEJQeIkjyho
kIlFlYRNxl5cwVtjAqFdFzHOwQxCQhVY9gxpsb5unzJAwDqdKJEs4ETXRI3RFkNR1x2Xba
E2HaEdpU3IzapGEoPeqnNtVmiqfSP1UDVD80ABqopzblUQ11ACCQ3q-_AADgfwEAAECAWw
sAAGk9Z4JZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=98
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:36 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=lV5-WA5wuXl4wIcwJ6cKv-AtIFCGhMIpkrv4aZeijKQfK5mKsROEgOQVQQJ
DvHAAwQmSIet2rtwZY5CMxOV9FKhwMLFRZseBBv9u6pdxqCBRHVnn0b-0lU2BcMZAoLZDw
taVWgTTxleHNaeUemgAmaYe9Wg0VD_VME31TA0ataeJ6KfalE01ZAAgkN6vvwAA4H8BAAB
AgFsLAAC8BQTKWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=lV5-WA5wuXl4wIcwJ6cKv-AtIFCGhMIpkrv4aZeijKQfK5mKsROEgOQVQQJDv
HAAwQmSIet2rtwZY5CMxOV9FKhwMLFRZseBBv9u6pdxqCBRHVnn0b-0lU2BcMZAoLZDwta
VWgTTxleHNaeUemgAmaYe9Wg0VD_VME31TA0ataeJ6KfalE01ZAAgkN6vvwAA4H8BAABAg
FsLAAC8BQTKWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=98
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:38 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=oXztxIHi9NT8LGUqR00wnbztfTxBQuEUyV38tEtRRtKPlUzF2AlCQPKKIIE
hXjiA4ITRoPNLOGEqZdiQHYjfmLAJRD1XDulAWNS4r_0YUiUkc4FWuRo7zGZxZRGffTqof
OHJE93tKyuXw2ulHhpApqlHPRoN1U810FQPPaj2pGHqqakJTzVkACCQ3q-_AADgfwEAAEC
AWwsAAG97H09ZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=oXztxIHi9NT8LGUqR00wnbztfTxBQuEUyV38tEtRRtKPlUzF2AlCQPKKIIEhXj
iA4ITRoPNLOGEqZdiQHYjfmLAJRD1XDulAWNS4r_0YUiUkc4FWuRo7zGZxZRGffTqofOHJ
E93tKyuXw2ulHhpApqlHPRoN1U810FQPPaj2pGHqqakJTzVkACCQ3q-_AADgfwEAAECAWw
sAAG97H09ZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=96
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:38 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=w8UV2gDE4pqYfBgH07qbAYCtQ0JnSCicIrmLP60X0trcY-WMjIUrDIHVEEF
CHyIKsKsgg-1zrlA2uiCZFafnKFDhIGVGmR4HCbs75iG0IkC4aJTdmWbBhk252ayunjsif
buvnsjwd8Eamt-BemigQT1QT23KphrUJo1B2VRPT2qDmp7qpxpqACCQ3q-_AADgfwEAAEC
AWwsAAFuHhM5ZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=w8UV2gDE4pqYfBgH07qbAYCtQ0JnSCicIrmLP60X0trcY-WMjIUrDIHVEEFCHy
IKsKsgg-1zrlA2uiCZFafnKFDhIGVGmR4HCbs75iG0IkC4aJTdmWbBhk252ayunjsifbuv
nsjwd8Eamt-BemigQT1QT23KphrUJo1B2VRPT2qDmp7qpxpqACCQ3q-_AADgfwEAAECAWw
sAAFuHhM5ZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=90
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:40 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=8IJDF6z2Y0q7XBBtg8DbR3jTPuOAhMIpkrv4aZeijKQfK5mKsROEgOQVQQJ
DvHAAwYmSkPmNQZh-EUWZYXgfEAVhiHQfZYehQtp-6lQOsU0AbSKjkqsaWztKQfFk2kHHC
1M-qe_7XB5bfE7qoQFkmnrUo9FQ_VQDUc_Ug2KanhqaGrVHNWQAIJDer78AAOB_AQAAQIB
bCwAAb9pnHFlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=8IJDF6z2Y0q7XBBtg8DbR3jTPuOAhMIpkrv4aZeijKQfK5mKsROEgOQVQQJDvHA
AwYmSkPmNQZh-EUWZYXgfEAVhiHQfZYehQtp-6lQOsU0AbSKjkqsaWztKQfFk2kHHC1M-q
e_7XB5bfE7qoQFkmnrUo9FQ_VQDUc_Ug2KanhqaGrVHNWQAIJDer78AAOB_AQAAQIBbCwA
Ab9pnHFlTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=89
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:40 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=k9h0U4a0Pr_iio5836Vdn1AH2-iHhMIpkrvY6UiY107PnZeZWxaGwChEkOx
nxIiAzRZksJ3OlfrCGCTj4vQcBSocYKFQpsdBwu6W-WlnviBDJw-ioiqJqEmtqClJh95sP
NFEiO0IbQ6nlDZpGKmfmmyqN0nzVPqnaoB6aJChNqinNuVRDXUAIJDer78AAKB_AQAAQIB
bCwAA6mAb_VlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=k9h0U4a0Pr_iio5836Vdn1AH2-iHhMIpkrvY6UiY107PnZeZWxaGwChEkOxnxIi
AzRZksJ3OlfrCGCTj4vQcBSocYKFQpsdBwu6W-WlnviBDJw-ioiqJqEmtqClJh95sPNFEi
O0IbQ6nlDZpGKmfmmyqN0nzVPqnaoB6aJChNqinNuVRDXUAIJDer78AAKB_AQAAQIBbCwA
A6mAb_VlTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1365
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=92
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:42 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=Dsci2Qn-ejim6UenM0j62_qS8U0hoXCK5C7-M3SUnXUnW5WKbMSZEFPGQxD
FFBgIk-bEonL7mXRhGBPdy2P4jSRKDL3zQ_d2jEpZTXVerVA342rkgmZECwHJCpRAag_tS
6HQMy5MKepxuRmABrVJD0CZmAg16jGZ6FFTP2lTk6foqRJ0ACCQ3q-_AADgfwEAAECAWws
AAH3J-KZZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frameset&g
t;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?
epl=Dsci2Qn-ejim6UenM0j62_qS8U0hoXCK5C7-M3SUnXUnW5WKbMSZEFPGQxDFFBgIk-
bEonL7mXRhGBPdy2P4jSRKDL3zQ_d2jEpZTXVerVA342rkgmZECwHJCpRAag_tS6HQMy5M
KepxuRmABrVJD0CZmAg16jGZ6FFTP2lTk6foqRJ0ACCQ3q-_AADgfwEAAECAWwsAAH3J-K
ZZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</a>.&l
t;/body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1379
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=90
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:43 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=ZkNi9lZ2mrtrK6WsXzvau1CSu8eGhMIpkrv4aZeijKQfK5mKsROEgOQVQQJ
DvHAAwQkoIXVLZ26sGTAk43I-DNBwqLEV2nGoyB8--0WJUWWw0fUro9aEKJ1BlAGk8Y44W
zc2EV7agvW3zuekHhpApqlHPRoN1U810FTP1BPkqadmaupJT-lHNWQAIJDer78AAOB_AQA
AQIBbCwAASnL32FlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </fra
meset>. <noframes>..<body><a href="hXXp://VVV.iwofe
ng.com?epl=ZkNi9lZ2mrtrK6WsXzvau1CSu8eGhMIpkrv4aZeijKQfK5mKsROEgOQVQQJ
DvHAAwQkoIXVLZ26sGTAk43I-DNBwqLEV2nGoyB8--0WJUWWw0fUro9aEKJ1BlAGk8Y44W
zc2EV7agvW3zuekHhpApqlHPRoN1U810FTP1BPkqadmaupJT-lHNWQAIJDer78AAOB_AQA
AQIBbCwAASnL32FlTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.co
m</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1363
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=87
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:45 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=c2fI5SFmf-q2VUK-2pOAJgWjsReQUDhFchf_2hhSjzQnXVKSpLtLhIj1DEF
ETyAN4rw4iby28JNho3Gs7mC8z8M9MDezjVUOhlLj_fSzotK5NZL0KMddlN2m0MkUV-0cS
FuZ5atibdt8qeJzAoAJmExMGEOmbOpBGU1P8tRTpqanSmAAIJDer78AAOB_AQAAQIBbCwA
ABaOxF1lTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </frameset>
;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?e
pl=c2fI5SFmf-q2VUK-2pOAJgWjsReQUDhFchf_2hhSjzQnXVKSpLtLhIj1DEFETyAN4rw
4iby28JNho3Gs7mC8z8M9MDezjVUOhlLj_fSzotK5NZL0KMddlN2m0MkUV-0cSFuZ5atib
dt8qeJzAoAJmExMGEOmbOpBGU1P8tRTpqanSmAAIJDer78AAOB_AQAAQIBbCwAABaOxF1l
TJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a>.<
/body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1367
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=87
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:45 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=UoXFsGBDuxoO7bWjnEFdot4FzdshoXCK5C50GzrqzprTrUpFN1omxKRhCKK
ZIgNhUkssyuLPpF2GM9G9GPP3kUSJETscupdjVGjb0799j4AgSXgGI5mLagjlWEFcq0crq
Xv0jAtTSLpYPieABvWoDQ1EpqlBm2qPhmhTUz9p9JSJfqoSdAAgkN6vvwAA4H8BAABAgFs
LAADvgubtWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frameset&
gt;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com
?epl=UoXFsGBDuxoO7bWjnEFdot4FzdshoXCK5C50GzrqzprTrUpFN1omxKRhCKKZIgNhU
kssyuLPpF2GM9G9GPP3kUSJETscupdjVGjb0799j4AgSXgGI5mLagjlWEFcq0crqXv0jAt
TSLpYPieABvWoDQ1EpqlBm2qPhmhTUz9p9JSJfqoSdAAgkN6vvwAA4H8BAABAgFsLAADvg
ubtWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com</a>.
</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1379
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:47 GMT
Connection: Keep-Alive
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=w6UfroK2X96GbeNYjiLvJAC_zegXJBROkdzF_xZhZrN58rSZyRDDEJj9IUg
khY0CjGJQRNzpWKnPvSAZF6bnKFDBIIU6mR4GidimzD-KsX71S5AgorO0rVvL7qghWNcct
rxpwjtn8q6Hc_uUgnpoGho0MvXUpjyqQW3So0Hx1FNP6WlTGumnGmoAIJDer78AAOB_AQA
AQIBbCwAA_DajX1lTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </fra
meset>. <noframes>..<body><a href="hXXp://VVV.iwofe
ng.com?epl=w6UfroK2X96GbeNYjiLvJAC_zegXJBROkdzF_xZhZrN58rSZyRDDEJj9IUg
khY0CjGJQRNzpWKnPvSAZF6bnKFDBIIU6mR4GidimzD-KsX71S5AgorO0rVvL7qghWNcct
rxpwjtn8q6Hc_uUgnpoGho0MvXUpjyqQW3So0Hx1FNP6WlTGumnGmoAIJDer78AAOB_AQA
AQIBbCwAA_DajX1lTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.co
m</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=84
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:47 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=LYSW2BLueAg93XHEwZW4uCDOAeMNCYVTJHfx0y5FGUk_VjIVexOEgOIVQQJ
HvHAAxYlXo9YvnYTlSFFDE5fjkCiJwzw3Du04WNTxa1_Kph3EGUPEwhnaIDLbIIZBm98h0
wuPnojorQl1sbxW6qEBNJra1IMM1U810FQPbaj2qKGRqRFPNWQAIJDer78AAOB_AQAAQID
bCwAA4hww3llTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=LYSW2BLueAg93XHEwZW4uCDOAeMNCYVTJHfx0y5FGUk_VjIVexOEgOIVQQJHvHA
AxYlXo9YvnYTlSFFDE5fjkCiJwzw3Du04WNTxa1_Kph3EGUPEwhnaIDLbIIZBm98h0wuPn
ojorQl1sbxW6qEBNJra1IMM1U810FQPbaj2qKGRqRFPNWQAIJDer78AAOB_AQAAQIDbCwA
A4hww3llTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1365
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=42
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:49 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=vO508KOPETdZRbsi4RnGVIAhaM0ICYVTJHfxryFh4rI9eFpmcLwoBEUfgmS
ukAGBqhd1uH0OGtrSi5JhgXoOQxkQJ5NkeiBmHN4wbzRPGiJJJDELoy2CpT0iHqTtkGccT
7VzRePw3ZifUmroEZPaU4x6ehSkf6oGqIcGoDaopzzlUQ11ACCQ3q-_AACgfwEAAECAWws
AABiC1oxZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frameset&g
t;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?
epl=vO508KOPETdZRbsi4RnGVIAhaM0ICYVTJHfxryFh4rI9eFpmcLwoBEUfgmSukAGBqh
d1uH0OGtrSi5JhgXoOQxkQJ5NkeiBmHN4wbzRPGiJJJDELoy2CpT0iHqTtkGccT7VzRePw
3ZifUmroEZPaU4x6ehSkf6oGqIcGoDaopzzlUQ11ACCQ3q-_AACgfwEAAECAWwsAABiC1o
xZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</a>.&l
t;/body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1379
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=77
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:49 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=ExcF47bq4n0eFezgFNxk40BkfowHJBROkdzFT7sUZST9WMlUjJ0gBCSvCBI
Y4oUDCE4YDRrHhCfPmmFDdeBt42AHhB1cQzkQFhT3tS9SllyTU5JaOTGbtqiWevCQ9m6OO
WN58kR2iouOy71rpR4aQKapRz0aDdVPNdBUDz0oT7Jp6qkmPxVPNWQAIJDer78AAOB_AQA
AQIBbCwAAkfkxHllTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </fra
meset>. <noframes>..<body><a href="hXXp://VVV.iwofe
ng.com?epl=ExcF47bq4n0eFezgFNxk40BkfowHJBROkdzFT7sUZST9WMlUjJ0gBCSvCBI
Y4oUDCE4YDRrHhCfPmmFDdeBt42AHhB1cQzkQFhT3tS9SllyTU5JaOTGbtqiWevCQ9m6OO
WN58kR2iouOy71rpR4aQKapRz0aDdVPNdBUDz0oT7Jp6qkmPxVPNWQAIJDer78AAOB_AQA
AQIBbCwAAkfkxHllTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.co
m</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=93
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:51 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=Vau3LkQkNnrWRjDOMqfuHKwUfHggoXCK5C7-94JYpvembJeMssRQCFrjEES
1haaAWow0DNvxJpyuGgnjnOvzmcjJUaFdMN4cl3p6669J8MkWorMxouG5OaJMgQlypuIe5
qXsqyOIKJTqTK-iNtUeDdSj6Cdt6in9FP1UJYBGg3qkB-VpIjNFaAAgkN6vvwAA4H8BAAB
AgFsLAABWCj48WVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=Vau3LkQkNnrWRjDOMqfuHKwUfHggoXCK5C7-94JYpvembJeMssRQCFrjEES1h
aaAWow0DNvxJpyuGgnjnOvzmcjJUaFdMN4cl3p6669J8MkWorMxouG5OaJMgQlypuIe5qX
sqyOIKJTqTK-iNtUeDdSj6Cdt6in9FP1UJYBGg3qkB-VpIjNFaAAgkN6vvwAA4H8BAABAg
FsLAABWCj48WVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=91
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:52 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=pN2SggJ4FvJTh7_c31x6BACnIcN9SCicIrmLfxbFYcM7-DAXTF8YAqPPCJL
aoqIAsxcVEfc5Z2hLL0qGxek5DGU4SJkk0-MgEe-OeaOSaQKFshLwKl7RDkohx7yE36i1L
dM7kc3tmm-Sby2ohwYaZFBPecqjGtRGPRpUftRT_aT2kHpq6qcaagAgkN6vvwAA4H8BAAB
AgFsLAABOQ4b7WVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=pN2SggJ4FvJTh7_c31x6BACnIcN9SCicIrmLfxbFYcM7-DAXTF8YAqPPCJLao
qIAsxcVEfc5Z2hLL0qGxek5DGU4SJkk0-MgEe-OeaOSaQKFshLwKl7RDkohx7yE36i1LdM
7kc3tmm-Sby2ohwYaZFBPecqjGtRGPRpUftRT_aT2kHpq6qcaagAgkN6vvwAA4H8BAABAg
FsLAABOQ4b7WVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1383
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=87
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:54 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=HARZAel7-4kGUNfm3yZkHIBckfINJBROkdzFT7sUZST9WMlU7E0QAopXBAk
c8cIBFCdeRcXxoMm0aEyZOvDmwzANiFpwyeRA1Kiovz4ZvcjGLolIppRceb_S4i0dWMx6O
SiNZcnPzIeLcHnvO-qhATSa2tSDDNVPNdBUz9SjqempfuqJnuqnhE01ZAAgkN6vvwAA4H8
BAABAgFsLAAByRco3WVMmWUExNmhaQpQAAADw" name="iwofeng.com">. </f
rameset>. <noframes>..<body><a href="hXXp://VVV.iwo
feng.com?epl=HARZAel7-4kGUNfm3yZkHIBckfINJBROkdzFT7sUZST9WMlU7E0QAopXB
Akc8cIBFCdeRcXxoMm0aEyZOvDmwzANiFpwyeRA1Kiovz4ZvcjGLolIppRceb_S4i0dWMx
6OSiNZcnPzIeLcHnvO-qhATSa2tSDDNVPNdBUz9SjqempfuqJnuqnhE01ZAAgkN6vvwAA4
H8BAABAgFsLAAByRco3WVMmWUExNmhaQpQAAADw">Click here to go to iwofen
g.com</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1379
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=97
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:54 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=c9-L92dV7wbFdxCVor8mhRD8pmMDCYVTJHfx0y5FGUk_VjIVexOEgOIVQQJ
HvHAAxYlHQXM8F2VZNExmxuF8RFjE4QouGR2HC3p37SPahWa7G1FNfUssb-HYCQlWwiheh
6SxLPqZOXFRDmu8VuqhATSa2tSDDNVPNdBUz9STSU956kmmp4JNNWQAIJDer78AAOB_AQA
AQIBbCwAAwW86NllTJllBMTZoWkKUAAAA8A" name="iwofeng.com">. </fra
meset>. <noframes>..<body><a href="hXXp://VVV.iwofe
ng.com?epl=c9-L92dV7wbFdxCVor8mhRD8pmMDCYVTJHfx0y5FGUk_VjIVexOEgOIVQQJ
HvHAAxYlHQXM8F2VZNExmxuF8RFjE4QouGR2HC3p37SPahWa7G1FNfUssb-HYCQlWwiheh
6SxLPqZOXFRDmu8VuqhATSa2tSDDNVPNdBUz9STSU956kmmp4JNNWQAIJDer78AAOB_AQA
AQIBbCwAAwW86NllTJllBMTZoWkKUAAAA8A">Click here to go to iwofeng.co
m</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=93
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:56 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=4RMd83W8H4P5LwYf1TFeIAAr10APSCicIrmL_32Omc3ilKelSRliDMLsNAS
RpNQ8MIohCbnPuUJZ6IJkDKfnKFDhYDKhTI_DjPdumKdXk0TivOCFFW9VpDppreKA9Y5TS
1vu8FVWtx-N6fYppTbp0aB46qmn9EYxNf1UJUA9NAAylKc25VENdQAgkN6vvwAA4H8BAAB
AgFsLAABWroEeWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=4RMd83W8H4P5LwYf1TFeIAAr10APSCicIrmL_32Omc3ilKelSRliDMLsNASRp
NQ8MIohCbnPuUJZ6IJkDKfnKFDhYDKhTI_DjPdumKdXk0TivOCFFW9VpDppreKA9Y5TS1v
u8FVWtx-N6fYppTbp0aB46qmn9EYxNf1UJUA9NAAylKc25VENdQAgkN6vvwAA4H8BAABAg
FsLAABWroEeWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=95
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:56 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=DxlRTobbv351GVtVtu81w5odUg2QUDhFchf_iwR6zeq51IbmyhuGwGSIIJk
VMSJgFQcZbJdzhUbogmRYnJ6jQIUDLBPK9DjQsMNjHlGkJJhyVWdhQixhzgWI-8n4WUc8b
Tvtq0xvR4jn7lqpTUyTqbap6Sm9kRD9UzVAPWQA6qGppzblUQ11ACCQ3q-_AADgfwEAAEC
AWwsAAJodUg1ZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=DxlRTobbv351GVtVtu81w5odUg2QUDhFchf_iwR6zeq51IbmyhuGwGSIIJkVMS
JgFQcZbJdzhUbogmRYnJ6jQIUDLBPK9DjQsMNjHlGkJJhyVWdhQixhzgWI-8n4WUc8bTvt
q0xvR4jn7lqpTUyTqbap6Sm9kRD9UzVAPWQA6qGppzblUQ11ACCQ3q-_AADgfwEAAECAWw
sAAJodUg1ZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=97
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:58 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=ayWmCNjz_LQ96igZTo_xwAA2YaprSCicIrmL_5GMisvy4GqpwfKiEBQdEST
UYoKAshckIXc6Vqr7Ikimhek5ClQwRKFPpoeBBmwz5l25OYejCIskQYLJ-ejNPAJplmPSm
y7rISz6pnhzfWupTXrEqPyo6SntkTRT_VM1QD00DaDJqKc2ZVMNdQAgkN6vvwAA4H8BAAB
AgFsLAABswlTXWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=ayWmCNjz_LQ96igZTo_xwAA2YaprSCicIrmL_5GMisvy4GqpwfKiEBQdESTUY
oKAshckIXc6Vqr7Ikimhek5ClQwRKFPpoeBBmwz5l25OYejCIskQYLJ-ejNPAJplmPSmy7
rISz6pnhzfWupTXrEqPyo6SntkTRT_VM1QD00DaDJqKc2ZVMNdQAgkN6vvwAA4H8BAABAg
FsLAABswlTXWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1365
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=70
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:38:58 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=2pkoZZItYjOdYAGOsbH4EATAqkNBQuEUyV38qxtMHWkWPalM0aQjQhDxDQI
RWYBwQKwLmpi3z_CzoZOgYXdgPccDPWDgY92wDAyKifnlHyEnrY29MqIy8qiC7ht4FShPM
6C09ugZi9K6dqXqVQBgAiYTE8ZQnjJ6UDbVT0089VRDnmpgACCQ3q-_AADgfwEAAECAWws
AAAGw6lBZUyZZQTE2aFpCkgAAAPA" name="iwofeng.com">. </frameset&g
t;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?
epl=2pkoZZItYjOdYAGOsbH4EATAqkNBQuEUyV38qxtMHWkWPalM0aQjQhDxDQIRWYBwQK
wLmpi3z_CzoZOgYXdgPccDPWDgY92wDAyKifnlHyEnrY29MqIy8qiC7ht4FShPM6C09ugZ
i9K6dqXqVQBgAiYTE8ZQnjJ6UDbVT0089VRDnmpgACCQ3q-_AADgfwEAAECAWwsAAAGw6l
BZUyZZQTE2aFpCkgAAAPA">Click here to go to iwofeng.com</a>.&l
t;/body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1367
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=51
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:00 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=1iSRQXpHEFyXjAVsqxUum1CxIYAACYVTJHfx50uIWVrvZK0mI1sVCkHlPAQ
RPPMigc6VMqze8Sb-lTAFo8vlOJOaHHt4Sxh3Dho7v6xXFRxBOYIAxiBbnE_olHboPL1Ur
OzQRHBcn9NhuZQAGtRMo6lHE9FPEWrUhiET9Wj0VHuKfqoSdAAgkN6vvwAAoH8BAABAgFs
LAAAVGwIIWVMmWUExNmhaQpIAAADw" name="iwofeng.com">. </frameset&
gt;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com
?epl=1iSRQXpHEFyXjAVsqxUum1CxIYAACYVTJHfx50uIWVrvZK0mI1sVCkHlPAQRPPMig
c6VMqze8Sb-lTAFo8vlOJOaHHt4Sxh3Dho7v6xXFRxBOYIAxiBbnE_olHboPL1UrOzQRHB
cn9NhuZQAGtRMo6lHE9FPEWrUhiET9Wj0VHuKfqoSdAAgkN6vvwAAoH8BAABAgFsLAAAVG
wIIWVMmWUExNmhaQpIAAADw">Click here to go to iwofeng.com</a>.
</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=98
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:01 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=dhe7CjkrJqTCEDfjXiu0gYhoN3aDhMIpkrvIaxHmPcRzJ2bmmsUhuBpGkNA
UMwo4akERcadjpbruBck8mJ6jQAWDFOpkehhoxDYlT_CrFMMsiGYviQpZ4REQ9XudOGb6p
hNeyqvvgm1qn1LaqEeD0puantRjKk_SP1UD1EPTgKbRpKc25VENdQAgkN6vvwAA4H8BAAB
AgFsLAAAR7cZuWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=dhe7CjkrJqTCEDfjXiu0gYhoN3aDhMIpkrvIaxHmPcRzJ2bmmsUhuBpGkNAUM
wo4akERcadjpbruBck8mJ6jQAWDFOpkehhoxDYlT_CrFMMsiGYviQpZ4REQ9XudOGb6phN
eyqvvgm1qn1LaqEeD0puantRjKk_SP1UD1EPTgKbRpKc25VENdQAgkN6vvwAA4H8BAABAg
FsLAAAR7cZuWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=73
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:03 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=KgPv7H1Cumejh7_mZAvj8jvtAkaQUDhFche7JQaJq-rBskYGu4tCULSMIIk
TEATUvLCIuMvKmStsYVQqouc42CFgSUKqHsGMNzfMn0eWID2Kda6yF0phsTZQPIKU1gHjj
Wf81ireJN9YfE7apE2TKZ6antI2RU_UP1UDVD80ABqopzblUQ11ACCQ3q-_AADgfwEAAEC
AWwsAADvtAkZZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=KgPv7H1Cumejh7_mZAvj8jvtAkaQUDhFche7JQaJq-rBskYGu4tCULSMIIkTEA
TUvLCIuMvKmStsYVQqouc42CFgSUKqHsGMNzfMn0eWID2Kda6yF0phsTZQPIKU1gHjjWf8
1ireJN9YfE7apE2TKZ6antI2RU_UP1UDVD80ABqopzblUQ11ACCQ3q-_AADgfwEAAECAWw
sAADvtAkZZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=89
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:03 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=0MEHu9S_Xv5RRSaTG5jDWDySHPMhoXCK5C70GjrqzprTrUpFN1omxJzvEEQ
yJQbCpJZYlMWfSXsMZaJ7MObvI4kSQ-9w6F6OUZntprwbGhkLGTQ_eA0cpEDhRU3ZQwwrG
7QIzeq2urO8ijbVHk0mbWrqJ42e8hT9VCUANKgn2kSP2lA2RWgAIJDer78AAOB_AQAAQIB
bCwAAHkmO-VlTJllBMTZoWkKPAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=0MEHu9S_Xv5RRSaTG5jDWDySHPMhoXCK5C70GjrqzprTrUpFN1omxJzvEEQyJQb
CpJZYlMWfSXsMZaJ7MObvI4kSQ-9w6F6OUZntprwbGhkLGTQ_eA0cpEDhRU3ZQwwrG7QIz
eq2urO8ijbVHk0mbWrqJ42e8hT9VCUANKgn2kSP2lA2RWgAIJDer78AAOB_AQAAQIBbCwA
AHkmO-VlTJllBMTZoWkKPAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1365
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=88
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:05 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=LQMjwGt2-TSbY-lg03RbtABxegofEgqnSO7ibx9j6rLmpM9Kk_TCkRCydhB
ENCXyQFKcmkz8Ngzl-GiKNTv47gMpCEay-1jLwVRqvKf-CG2suareixY3T4h7rVSbYs7aO
ZG-Msu3Juv7HE72ppRMzdSD8qTpSZ6aGvRUCQAwAZOJCWNwACCQ3q-_AADgfwEAAECAWws
AAIjTU_hZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frameset&g
t;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?
epl=LQMjwGt2-TSbY-lg03RbtABxegofEgqnSO7ibx9j6rLmpM9Kk_TCkRCydhBENCXyQF
Kcmkz8Ngzl-GiKNTv47gMpCEay-1jLwVRqvKf-CG2suareixY3T4h7rVSbYs7aOZG-Msu3
Juv7HE72ppRMzdSD8qTpSZ6aGvRUCQAwAZOJCWNwACCQ3q-_AADgfwEAAECAWwsAAIjTU_
hZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</a>.&l
t;/body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=97
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:05 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=73UqzLEszNDcjtji6P4TjMBe3aYSJBROkdzFf7sVZRT9WMVUzKUgBES3CJI
ZQoYDCFLEiZnfOYNlkogyMQ6_YYiGw5RLMjsOFfNqqpcVQQtoq4qiwMT2sZyKirIU_B2yv
LD0Z-b5Esz1FqeUemhkaDS1qQcaqp9qEOqhGWVTnhrKNPlJNWQAIJDer78AAKB_AQAAQIB
bCwAAe3WbSllTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=73UqzLEszNDcjtji6P4TjMBe3aYSJBROkdzFf7sVZRT9WMVUzKUgBES3CJIZQoY
DCFLEiZnfOYNlkogyMQ6_YYiGw5RLMjsOFfNqqpcVQQtoq4qiwMT2sZyKirIU_B2yvLD0Z
-b5Esz1FqeUemhkaDS1qQcaqp9qEOqhGWVTnhrKNPlJNWQAIJDer78AAKB_AQAAQIBbCwA
Ae3WbSllTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1365
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:07 GMT
Connection: Keep-Alive
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=-dgct0Qvpz6rO0pBPC7iKEiIt1uFhMIpkrv429BRl9adblUqutFCIeichyC
KaSYQKG2JRdn7mcRPGBPdg7EcRxIlxnQ3dG_HqCnrz3qt3akHpyQmUDkaGNlCBl7azHqAY
-rEFgFI6dWYu5Qgo0F6NI2GMjERatTGkDZRj0xPeYp-qhJ0ACCQ3q-_AACgfwEAAECAWws
AAAnxdqtZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frameset&g
t;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?
epl=-dgct0Qvpz6rO0pBPC7iKEiIt1uFhMIpkrv429BRl9adblUqutFCIeichyCKaSYQKG
2JRdn7mcRPGBPdg7EcRxIlxnQ3dG_HqCnrz3qt3akHpyQmUDkaGNlCBl7azHqAY-rEFgFI
6dWYu5Qgo0F6NI2GMjERatTGkDZRj0xPeYp-qhJ0ACCQ3q-_AACgfwEAAECAWwsAAAnxdq
tZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</a>.&l
t;/body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=99
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:07 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=vy2qwinnATMffQJbkBLdakSIwYxDQuEUyV3oRxD1lp3nVjs1V1oUgpphBIl
soCCgzIIi4j7HSnUfDJJpYVRHgQoGKfPJ9DDQiA2XPFtv4pQ1D-JCFcaTRzRqTFBsdQ4q3
3aYj5HGN8E25zejmXo0qB7q6UltU_RE_VM1QD1NA2gyqKc2ZVMNdQAgkN6vvwAA4H8BAAB
AgFsLAAARYjDjWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=vy2qwinnATMffQJbkBLdakSIwYxDQuEUyV3oRxD1lp3nVjs1V1oUgpphBIlso
CCgzIIi4j7HSnUfDJJpYVRHgQoGKfPJ9DDQiA2XPFtv4pQ1D-JCFcaTRzRqTFBsdQ4q33a
Yj5HGN8E25zejmXo0qB7q6UltU_RE_VM1QD1NA2gyqKc2ZVMNdQAgkN6vvwAA4H8BAABAg
FsLAAARYjDjWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=91
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:10 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=KpSqDObvHBnxwzXtPQfUO-D5lR8OCYVTJHfxP4Kgt6qeS2toLmxRCGqWCBL
ZEIOAMgsy2D7nCm3hC5JhcXqOAhUOskwo0-Mww-6WvCw1sAzd45wzSvwd6kGUngYNMqgjl
ms73MdYVZO0uduMGhqDak_q6Um9UVND_VM1QD00gKY2qKc25VENdQAgkN6vvwAA4H8BAAB
AgFsLAACeX_nhWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=KpSqDObvHBnxwzXtPQfUO-D5lR8OCYVTJHfxP4Kgt6qeS2toLmxRCGqWCBLZE
IOAMgsy2D7nCm3hC5JhcXqOAhUOskwo0-Mww-6WvCw1sAzd45wzSvwd6kGUngYNMqgjlms
73MdYVZO0uduMGhqDak_q6Um9UVND_VM1QD00gKY2qKc25VENdQAgkN6vvwAA4H8BAABAg
FsLAACeX_nhWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=97
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:10 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=Og4b7_-zuS2MqfrA9DVVlYBy-jQzJBROkdzFTglCWpt6rJyRsVVhCGzvIkj
kQwwC7CrIYLucK7SFL0iGxek5ClQ4RJlQpschwg6P-ZpQ9VIRFUXBEPQba1LQEhV4hjpi-
cZDfox2N7l5aL2jjTSTKaN-6km9ifJE_VM1QD1koKEeqKc25VENdQAgkN6vvwAA4H8BAAB
AgFsLAADK6dPMWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=Og4b7_-zuS2MqfrA9DVVlYBy-jQzJBROkdzFTglCWpt6rJyRsVVhCGzvIkjkQ
wwC7CrIYLucK7SFL0iGxek5ClQ4RJlQpschwg6P-ZpQ9VIRFUXBEPQba1LQEhV4hjpi-cZ
Dfox2N7l5aL2jjTSTKaN-6km9ifJE_VM1QD1koKEeqKc25VENdQAgkN6vvwAA4H8BAABAg
FsLAADK6dPMWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1367
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=92
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:12 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=u9uvz8q-VD5NUS_buQdRPkDIfd0OCYVTJHfxrwuCYjs9mF5osLwwBFYjgmS
mMVGA0RdksH3OlepCGCTT4nSKAhUOr0wo0-NQwy6X-Yh4BCNTlJyUiDtYZCnWQuoh65jzb
Yc1kdW74s35a6WGHhmpPcmT2iNpmvqnaoB6xADqgZo25VENdQAgkN6vvwAAoH8BAABAgFs
LAACE3NftWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frameset&
gt;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com
?epl=u9uvz8q-VD5NUS_buQdRPkDIfd0OCYVTJHfxrwuCYjs9mF5osLwwBFYjgmSmMVGA0
RdksH3OlepCGCTT4nSKAhUOr0wo0-NQwy6X-Yh4BCNTlJyUiDtYZCnWQuoh65jzbYc1kdW
74s35a6WGHhmpPcmT2iNpmvqnaoB6xADqgZo25VENdQAgkN6vvwAAoH8BAABAgFsLAACE3
NftWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com</a>.
</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1363
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=86
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:12 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=q13h4IZrRqFQ0J9uxLAm87bMLpaQUDhFche8DR1lZ72TrZqKbKxMiBm7EER
UBgbClCuxqIo_k3oYUqJ7L5b_kUSJQR0O3dsxaPjWj_W9C3Mh7NWQ0NBgKMIZmAQVtD3Ak
kKpZ6KkRXucPidoaFBPPY0MFEyERm3TCFA_ZfSUiX6qEnQAIJDer78AAKB_AQAAQIBbCwA
AtswulllTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </frameset>
;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?e
pl=q13h4IZrRqFQ0J9uxLAm87bMLpaQUDhFche8DR1lZ72TrZqKbKxMiBm7EERUBgbClCu
xqIo_k3oYUqJ7L5b_kUSJQR0O3dsxaPjWj_W9C3Mh7NWQ0NBgKMIZmAQVtD3AkkKpZ6KkR
XucPidoaFBPPY0MFEyERm3TCFA_ZfSUiX6qEnQAIJDer78AAKB_AQAAQIBbCwAAtswulll
TJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a>.<
/body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=99
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:14 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=Cna3F6RNVBTFIu4d1lroVACWfl5sSCicIrkL3RYMeu3yXHqhudGGIbAZIkh
mhUQBVm_U4fZ70MyVWpSMCtRzGMqAkIKTTA-EjENb8lRWFRkjWTqCR6CjmYegD3FGnEPO2
g7riWzWBe9Yu1baxDQovanpKW2mND3VP1UD1AOAph6opzzlUQ11ACCQ3q-_AADgfwEAAEC
AWwsAACz9vNhZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=Cna3F6RNVBTFIu4d1lroVACWfl5sSCicIrkL3RYMeu3yXHqhudGGIbAZIkhmhU
QBVm_U4fZ70MyVWpSMCtRzGMqAkIKTTA-EjENb8lRWFRkjWTqCR6CjmYegD3FGnEPO2g7r
iWzWBe9Yu1baxDQovanpKW2mND3VP1UD1AOAph6opzzlUQ11ACCQ3q-_AADgfwEAAECAWw
sAACz9vNhZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=97
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:14 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=aYX0DpeRaygdkVeHnnrywyT0510hoXCK5C70WhD0mp3nUjs0N7YwBIaPCJJ
5kCjAzoIk5D7HSm3fC5KBMKqjQAUDlPlkehhowIbHfF0T50ypBMa1wgQ1TbQk1HYULoecN
wzzRHZ3RZvqv6NNejSooX7qKe0JNU39VAPU0zQAMqSnNmVTDXUAIJDer78AAOB_AQAAQIB
bCwAAEvrzrllTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=aYX0DpeRaygdkVeHnnrywyT0510hoXCK5C70WhD0mp3nUjs0N7YwBIaPCJJ5kCj
AzoIk5D7HSm3fC5KBMKqjQAUDlPlkehhowIbHfF0T50ypBMa1wgQ1TbQk1HYULoecNwzzR
HZ3RZvqv6NNejSooX7qKe0JNU39VAPU0zQAMqSnNmVTDXUAIJDer78AAOB_AQAAQIBbCwA
AEvrzrllTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1359
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=92
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:16 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=teHGopjFFEcQKathUWOvvN66FsKQUDhFchd_2xRTjzUnfVaapDtMhIg3gyC
SFEiDSDFuMvFd-dGwSZxaNhnv83CPTFW3qZWTqdx5T_3uMfZQ0MKeralWUU3rtG0UbXHPg
fLSKr9WlLcxTBanlEzZ1IPyqOkppgn0VAkAMAGTiQljcAAgkN6vvwAA4H8BAABAgFsLAAD
euhbCWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frameset>.
<noframes>..<body><a href="hXXp://VVV.iwofeng.com?epl
=teHGopjFFEcQKathUWOvvN66FsKQUDhFchd_2xRTjzUnfVaapDtMhIg3gyCSFEiDSDFuM
vFd-dGwSZxaNhnv83CPTFW3qZWTqdx5T_3uMfZQ0MKeralWUU3rtG0UbXHPgfLSKr9WlLc
xTBanlEzZ1IPyqOkppgn0VAkAMAGTiQljcAAgkN6vvwAA4H8BAABAgFsLAADeuhbCWVMmW
UExNmhaQpMAAADw">Click here to go to iwofeng.com</a>.</bod
y>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=81
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:16 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=7LAInPW7vrufTwxYJ8oqQMxupMxAQuEUyV38sSTqNZvnVpuaC9swBIYnBIl
8oCjA7gYZbL_nCm3hC5JhcXqOAhUOsuBQpsdhws6OeXWWJCUTE5wQUup6PKTBzFtUnIPKN
V3u57RaF91B-47axDSZao_qp57UniZl1D9VA9QDkKE2qKc25VENdQAgkN6vvwAA4H8BAAB
AgFsLAACzGykzWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=7LAInPW7vrufTwxYJ8oqQMxupMxAQuEUyV38sSTqNZvnVpuaC9swBIYnBIl8o
CjA7gYZbL_nCm3hC5JhcXqOAhUOsuBQpsdhws6OeXWWJCUTE5wQUup6PKTBzFtUnIPKNV3
u57RaF91B-47axDSZao_qp57UniZl1D9VA9QDkKE2qKc25VENdQAgkN6vvwAA4H8BAABAg
FsLAACzGykzWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=95
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:19 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=pkjE4Une8mJEPqccJvcLEqp-GgghoXCK5C7-260oo-jHKqZiLgUhILpFkMw
QMhxAkKIoKI7HoCxpomQi7LYBURAGK5hkdBhoUPvX_BVRRD04EuIuXdLSPHH5eC7CXh1yY
ln6M_qKacbdvWulHhoZGk1t6oGG6qcaoB7aUNNTnnoK8pRNNWQAIJDer78AAKB_AQAAQIB
bCwAAVT8NhFlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=pkjE4Une8mJEPqccJvcLEqp-GgghoXCK5C7-260oo-jHKqZiLgUhILpFkMwQMhx
AkKIoKI7HoCxpomQi7LYBURAGK5hkdBhoUPvX_BVRRD04EuIuXdLSPHH5eC7CXh1yYln6M
_qKacbdvWulHhoZGk1t6oGG6qcaoB7aUNNTnnoK8pRNNWQAIJDer78AAKB_AQAAQIBbCwA
AVT8NhFlTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=96
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:19 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=L0xGIrTNOfdRKTaK0tI2PE7anqMhoXCK5C7-dwmxXPembJeM8sQURNVxCCL
aUpFQFjMNw3Y8Cq-SZsI45_p8KJNyFLQljDfHpT699ddZ1IZeUQ3AxxzYWA41WtqSc_Xiv
pXBBgRWR_pUHiOAJlNP00CjSVObCLWp9migHjX1k9pTT3mKfqoSdAAgkN6vvwAA4H8BAAB
AgFsLAAAnbc_RWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=L0xGIrTNOfdRKTaK0tI2PE7anqMhoXCK5C7-dwmxXPembJeM8sQURNVxCCLaU
pFQFjMNw3Y8Cq-SZsI45_p8KJNyFLQljDfHpT699ddZ1IZeUQ3AxxzYWA41WtqSc_XivpX
BBgRWR_pUHiOAJlNP00CjSVObCLWp9migHjX1k9pTT3mKfqoSdAAgkN6vvwAA4H8BAABAg
FsLAAAnbc_RWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1365
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=96
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:21 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=AfkILGKkqzGcGhoBEfoGO6ay32OQUDhFchf_ugjyxtrnyhqZ6ywigjgbgkS
eAVFAnC3qcPscNLSlFyXDAvUchjIgYpkk0wMx4_CGeXolmJ4rWhtSsKOgQYQYjOhrdNwDy
jifasbgw6vZVH1OamgwyciTGGmkf6oGqIcGoDaopzzlUQ11ACCQ3q-_AACgfwEAAECAWws
AAKay32NZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frameset&g
t;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?
epl=AfkILGKkqzGcGhoBEfoGO6ay32OQUDhFchf_ugjyxtrnyhqZ6ywigjgbgkSeAVFAnC
3qcPscNLSlFyXDAvUchjIgYpkk0wMx4_CGeXolmJ4rWhtSsKOgQYQYjOhrdNwDyjifasbg
w6vZVH1OamgwyciTGGmkf6oGqIcGoDaopzzlUQ11ACCQ3q-_AACgfwEAAECAWwsAAKay32
NZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</a>.&l
t;/body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=95
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:22 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=fwP09GojXoTgNKDI2JBje6S4x-OQUDhFchc_7VKUkfRjJVMxdoIQkLwiSGC
IFw4gOEETU8di5eJIEBQaluMoUMEQIR4oOwwWtu1pn74li0iZskneJftAY6e6irnOeUeU2
EG9CL7GI-vv5pSiqR56NMVT0_TU1FOeGmpQDw0g09SjHo2G6qcacgAgkN6vvwAA4H8BAAB
AgFsLAACkuMfjWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=fwP09GojXoTgNKDI2JBje6S4x-OQUDhFchc_7VKUkfRjJVMxdoIQkLwiSGCIF
w4gOEETU8di5eJIEBQaluMoUMEQIR4oOwwWtu1pn74li0iZskneJftAY6e6irnOeUeU2EG
9CL7GI-vv5pSiqR56NMVT0_TU1FOeGmpQDw0g09SjHo2G6qcacgAgkN6vvwAA4H8BAABAg
FsLAACkuMfjWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1363
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=97
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:24 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=45NwRK70h75uUoi9tWcvzxzzgwVCQuEUyV38Kw2khjSLllSkaHYBIYD4gkA
kTjwQAOcFk5DXKtzsRxFslAPedTSwBox8LI3KwKDAMX_6UVnDYLl6u6n5PbNYhASFRilf8
YwXrT16pZ6ztK7UfU7KU0YPypOmp2DSyFMNADABk4kJY3AAIJDer78AAOB_AQAAQIBbCwA
Ax_xggVlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </frameset>
;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?e
pl=45NwRK70h75uUoi9tWcvzxzzgwVCQuEUyV38Kw2khjSLllSkaHYBIYD4gkAkTjwQAOc
Fk5DXKtzsRxFslAPedTSwBox8LI3KwKDAMX_6UVnDYLl6u6n5PbNYhASFRilf8YwXrT16p
Z6ztK7UfU7KU0YPypOmp2DSyFMNADABk4kJY3AAIJDer78AAOB_AQAAQIBbCwAAx_xggVl
TJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a>.<
/body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=65
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:24 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=-595S2zSy2F5T9PlcKYpSQDAf681SCicIrmLv40QFdflwfVSg-VFIag7IUh
mA0UEyi4qIu5zztCWXpQMi9NzGMpwkDJJpsdBAr475klsUkFO2DsZeoZqaJRwkKCzHHS-6
TAvy1XfkW5s34zapEejKf2kfmrUHoWe1D9VA9RDAw0yqKc85VENdQAgkN6vvwAA4H8BAAB
AgFsLAACA_15rWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=-595S2zSy2F5T9PlcKYpSQDAf681SCicIrmLv40QFdflwfVSg-VFIag7IUhmA
0UEyi4qIu5zztCWXpQMi9NzGMpwkDJJpsdBAr475klsUkFO2DsZeoZqaJRwkKCzHHS-6TA
vy1XfkW5s34zapEejKf2kfmrUHoWe1D9VA9RDAw0yqKc85VENdQAgkN6vvwAA4H8BAABAg
FsLAACA_15rWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1359
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=70
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:26 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=-1H1b1cQOx-2Qp-vyDcPaa7hhVmQUDhFchd_6wa1U9Vlryol-8MgCCjfIBC
ZFBIOIIrxCoUvy5CWbuINi8g5DogHkXHPdcN0ZFRU5lN_jFPH-kVy1laDDXXirGiA9bZtH
XJeevSMEV3XsNicUjJl9KCMnuqnNCbIUw0AMAGTiQljcAAgkN6vvwAA4H8BAABAgFsLAAC
u4YVZWVMmWUExNmhaQpEAAADw" name="iwofeng.com">. </frameset>.
<noframes>..<body><a href="hXXp://VVV.iwofeng.com?epl
=-1H1b1cQOx-2Qp-vyDcPaa7hhVmQUDhFchd_6wa1U9Vlryol-8MgCCjfIBCZFBIOIIrxC
oUvy5CWbuINi8g5DogHkXHPdcN0ZFRU5lN_jFPH-kVy1laDDXXirGiA9bZtHXJeevSMEV3
XsNicUjJl9KCMnuqnNCbIUw0AMAGTiQljcAAgkN6vvwAA4H8BAABAgFsLAACu4YVZWVMmW
UExNmhaQpEAAADw">Click here to go to iwofeng.com</a>.</bod
y>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=91
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:27 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=PHvyNh9R4YpWMF7fI3ksjqD_TcMOCYVTJHehV4Kgty7PpReaKy0KQc0wgkQ
2TBBQZkERcZ9jpboPBsm0MKqjQAWDLPPJ9DDQiA2XPI1EEEe6S8B4Vnihu5sRNUFanWPKt
h3qY6yyCbapfzMaejQoPerpSe2R9ET9UzVAPU0DaDKopzZlUw11ACCQ3q-_AADgfwEAAEC
AWwsAAPrfNOxZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=PHvyNh9R4YpWMF7fI3ksjqD_TcMOCYVTJHehV4Kgty7PpReaKy0KQc0wgkQ2TB
BQZkERcZ9jpboPBsm0MKqjQAWDLPPJ9DDQiA2XPI1EEEe6S8B4Vnihu5sRNUFanWPKth3q
Y6yyCbapfzMaejQoPerpSe2R9ET9UzVAPU0DaDKopzZlUw11ACCQ3q-_AADgfwEAAECAWw
sAAPrfNOxZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=95
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:30 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=XgSA9-32dky9MkJ8CNq1R6CmiTkKEgqnSO7ir5cQw9TihM2SEa4LhaD3OQT
RXJGRQOulDLt2vCmX5UzBWOf6N5OaHBXaEkacw2JHV39RpJbipGxKlBmAR-zACNawCXuol
6qQFimiE_W4XEpqU-0JQz3qqX7Spp5qT9FPVQJAg7JpoDzUND1FaAAgkN6vvwAA4H8BAAB
AgFsLAAA1TcxRWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=XgSA9-32dky9MkJ8CNq1R6CmiTkKEgqnSO7ir5cQw9TihM2SEa4LhaD3OQTRX
JGRQOulDLt2vCmX5UzBWOf6N5OaHBXaEkacw2JHV39RpJbipGxKlBmAR-zACNawCXuol6q
QFimiE_W4XEpqU-0JQz3qqX7Spp5qT9FPVQJAg7JpoDzUND1FaAAgkN6vvwAA4H8BAABAg
FsLAAA1TcxRWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=82
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:30 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=om7GhhdKiiYQ9-enSARL0YDhNQBuSCicIrmLv4UEia_mwbJGBtcvDsHlDUE
yT0RA4OYFGWzKuUJbGEEyLG7XUaDCIYqEMj0ONOzwmF9rWDUYlZ2syga0HlGkIgWklCPON
Z30VSdraDf2npPapDEopqee1J5GCf1TNUBtNADqaainNuVRDXUAIJDer78AAOB_AQAAQIB
bCwAAw2sA3FlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=om7GhhdKiiYQ9-enSARL0YDhNQBuSCicIrmLv4UEia_mwbJGBtcvDsHlDUEyT0R
A4OYFGWzKuUJbGEEyLG7XUaDCIYqEMj0ONOzwmF9rWDUYlZ2syga0HlGkIgWklCPONZ30V
SdraDf2npPapDEopqee1J5GCf1TNUBtNADqaainNuVRDXUAIJDer78AAOB_AQAAQIBbCwA
Aw2sA3FlTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1363
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=99
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:32 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=zJGnaFMtKj6KBMnXskVfDpMW5H2QUDhFchf__SzuGp3TPZqOLrUYhMl1CKJ
4BmaCzRZ6nLUlVjo8Y2jJO-i_qdAKYmXPkjmInsO-jBfyiuaiCrIDNhTR5osygTrZQ_tWK
LQIuDWSHpdTCqBBeTQNpAkToUbtiaER9ZN6U095Sn6qEnQAIJDer78AAKB_AQAAQIBbCwA
AkxbkfVlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </frameset>
;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?e
pl=zJGnaFMtKj6KBMnXskVfDpMW5H2QUDhFchf__SzuGp3TPZqOLrUYhMl1CKJ4BmaCzRZ
6nLUlVjo8Y2jJO-i_qdAKYmXPkjmInsO-jBfyiuaiCrIDNhTR5osygTrZQ_tWKLQIuDWSH
pdTCqBBeTQNpAkToUbtiaER9ZN6U095Sn6qEnQAIJDer78AAKB_AQAAQIBbCwAAkxbkfVl
TJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a>.<
/body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=96
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:33 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=BIcilhgTSO41xq5qkXTrYYDJ-Z4vSCicIrmLn3Ypykj6sZKpGDtBCEheESQ
wxAsHEJx4M2bdjpUbk4wnA8NyHIVXMEixJMPDQEFbf-5RnoOuvnBgmgoBpDTShg1RlJ7FI
5atK_dMjJZe3dV8TuqhAWSaetSj0VD9VINQDz0ko9E0avSUTTVkACCQ3q-_AADgfwEAAEC
AWwsAAJPzPV9ZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=BIcilhgTSO41xq5qkXTrYYDJ-Z4vSCicIrmLn3Ypykj6sZKpGDtBCEheESQwxA
sHEJx4M2bdjpUbk4wnA8NyHIVXMEixJMPDQEFbf-5RnoOuvnBgmgoBpDTShg1RlJ7FI5at
K_dMjJZe3dV8TuqhAWSaetSj0VD9VINQDz0ko9E0avSUTTVkACCQ3q-_AADgfwEAAECAWw
sAAJPzPV9ZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1367
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=91
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:35 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=EdC254I03aw2HqDsSrNBSQCjdvoKSCicIrmLHY8Q89rpufMyc6WFITBaCJK
6gkYErFqQwXY6V2qEMEjGxek5ClQ4vEKhTI9DDTsp87G1SwZGFBcBoiBH3m3jhnzzXHXQd
Q5DnMgsj2VzfUppox4NqUc8qQeRqZ9qgHqIAeqhqac25VENdQAgkN6vvwAAoH8BAABAgFs
LAABG7fQVWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frameset&
gt;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com
?epl=EdC254I03aw2HqDsSrNBSQCjdvoKSCicIrmLHY8Q89rpufMyc6WFITBaCJK6gkYEr
FqQwXY6V2qEMEjGxek5ClQ4vEKhTI9DDTsp87G1SwZGFBcBoiBH3m3jhnzzXHXQdQ5DnMg
sj2VzfUppox4NqUc8qQeRqZ9qgHqIAeqhqac25VENdQAgkN6vvwAAoH8BAABAgFsLAABG7
fQVWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com</a>.
</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=83
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:36 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=XaLYr3ktRyZ2ftoz45JWNVhspMdDQuEUyV38tEtRRtKPlUzF2AlCQPKKIIE
hXjiA4ERVVBxTNkhljRqayDcfhjJk1AfLoRwZFzXrbT-WydUVfUUivBORGHoQYfaddg5aY
zh4IjqxjLjcbS2amqkH1Z701BPRTzVialAPDSDT1KMejYbqpxpyACCQ3q-_AADgfwEAAEC
AWwsAABYb6fFZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=XaLYr3ktRyZ2ftoz45JWNVhspMdDQuEUyV38tEtRRtKPlUzF2AlCQPKKIIEhXj
iA4ERVVBxTNkhljRqayDcfhjJk1AfLoRwZFzXrbT-WydUVfUUivBORGHoQYfaddg5aYzh4
IjqxjLjcbS2amqkH1Z701BPRTzVialAPDSDT1KMejYbqpxpyACCQ3q-_AADgfwEAAECAWw
sAABYb6fFZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1379
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=98
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:38 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=-9_P6jpNnr2JvyhrVR51s4BoYlWGhMIpkrv46yXEMLU4YbNkhOeFQtD7HIJ
orshIoPUyDbt2vJLLcmbCWOf6N8UsjgptCSPOYbGjq79mESS6oTj3CkTCRiAiQKuTrYeKU
41a5IXnsHQ9XUpqU-0JQz3qqX7SpvopT9FPVQJoNCiPhqY2ylMeRWgAIJDer78AAOB_AQA
AQIBbCwAAEE2syllTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </fra
meset>. <noframes>..<body><a href="hXXp://VVV.iwofe
ng.com?epl=-9_P6jpNnr2JvyhrVR51s4BoYlWGhMIpkrv46yXEMLU4YbNkhOeFQtD7HIJ
orshIoPUyDbt2vJLLcmbCWOf6N8UsjgptCSPOYbGjq79mESS6oTj3CkTCRiAiQKuTrYeKU
41a5IXnsHQ9XUpqU-0JQz3qqX7SpvopT9FPVQJoNCiPhqY2ylMeRWgAIJDer78AAOB_AQA
AQIBbCwAAEE2syllTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.co
m</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=97
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:38 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=YaD75o8VnmZyNBK839VVl-gWBOdAQuEUyV38tUtRRtGPVUzFWB2EgOQVQRJ
DwHAAwR1WUXE-XaRnUdiQxN02IiziYJ9cQzkOF_X2ti9yIJS4BttEE4w7AmupZ07gUTfHp
JmePFGd5oK44Nta6gEyNJra1AMN1U810FQPPShPeuqpp3gqE081ZAAgkN6vvwAA4H8BAAB
AgFsLAAC6BcE5WVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=YaD75o8VnmZyNBK839VVl-gWBOdAQuEUyV38tUtRRtGPVUzFWB2EgOQVQRJDw
HAAwR1WUXE-XaRnUdiQxN02IiziYJ9cQzkOF_X2ti9yIJS4BttEE4w7AmupZ07gUTfHpJm
ePFGd5oK44Nta6gEyNJra1AMN1U810FQPPShPeuqpp3gqE081ZAAgkN6vvwAA4H8BAABAg
FsLAAC6BcE5WVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=69
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:40 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=dyL_JMB4Avlud4mi5x8OPoCM-pESJBROkdzF3xaBYqt5MK2hwfLCEFgdEST
0YaIAuwsy2D7nCm3hC5JhcXqOAhUOUiaU6XGYYXdLnugUzrJi6BYvqarFwXkHBZLqqJRj0
rZMeQiN2hVvrP-OGno0KI_q6UntkTTSTzVAPTSApjaopzblUQ11ACCQ3q-_AADgfwEAAEC
AWwsAADLqR0pZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=dyL_JMB4Avlud4mi5x8OPoCM-pESJBROkdzF3xaBYqt5MK2hwfLCEFgdEST0Ya
IAuwsy2D7nCm3hC5JhcXqOAhUOUiaU6XGYYXdLnugUzrJi6BYvqarFwXkHBZLqqJRj0rZM
eQiN2hVvrP-OGno0KI_q6UntkTTSTzVAPTSApjaopzblUQ11ACCQ3q-_AADgfwEAAECAWw
sAADLqR0pZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:40 GMT
Connection: Keep-Alive
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=mbJzKKM1zTD7h_sJTb9fCQDhGq5CQuEUyV38begoTG1OuCwV4XihEPRehyC
aKxMItF5iURd_JukTzkT3ZKzPRxIlxnQ4dC_HsJTtq1_aqjM8NgKCZAwTCs1SxkSM1-nRu
tQNTSSLwqeL5VUAGtTT1IMGIaYGtan2yJA29VSPTE95in6qEnQAIJDer78AAOB_AQAAQIB
bCwAAQLiGq1lTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=mbJzKKM1zTD7h_sJTb9fCQDhGq5CQuEUyV38begoTG1OuCwV4XihEPRehyCaKxM
ItF5iURd_JukTzkT3ZKzPRxIlxnQ4dC_HsJTtq1_aqjM8NgKCZAwTCs1SxkSM1-nRutQNT
SSLwqeL5VUAGtTT1IMGIaYGtan2yJA29VSPTE95in6qEnQAIJDer78AAOB_AQAAQIBbCwA
AQLiGq1lTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1381
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:42 GMT
Connection: Keep-Alive
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=XOGtM50p2YUrLpXSGTPymYAV-DlrSCicIrmL3UKHwmS64DIpwfGCIKD5QSB
CKyYgQPUiFuJOx0p13QuSeTA9R4EKBinUyfQwSESbMl-382gmjps3FnmRUq6BYfLHZmh6q
WNSG-_6M0Rt-K5YvFbapMEo_aipn9I2BU0_VQPUQ9PQoNGkpzblUQ11ACCQ3q-_AADgfwE
AAECAWwsAACvwc9ZZUyZZQTE2aFpClQAAAPA" name="iwofeng.com">. </fr
ameset>. <noframes>..<body><a href="hXXp://VVV.iwof
eng.com?epl=XOGtM50p2YUrLpXSGTPymYAV-DlrSCicIrmL3UKHwmS64DIpwfGCIKD5QS
BCKyYgQPUiFuJOx0p13QuSeTA9R4EKBinUyfQwSESbMl-382gmjps3FnmRUq6BYfLHZmh6
qWNSG-_6M0Rt-K5YvFbapMEo_aipn9I2BU0_VQPUQ9PQoNGkpzblUQ11ACCQ3q-_AADgfw
EAAECAWwsAACvwc9ZZUyZZQTE2aFpClQAAAPA">Click here to go to iwofeng.
com</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=96
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:42 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=a0i40C2nDaN8J5uDD1yXbiD6698KCYVTJHfxt-hAc908md7QZMIoBIWHCBK
6YiICVTEqIu5zztCWXpQMi9NzGMpwkDJJpsdBAr475sfouQktmqOS8sHSHVRfawjIyhyTx
uku_17VeIQ4xq-V2qhHk6lmeupJ7VEa1D9VA9RDAw0yqKc85VENdQAgkN6vvwAA4H8BAAB
AgFsLAACiv_6tWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=a0i40C2nDaN8J5uDD1yXbiD6698KCYVTJHfxt-hAc908md7QZMIoBIWHCBK6Y
iICVTEqIu5zztCWXpQMi9NzGMpwkDJJpsdBAr475sfouQktmqOS8sHSHVRfawjIyhyTxuk
u_17VeIQ4xq-V2qhHk6lmeupJ7VEa1D9VA9RDAw0yqKc85VENdQAgkN6vvwAA4H8BAABAg
FsLAACiv_6tWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=85
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:44 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=lJvKv7K205POdWVSctJ6apDpi8uDhMIpkrv4aZeijKQfK5mKsROEgOQVQQJ
DvHAAwQkZI9brXLEtvZAyfVyOoyALhymVZHYcZsyz7Q-lRRFKNKMgRaRUhAg_SqBZzR3tW
1mhZ1y3UtQhzc2ohwaQaepRj0ZD9VMNTPXQoJlqg6l-SpNNNWQAIJDer78AAOB_AQAAQIB
bCwAAMn1xeVlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=lJvKv7K205POdWVSctJ6apDpi8uDhMIpkrv4aZeijKQfK5mKsROEgOQVQQJDvHA
AwQkZI9brXLEtvZAyfVyOoyALhymVZHYcZsyz7Q-lRRFKNKMgRaRUhAg_SqBZzR3tW1mhZ
1y3UtQhzc2ohwaQaepRj0ZD9VMNTPXQoJlqg6l-SpNNNWQAIJDer78AAOB_AQAAQIBbCwA
AMn1xeVlTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1379
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=90
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:45 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=sU-dGJhDoa5cA-dLc4f28NhlwkohoXCK5C5-2qUoI-nHSqZi7AQhIHlFkMA
QLxxAcKIqao7npDyJouDMOPyGREkcKMQER8fBUG9v-1Ha75RYkCKaGXLtCqXFYKhoeB2TY
hnqZ-g7ppjLxa2lHhpApqlHPRoN1U810FQPPZrSj3pqmqanMk1PNWQAIJDer78AAOB_AQA
AQIBbCwAA7DJhpVlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </fra
meset>. <noframes>..<body><a href="hXXp://VVV.iwofe
ng.com?epl=sU-dGJhDoa5cA-dLc4f28NhlwkohoXCK5C5-2qUoI-nHSqZi7AQhIHlFkMA
QLxxAcKIqao7npDyJouDMOPyGREkcKMQER8fBUG9v-1Ha75RYkCKaGXLtCqXFYKhoeB2TY
hnqZ-g7ppjLxa2lHhpApqlHPRoN1U810FQPPZrSj3pqmqanMk1PNWQAIJDer78AAOB_AQA
AQIBbCwAA7DJhpVlTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.co
m</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:47 GMT
Connection: Keep-Alive
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=T3oKMhkVn-S9AzvnVdcYdZCaEjUOCYVTJHfxxyJUbBYPrjY1eF4YAsNLBIn
9IKMAuwuSkPscK7V9L0gGwqiOAhUMUeaT6WGgARse865gJlosKUNIMYdqPuMSopg0jYPaL
ac8EeS75A3y76iNesSoNuqnHtXTo7Sn0j9VA9TTNAAypKc2ZVMNdQAgkN6vvwAA4H8BAAB
AgFsLAACpKVHjWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=T3oKMhkVn-S9AzvnVdcYdZCaEjUOCYVTJHfxxyJUbBYPrjY1eF4YAsNLBIn9I
KMAuwuSkPscK7V9L0gGwqiOAhUMUeaT6WGgARse865gJlosKUNIMYdqPuMSopg0jYPaLac
8EeS75A3y76iNesSoNuqnHtXTo7Sn0j9VA9TTNAAypKc2ZVMNdQAgkN6vvwAA4H8BAABAg
FsLAACpKVHjWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=55
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:47 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=weMTGcrE0FYiD0tnVN3sHeD3vDkgoXCK5C5-2qUoI-nHSqZi7AQhIHlFkMA
QLxxAcIJkyPkVKydngqDoYfiNAhUMMbwDZYehYraa6nDZJ4vGVpmJ8j2K6NOsrgK2_Noh5
3XQLxLPd2L-LE4poR4aUx41U9NTPWUaalAPDSDT1KMejYbqpxpyACCQ3q-_AADgfwEAAEC
AWwsAAPB73hxZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=weMTGcrE0FYiD0tnVN3sHeD3vDkgoXCK5C5-2qUoI-nHSqZi7AQhIHlFkMAQLx
xAcIJkyPkVKydngqDoYfiNAhUMMbwDZYehYraa6nDZJ4vGVpmJ8j2K6NOsrgK2_Noh53XQ
LxLPd2L-LE4poR4aUx41U9NTPWUaalAPDSDT1KMejYbqpxpyACCQ3q-_AADgfwEAAECAWw
sAAPB73hxZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=83
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:49 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=DnCsvKdN8wbht7JOlmYm6sAa_UA3JBROkdzF3-JDxWR3wdVKFTwXBAHVEAI
RukARAaoLioj7HCvVfTBIpoVRHQUqGKTMJ9PDIPEaLvNrTdmLM3Pmc3akqzNaG4bZpO0g_
O2eXpbpuofCK4ZXgXqaBhpkUE9tyqYa1NCmQbUn9fSkxtRMmhpqACCQ3q-_AADgfwEAAEC
A2wsAAGv0A91ZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=DnCsvKdN8wbht7JOlmYm6sAa_UA3JBROkdzF3-JDxWR3wdVKFTwXBAHVEAIRuk
ARAaoLioj7HCvVfTBIpoVRHQUqGKTMJ9PDIPEaLvNrTdmLM3Pmc3akqzNaG4bZpO0g_O2e
XpbpuofCK4ZXgXqaBhpkUE9tyqYa1NCmQbUn9fSkxtRMmhpqACCQ3q-_AADgfwEAAECA2w
sAAGv0A91ZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=97
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:49 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=9YCNdAed3nXMyflk6kElSzBmfPlAQuEUyV389dBRmNqccFkqwvFCISgtQxD
NlQkEWi-xqHs_k_QJZ6J7dgzvI4kSo9wN3csxLLTZ1T-dDINaMxfuqxB4ElMCGgfgnNR6e
GNlhZ6pquT0sFxKalNt02TUo6Z-kqeeMtFPVQJAg9pkSI9MTTxFaAAgkN6vvwAA4H8BAAB
AgFsLAACMGV8-WVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=9YCNdAed3nXMyflk6kElSzBmfPlAQuEUyV389dBRmNqccFkqwvFCISgtQxDNl
QkEWi-xqHs_k_QJZ6J7dgzvI4kSo9wN3csxLLTZ1T-dDINaMxfuqxB4ElMCGgfgnNR6eGN
lhZ6pquT0sFxKalNt02TUo6Z-kqeeMtFPVQJAg9pkSI9MTTxFaAAgkN6vvwAA4H8BAABAg
FsLAACMGV8-WVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=91
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:51 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=SoLxdgCD5DpWjwvb5jdlUgAqvg58SCicIrmLn3Ypykj6sZKpGDtBCEheESQ
wxAsHEJwgCqpfuYLnmaAoMi7no0CFQ413ouw4VNDTW19isxUKJIygMAWljW1CRdVWFt0xz
wvHW4S2O1KHNjejHhpApqlHPRoN1U810FTP1COyqZ6eGuop00w1ZAAgkN6vvwAA4H8BAAB
AgFsLAABUfB34WVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=SoLxdgCD5DpWjwvb5jdlUgAqvg58SCicIrmLn3Ypykj6sZKpGDtBCEheESQwx
AsHEJwgCqpfuYLnmaAoMi7no0CFQ413ouw4VNDTW19isxUKJIygMAWljW1CRdVWFt0xzwv
HW4S2O1KHNjejHhpApqlHPRoN1U810FTP1COyqZ6eGuop00w1ZAAgkN6vvwAA4H8BAABAg
FsLAABUfB34WVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1367
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=79
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:51 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=P6oaFBqakH_NTOpFf9Pk8IAnvQsfEgqnSO6Cp6PDvGV77rTMXGlRCIpCBEl
cASMCVS3IYPucK_WFESTj4nSKAhUOUSaU6XGoYZfLPOyiGY9Acg-lOXpk5TCDaiAfcwcc2
3pHv1fVjtDGcEppaBipRzypN6qB-qdqgHrEAOppqKc25VENdQAgkN6vvwAAoH8BAABAgFs
LAAA86V34WVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frameset&
gt;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com
?epl=P6oaFBqakH_NTOpFf9Pk8IAnvQsfEgqnSO6Cp6PDvGV77rTMXGlRCIpCBElcASMCV
S3IYPucK_WFESTj4nSKAhUOUSaU6XGoYZfLPOyiGY9Acg-lOXpk5TCDaiAfcwcc23pHv1f
VjtDGcEppaBipRzypN6qB-qdqgHrEAOppqKc25VENdQAgkN6vvwAAoH8BAABAgFsLAAA86
V34WVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com</a>.
</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=55
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:54 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=vYmF7TQptp-uRhGY1ZPieYOdztuQUDhFchf_u4QYphYnbJaMcF0oBLVlCKK
6QiOB1ksZdu94U07LmoJx5vp8JjU56vCWMOIcFvv01T_LJVJGGxLhcQ0-Z2F0zREoiEU9z
EtZV4tMmcJXw3QialPt0UA9auonjZ5qE_1UJYBGg_KoB2kjND1FaAAgkN6vvwAA4H8BAAB
AgFsLAACDnc7bWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=vYmF7TQptp-uRhGY1ZPieYOdztuQUDhFchf_u4QYphYnbJaMcF0oBLVlCKK6Q
iOB1ksZdu94U07LmoJx5vp8JjU56vCWMOIcFvv01T_LJVJGGxLhcQ0-Z2F0zREoiEU9zEt
ZV4tMmcJXw3QialPt0UA9auonjZ5qE_1UJYBGg_KoB2kjND1FaAAgkN6vvwAA4H8BAABAg
FsLAACDnc7bWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=98
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:54 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=lg2psjDLeMzTiIqk6d9BOzol64QgoXCK5C7-2qUoo-jHKqZirA5CQPKKIIk
hYDiA4I6amLifTrpxnFEhPO62IVESh3xsDOU4GOb16R8SVWAKrEEseSdgs-xhVFGS5ohn6
4ZPJOtthPhbb0qpB8jQaGpTDzRUP9XAVA89mtKPemqYmhrpRzVkACCQ3q-_AADgfwEAAEC
AWwsAAJ2SdUJZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=lg2psjDLeMzTiIqk6d9BOzol64QgoXCK5C7-2qUoo-jHKqZirA5CQPKKIIkhYD
iA4I6amLifTrpxnFEhPO62IVESh3xsDOU4GOb16R8SVWAKrEEseSdgs-xhVFGS5ohn64ZP
JOtthPhbb0qpB8jQaGpTDzRUP9XAVA89mtKPemqYmhrpRzVkACCQ3q-_AADgfwEAAECAWw
sAAJ2SdUJZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1379
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=89
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:56 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=u1Jqewhi9YwebnIW9XigIgC6dIhCSCicIrmLP74ghqnFCZslIywvFILWMgQ
RXZkpoPUiDbt2vCmfi0bCSOfuPhM5OezQLhhxDkt9--qXaxakaeVaoMNdhEcYCQEd2LlHx
YlCWsS1qY6eytyM2lTbNFCPmvpJm3pKT_RTlQDQID3qoalHPcpGNWgAIJDer78AAOB_AQA
AQIBbCwAAdOkQhVlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </fra
meset>. <noframes>..<body><a href="hXXp://VVV.iwofe
ng.com?epl=u1Jqewhi9YwebnIW9XigIgC6dIhCSCicIrmLP74ghqnFCZslIywvFILWMgQ
RXZkpoPUiDbt2vCmfi0bCSOfuPhM5OezQLhhxDkt9--qXaxakaeVaoMNdhEcYCQEd2LlHx
YlCWsS1qY6eytyM2lTbNFCPmvpJm3pKT_RTlQDQID3qoalHPcpGNWgAIJDer78AAOB_AQA
AQIBbCwAAdOkQhVlTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.co
m</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=98
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:56 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=E9jUsFDEIdymHtW1a5x7__24qJ-QUDhFchd_7VKUUfRjFVMxVgchIHlFkMQ
QMBxAcEecmPmdk7BsM2IlxuF8SESJA13XKjoONebZtE8Qmp3KrEmbWIgN4WvqfFxBMFqHP
F-49Mm9XoM5WZxS6gEyNJra1AMN1U810FTP1Iwaeeppoqc0NU81ZAAgkN6vvwAA4H8BAAB
AgFsLAAD9uKifWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=E9jUsFDEIdymHtW1a5x7__24qJ-QUDhFchd_7VKUUfRjFVMxVgchIHlFkMQQM
BxAcEecmPmdk7BsM2IlxuF8SESJA13XKjoONebZtE8Qmp3KrEmbWIgN4WvqfFxBMFqHPF-
49Mm9XoM5WZxS6gEyNJra1AMN1U810FTP1Iwaeeppoqc0NU81ZAAgkN6vvwAA4H8BAABAg
FsLAAD9uKifWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1379
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=87
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:58 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=mSZctBZz2slV5zAQ381TEsDm3jMeEgqnSO7iX8fi8Kw44at0hM0yISY9hyC
aKTIRJrXYcdaGV8rlOGMF69y7j8Qkl3vZsSDOpULfPfVbXXDcBJznakqTF8NNIghKoRXtI
VJ1pWYMpvqOjdKlpDZl0yA9auonbeqp9pT8VCWARoOaaagnmJo8RWgAIJDer78AAOB_AQA
AQIBbCwAANvee8VlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </fra
meset>. <noframes>..<body><a href="hXXp://VVV.iwofe
ng.com?epl=mSZctBZz2slV5zAQ381TEsDm3jMeEgqnSO7iX8fi8Kw44at0hM0yISY9hyC
aKTIRJrXYcdaGV8rlOGMF69y7j8Qkl3vZsSDOpULfPfVbXXDcBJznakqTF8NNIghKoRXtI
VJ1pWYMpvqOjdKlpDZl0yA9auonbeqp9pT8VCWARoOaaagnmJo8RWgAIJDer78AAOB_AQA
AQIBbCwAANvee8VlTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.co
m</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=51
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:39:58 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=S95g0DFKThPLn9SS7V-UyiNodGmQUDhFchd6DR11Z83pVqWiGy0TYs53CCK
ZEgNhUkssytrPpD2GMtE9GLv_SKLE0DsbupdjVMr6FIdrcgMxAkeSQCuoRwOiM6BqaQ-vr
KyjRWJc3-hh-ZwAGtT0NGSokekpQqO2aZCeNPWTRk95in6qEnQAIJDer78AAOB_AQAAQIB
bCwAAI2h0aVlTJllBMTZoWkKSAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=S95g0DFKThPLn9SS7V-UyiNodGmQUDhFchd6DR11Z83pVqWiGy0TYs53CCKZEgN
hUkssytrPpD2GMtE9GLv_SKLE0DsbupdjVMr6FIdrcgMxAkeSQCuoRwOiM6BqaQ-vrKyjR
WJc3-hh-ZwAGtT0NGSokekpQqO2aZCeNPWTRk95in6qEnQAIJDer78AAOB_AQAAQIBbCwA
AI2h0aVlTJllBMTZoWkKSAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1367
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=71
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:40:00 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=T1wQdnPJHMa41iTlJI5NogBABSwmSCicIrmLP32ExGjz4LTJ4PoFIkC9IUh
mChkHIL2ow-100FSXJkpGAvUchjIgplCS6YGYAeN9vGypUtVVVEJ7O8OC4V4pBU9BOeTZp
pOtQrTPbqo_kxp6NJGnnuon9QYV9E_VAPXQAOpppKc85VENdQAgkN6vvwAAoH0BAABAgFs
LAACAClhMWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frameset&
gt;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com
?epl=T1wQdnPJHMa41iTlJI5NogBABSwmSCicIrmLP32ExGjz4LTJ4PoFIkC9IUhmChkHI
L2ow-100FSXJkpGAvUchjIgplCS6YGYAeN9vGypUtVVVEJ7O8OC4V4pBU9BOeTZppOtQrT
Pbqo_kxp6NJGnnuon9QYV9E_VAPXQAOpppKc85VENdQAgkN6vvwAAoH0BAABAgFsLAACAC
lhMWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com</a>.
</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1379
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=90
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:40:01 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=8B0OV544mfWhtocb2Tf_1GAZ3esLEgqnSO7ip12KMpJ-rGQqxk4QApJXBAk
M8cIBBCdkRc0vocFz0ZBDMhC_YZAGBJ1bQzoQNu64t_1YbsryyOZgJ5nTpkKogdV1UlcdM
33hyRNR_K04l8OtpR4aQKapRz0aDdVPNdBUDz2onqmnnjRq9BRPNWQAIJDer78AAOB_AQA
AQIBbCwAAy-heX1lTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </fra
meset>. <noframes>..<body><a href="hXXp://VVV.iwofe
ng.com?epl=8B0OV544mfWhtocb2Tf_1GAZ3esLEgqnSO7ip12KMpJ-rGQqxk4QApJXBAk
M8cIBBCdkRc0vocFz0ZBDMhC_YZAGBJ1bQzoQNu64t_1YbsryyOZgJ5nTpkKogdV1UlcdM
33hyRNR_K04l8OtpR4aQKapRz0aDdVPNdBUDz2onqmnnjRq9BRPNWQAIJDer78AAOB_AQA
AQIBbCwAAy-heX1lTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.co
m</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1365
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=91
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:40:03 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=X8P02-wlzUHcksxRKjn1VkDnDKseEgqnSO7Cpx8h1rI-NVpiKktRCEo6BAk
s48UDSqYgg-1zrlQXwiCZiNMpClQ4mEwo0-NQwy6XebaNjp6xMK25mEQOEM7MJLRzRuwBC
_cTTYQXf47GdClpaIDayKinIU-lf6oGqEcMoB6kpzblUQ11ACCQ3q-_AACgfwEAAECAWws
AADpnWPVZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frameset&g
t;. <noframes>..<body><a href="hXXp://VVV.iwofeng.com?
epl=X8P02-wlzUHcksxRKjn1VkDnDKseEgqnSO7Cpx8h1rI-NVpiKktRCEo6BAks48UDSq
Ygg-1zrlQXwiCZiNMpClQ4mEwo0-NQwy6XebaNjp6xMK25mEQOEM7MJLRzRuwBC_cTTYQX
f47GdClpaIDayKinIU-lf6oGqEcMoB6kpzblUQ11ACCQ3q-_AACgfwEAAECAWwsAADpnWP
VZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</a>.&l
t;/body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1357
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=96
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:40:03 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=GLC0OHRGKLD94C3y00HLW1BO9SYCCYVTJHfx19lg6liz6Fllim4XEYJIFwQ
i8gYEA-J90SbmtQqTDZlEG_WAdz8IjYCRj2WjMjBy6DGf8iAapsiNcq4u96TiC0_iogZE8
TozXrT26DOAlq0rdaeUMtnUQxryFDSQpxpMAMAEAGNwACCQ3q-_AADgfQEAAECAWwsAAOV
UbyJZUyZZQTE2aFpClAAAAPA" name="iwofeng.com">. </frameset>.
<noframes>..<body><a href="hXXp://VVV.iwofeng.com?epl=
GLC0OHRGKLD94C3y00HLW1BO9SYCCYVTJHfx19lg6liz6Fllim4XEYJIFwQi8gYEA-J90S
bmtQqTDZlEG_WAdz8IjYCRj2WjMjBy6DGf8iAapsiNcq4u96TiC0_iogZE8TozXrT26DOA
lq0rdaeUMtnUQxryFDSQpxpMAMAEAGNwACCQ3q-_AADgfQEAAECAWwsAAOVUbyJZUyZZQT
E2aFpClAAAAPA">Click here to go to iwofeng.com</a>.</body&
gt;. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=98
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:40:05 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=6sVnbhERSRhdhBGSKzmbcQDA91NeSCicIrmLvIaOwtPihMtSEY6XCTHxMgQ
RrcxAmPUSi7r3M0mfISW6Z8f8fSRRYlB3Q_dwDEvZvv7rutAkQBPB0liUOQknSEALNWUPB
VMn9XswUpoapscINBrUE4P0oEwmQptqj4boSU_1Uzb1lIl-qhJ0ACCQ3q-_AADgfwEAAEC
AWwsAAIDvp7xZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=6sVnbhERSRhdhBGSKzmbcQDA91NeSCicIrmLvIaOwtPihMtSEY6XCTHxMgQRrc
xAmPUSi7r3M0mfISW6Z8f8fSRRYlB3Q_dwDEvZvv7rutAkQBPB0liUOQknSEALNWUPBVMn
9XswUpoapscINBrUE4P0oEwmQptqj4boSU_1Uzb1lIl-qhJ0ACCQ3q-_AADgfwEAAECAWw
sAAIDvp7xZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=98
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:40:05 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=vgHsz1UPR81o1aI4q8V3qwAwhHAZSCicIrkL_SSE3bLzXLNjudOiENQcESR
yBYUEqlpQRNznWKnug0EyLYzqKFDBIGU-mR4GidhwmV-lxgyNMUTwpCvU8-oDNMCJYzoHl
W87zBOV3TLanL9WmqlHg-qhqZ_UNglN_VM1QD1NAw0yqKc2ZVMNdQAgkN6vvwAA4H8BAAB
AgFsLAABgCOEyWVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </frame
set>. <noframes>..<body><a href="hXXp://VVV.iwofeng
.com?epl=vgHsz1UPR81o1aI4q8V3qwAwhHAZSCicIrkL_SSE3bLzXLNjudOiENQcESRyB
YUEqlpQRNznWKnug0EyLYzqKFDBIGU-mR4GidhwmV-lxgyNMUTwpCvU8-oDNMCJYzoHlW8
7zBOV3TLanL9WmqlHg-qhqZ_UNglN_VM1QD1NAw0yqKc2ZVMNdQAgkN6vvwAA4H8BAABAg
FsLAABgCOEyWVMmWUExNmhaQpMAAADw">Click here to go to iwofeng.com<
;/a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1379
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=98
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:40:08 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=Gm0EwsJnfL6S-Pn4yNtCO4BkYn86JBROkdzF_xYNms3iydSGJkcMQ2B2iCC
ZhxoF2GGQwfY5V2gLX5AMi9NzFKhwkDKhTI_DDLtb8kNpPcoQ3UR5a1KAtaYFHSS9Whz1t
OU0nsimXRDn9u-oTXo0KJ7qp57SG0XTU_1TNUA9NICmNqinNuVRDXUAIJDer78AAOB_AQA
AQIBbCwAAkon96VlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </fra
meset>. <noframes>..<body><a href="hXXp://VVV.iwofe
ng.com?epl=Gm0EwsJnfL6S-Pn4yNtCO4BkYn86JBROkdzF_xYNms3iydSGJkcMQ2B2iCC
ZhxoF2GGQwfY5V2gLX5AMi9NzFKhwkDKhTI_DDLtb8kNpPcoQ3UR5a1KAtaYFHSS9Whz1t
OU0nsimXRDn9u-oTXo0KJ7qp57SG0XTU_1TNUA9NICmNqinNuVRDXUAIJDer78AAOB_AQA
AQIBbCwAAkon96VlTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.co
m</a>.</body>. </noframes>.</html>

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=97
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:40:08 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=Y1pjFEPgN0ftUa4JsYGg3IBKzp0jJBROkdzFv46Eiuv04HqpwfKiEJSVESR
4GhQRKPqCDLbTuVLb-IJkJE7PUaDCYQqNMj0OE3Z3zEMo4RypnPImWaAZKpQJ7SChNx1z2
XaqiUDtKN-c31pq6MmQ8pM8qm2KSfqnaoB6aKChHqSnNmVTDXUAIJDer78AAOB9AQAAQIB
bCwAAKjl3jllTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=Y1pjFEPgN0ftUa4JsYGg3IBKzp0jJBROkdzFv46Eiuv04HqpwfKiEJSVESR4GhQ
RKPqCDLbTuVLb-IJkJE7PUaDCYQqNMj0OE3Z3zEMo4RypnPImWaAZKpQJ7SChNx1z2Xaqi
UDtKN-c31pq6MmQ8pM8qm2KSfqnaoB6aKChHqSnNmVTDXUAIJDer78AAOB9AQAAQIBbCwA
AKjl3jllTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1373
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=87
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:40:10 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=dgI7JIMt1c2RNY9KKDWsscBALzYSJBROkdyFzoeOurPmdKtS0Y2WCTH1dwi
imAIDYVJLLMraz6QdhjHRvTyG30iixJidDd3LMSplNP3jn9AYO7CCBmSgUNPidAFFLX49w
Le6R4vEudLoYbmUABrUTIOMeoppIrSpNhjqSU_1aFNPeYp-qhJ0ACCQ3q-_AADgfwEAAEC
AWwsAAAO92EhZUyZZQTE2aFpCkwAAAPA" name="iwofeng.com">. </frames
et>. <noframes>..<body><a href="hXXp://VVV.iwofeng.
com?epl=dgI7JIMt1c2RNY9KKDWsscBALzYSJBROkdyFzoeOurPmdKtS0Y2WCTH1dwiimA
IDYVJLLMraz6QdhjHRvTyG30iixJidDd3LMSplNP3jn9AYO7CCBmSgUNPidAFFLX49wLe6
R4vEudLoYbmUABrUTIOMeoppIrSpNhjqSU_1aFNPeYp-qhJ0ACCQ3q-_AADgfwEAAECAWw
sAAAO92EhZUyZZQTE2aFpCkwAAAPA">Click here to go to iwofeng.com</
a>.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /tc.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1371
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=98
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:40:10 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=WC7MU4NFwGOeVmeUyu3DOgBXdqhESCicIrmL_3Yryij6sYqpmEtBCIhuESQ
zhAwHEKSoiZnfOYMlxSiZiMNvGMpwkOWSzI5Dxbya6lZE1lBjFrDu60xDgFBsZonUZIeML
yz9GRkv6XNocUqph0aGRlObeqCh-qkGoR6aUUZmin4qP5VNNWQAIJDer78AAOB9AQAAQIB
bCwAAruxQiVlTJllBMTZoWkKTAAAA8A" name="iwofeng.com">. </framese
t>. <noframes>..<body><a href="hXXp://VVV.iwofeng.c
om?epl=WC7MU4NFwGOeVmeUyu3DOgBXdqhESCicIrmL_3Yryij6sYqpmEtBCIhuESQzhAw
HEKSoiZnfOYMlxSiZiMNvGMpwkOWSzI5Dxbya6lZE1lBjFrDu60xDgFBsZonUZIeMLyz9G
Rkv6XNocUqph0aGRlObeqCh-qkGoR6aUUZmin4qP5VNNWQAIJDer78AAOB9AQAAQIBbCwA
AruxQiVlTJllBMTZoWkKTAAAA8A">Click here to go to iwofeng.com</a&
gt;.</body>. </noframes>.</html>
....

<<< skipped >>>

GET /ok.txt HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: VVV.iwofeng.com
Cache-Control: no-cache
Cookie: parkinglot=1


HTTP/1.0 200 (OK)
Cache-Control: private, no-cache, must-revalidate
Connection: Keep-Alive
Pragma: no-cache
Server: Oversee Turing v1.0.0
Content-Length: 1375
Content-Type: text/html
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=3, max=99
P3P: policyref="hXXp://VVV.dsparking.com/w3c/p3p.xml", CP="NOI DSP COR ADMa OUR NOR STA"
Set-Cookie: parkinglot=1; domain=.iwofeng.com; path=/; expires=Thu, 17-Apr-2014 03:40:12 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "hXXp://
VVV.w3.org/TR/html4/frameset.dtd">.<!-- turing_cluster_prod --&g
t;.<html>. <head>. <meta http-equiv="Content-Type"
content="text/html; charset=utf-8" />.. <title>iwofeng.com
</title>. <meta name="keywords" content="iwofeng.com" />
;. <meta name="description" content="iwofeng.com" />. <
meta name="robots" content="index, follow" />. <meta name="re
visit-after" content="10" />... <meta name="viewport" content
="width=device-width, initial-scale=1.0" /> ... . <script
type="text/javascript">. document.cookie = "jsc=1";. </s
cript>.. </head>. <frameset rows="100%,*" frameborder="n
o" border="0" framespacing="0">. <frame src="hXXp://VVV.iwofe
ng.com?epl=-mn3GW2UMd-OM6ZgjMQ2KEinVqCFhMIpkrvIbcmY2CoePGtmcP3CEFieECT
yMKMAu4s63C4HzVypRcmoQD2HoQwIViTJ9EDMOLxhnoi2lyyisoTAqoVIeApYKSKlI45Z1
nRZD6FdXXRj7TvapE2DYuqnntIb9VQ21T9VA9RDA6AeqKc85VENdQAgkN6vvwAA4H8BAAB
AgFsLAADp1Aq0WVMmWUExNmhaQpMAAADw" name="iwofeng.com">. </fra..

<<< skipped >>>

%original file name%.exe_588:

.text
`.rdata
@.data
.rsrc
t%SVh
t$(SSh
~%UVW
u$SShe
SkinH_EL.dll
shlwapi.dll
ws2_32.dll
ole32.dll
kernel32.dll
gdiplus.dll
GdiPlus.dll
user32.dll
advpack.dll
ntdll.dll
shell32.dll
secur32.dll
SENSAPI.DLL
Psapi.dll
advapi32.dll
MsgWaitForMultipleObjects
GdiplusShutdown
GetWindowsDirectoryA
ShellExecuteA
EnumChildWindows
GetProcessHeap
GetProcessHeaps
Pack_Login_Chg Error
LoginAuth Error
120.196.210.30
00 01 70
login.chguin
176050975868618
00 00 04
cmdstr
08 00 02 06 16
21 37 29
52 20 02
35 33 37 30 33 35 32 31 32
76 03 31 32 33
00 00 00 03 01 00 00
00 00 00
00 10 70
login.auth
08 00 03 06 14
RequestAuthWlogin
00 00 00 01 00 00 00 10
00 00 00 01 00 00 00 00
00 00 00 00 00
00 00 00 17
CliLogSvc.UploadReq
00 00 00 04
00 00 00 13
00 00 00 14
QQService.CliLogSvc.MainServantObj
08 00 01 06
00 00 00 40
C:\Windows\System32\drivers\etc\hosts
http://www.iwofeng.com/ok.txt
http://www.iwofeng.com
\c.tmp
http://www.iwofeng.com/tc.txt
123456789
[email protected]
smtp.QQ.com
:http://www.tmd.la
fJ.WM_
CX%xm
Õ6m*
n.BjCw
%s;7*
0%x@w
%C^L:
%s T5
]E4%F(
.Funr
k%UPp
fg.VG
%C',@
>Ùd
0'.Ll
[I(3/#N0.bd
j"%u=w
q%Xn`
@|H.NI
.wdd!
S|%u4
*.Ea]S
Q.CGo
fTpe
.LLbX
-.Mdl
\-A}=3K
Y:.akpS
$.Zcqn
.WE= T!N
#?%s(C(
u.Jck~
zx/%FN[
%s=\RI
}j%c%Y)
Rx.GR
4o#.dM
IeS`%C
[n 4\.UY 
,4.qO,
gQ'.Io
%cLur?
s%DHB
]I%%X
5r.US
:mD].tB
f%fUZ
.fOuV12
*_.dC
&-N}<
({?.cQm
.Cqx~c
.`.Qw
**.dU
!n]%x
%X,Cr
&.PFy{xh
.um ZZE7L
/^p%u$
I.NoQY
zu.ew
D/.nT
b\SkinH_EL.dll
C$%cmb
.ppM|
 aZ.mO
%-^
.hk;~
KERNEL32.DLL
COMCTL32.dll
GDI32.dll
MSIMG32.dll
MSVCRT.dll
MSVFW32.dll
USER32.dll
00 00 04 00 00
yC121.14.125.21
AccostSvc.ReqGetBlackList
RegPrxySvc.PushGetMsgV2
EncounterSvc.ReqGetEncounterV2
MessageSvc.PushGroupMsg
MessageSvc.offlinemsg
PushService.register
function encrypt(str,pass){
data = m_xxtea.encrypt(str, pass);
function decrypt(str,pass){
data = m_xxtea.decrypt(str, pass);
if (str.match(/^[\x00-\x7f]*$/) != null) {
return str.toString();
len = str.length;
c = str.charCodeAt(i);
out[j] = str.charAt(i);
out[j] = String.fromCharCode(0xc0 | (c >>> 6),
out[j] = String.fromCharCode(0xe0 | (c >>> 12),
c2 = str.charCodeAt(i);
out[j] = String.fromCharCode(0xf0 | ((c >>> 18) & 0x3f),
return out.join('');
if ((str.match(/^[\x00-\x7f]*$/) != null) ||
(str.match(/^[\x00-\xff]*$/) == null)) {
c = str.charCodeAt(i  );
out[j  ] = str.charAt(i - 1);
c2 = str.charCodeAt(i  );
out[j  ] = String.fromCharCode(((c & 0x1f) << 6) |
c3 = str.charCodeAt(i  );
out[j  ] = String.fromCharCode(((c & 0x0f) << 12) |
c4 = str.charCodeAt(i  );
out[j  ] = String.fromCharCode(((s >>> 10) & 0x03ff) | 0xd800,
var base64EncodeChars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 /'.split('');
len = str.length;
c = str.charCodeAt(i  ) << 16 |
str.charCodeAt(i  ) << 8 |
str.charCodeAt(i  );
c = str.charCodeAt(i  );
c = str.charCodeAt(i  ) << 8 |
return out.join('');
-1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
-1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 62, -1, -1, -1, 63,
if (/[^ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\ \/\=]/.test(str)) {
if (str.charAt(len - 2) == '=') {
else if (str.charAt(len - 1) == '=') {
c1 = base64DecodeChars[str.charCodeAt(i  )];
c2 = base64DecodeChars[str.charCodeAt(i  )];
out[j  ] = String.fromCharCode((c1 << 2) | ((c2 & 0x30) >> 4));
c3 = base64DecodeChars[str.charCodeAt(i  )];
out[j  ] = String.fromCharCode(((c2 & 0x0f) << 4) | ((c3 & 0x3c) >> 2));
c4 = base64DecodeChars[str.charCodeAt(i  )];
out[j  ] = String.fromCharCode(((c3 & 0x03) << 6) | c4);
var length = data.length;
data[i] = String.fromCharCode(
return data.join('').substring(0, n);
return data.join('');
var length = string.length;
result[i >> 2] = string.charCodeAt(i) |
string.charCodeAt(i   1) << 8 |
string.charCodeAt(i   2) << 16 |
string.charCodeAt(i   3) << 24;
result[result.length] = length;
this.encrypt = function(string, key) {
var k = stringToLongArray(key, false);
if (k.length < 4) {
k.length = 4;
var n = v.length - 1;
var mx, e, p, q = Math.floor(6   52 / (n   1)), sum = 0;
this.decrypt = function(string, key) {
var mx, e, p, q = Math.floor(6   52 / (n   1)), sum = q * delta & 0xffffffff;
MSScriptControl.ScriptControl
* See http://pajhome.org.uk/crypt/md5 for details.
function hex_sha1(s){return binb2hex(core_sha1(str2binb(s),s.length * chrsz));}
function b64_sha1(s){return binb2b64(core_sha1(str2binb(s),s.length * chrsz));}
function str_sha1(s){return binb2str(core_sha1(str2binb(s),s.length * chrsz));}
function hex_hmac_sha1(key, data){ return binb2hex(core_hmac_sha1(key, data));}
function b64_hmac_sha1(key, data){ return binb2b64(core_hmac_sha1(key, data));}
function str_hmac_sha1(key, data){ return binb2str(core_hmac_sha1(key, data));}
for(var i = 0; i < x.length; i  = 16)
* Calculate the HMAC-SHA1 of a key and some data
function core_hmac_sha1(key, data)
var bkey = str2binb(key);
if(bkey.length > 16) bkey = core_sha1(bkey, key.length * chrsz);
ipad[i] = bkey[i] ^ 0x36363636;
opad[i] = bkey[i] ^ 0x5C5C5C5C;
var hash = core_sha1(ipad.concat(str2binb(data)), 512   data.length * chrsz);
return core_sha1(opad.concat(hash), 512   160);
* Add integers, wrapping at 2^32. This uses 16-bit operations internally
for(var i = 0; i < str.length * chrsz; i  = chrsz)
bin[i>>5] |= (str.charCodeAt(i / chrsz) & mask) << (32 - chrsz - i2);
for(var i = 0; i < bin.length * 32; i  = chrsz)
str  = String.fromCharCode((bin[i>>5] >>> (32 - chrsz - i2)) & mask);
for(var i = 0; i < binarray.length * 4; i  )
str  = hex_tab.charAt((binarray[i>>2] >> ((3 - i%4)*8 4)) & 0xF)  
hex_tab.charAt((binarray[i>>2] >> ((3 - i%4)*8 )) & 0xF);
for(var i = 0; i < binarray.length * 4; i  = 3)
if(i * 8   j * 6 > binarray.length * 32) str  = b64pad;
else str  = tab.charAt((triplet >> 6*(3-j)) & 0x3F);
00 00 00
00 00 00 04 00 00
08 00 01
18 00 01
00 00 00 62
40 06 56
18 00 01
Security.RequestAuthWlogin
00 00 00 00 00
Security.RequestGetServerTime
Security.RequestHeader
{B96B3CAE-0728-11D3-9D7B-0000F81EF32E}
00 04 00 00
66 32 30 35 31 62 37 30 00 00
00 00 00 19
00 00 04 00 00
Adodb.Stream
Scripting.Encoder
1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0,
1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2,
1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2,
1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2
digits["A".charCodeAt(0) i] = i
digits["a".charCodeAt(0) i] = i 26
for (var i=0; i<10; i  ) digits["0".charCodeAt(0) i] = i 52
if (char.charCodeAt(0) > 126) return char
if (escapes.indexOf(char) != -1) return escaped.substr(escapes.indexOf(char), 1)
val  = (digits[string.substr(0,1).charCodeAt(0)] << 2)
val  = (digits[string.substr(1,1).charCodeAt(0)] >> 4)
val  = (digits[string.substr(1,1).charCodeAt(0)] & 0xf) << 12
val  = ((digits[string.substr(2,1).charCodeAt(0)] >> 2) << 8)
val  = ((digits[string.substr(2,1).charCodeAt(0)] & 0x3) << 22)
val  = (digits[string.substr(3,1).charCodeAt(0)] << 16)
scriptIndex = encodingString.indexOf(marker, stringIndex)
unEncodingString  = encodingString.substring(stringIndex, scriptIndex)
scriptIndex  = marker.length
unEncodingString  = encodingString.substr(stringIndex, encodingString.length)
encodingLength = encodingString.substr(scriptIndex, 6)
scriptIndex  = (6   "==".length)
stringIndex = scriptIndex   "DQgAAA==^#~@".length
char = encodingString.substr(scriptIndex, 1)
if (char.charCodeAt(0) < 0xFF)
unEncodingString  = String.fromCharCode(transformed[pick_encoding[unEncodingIndexd]][char.charCodeAt(0)])
unEncodingString  = unescape(encodingString.substr(  scriptIndex, 1))
re = new RegExp("(JScript|VBscript).encode", "gmi")
while(arr = re.exec(unEncodingString)) unEncodingString = RegExp.leftContext   RegExp.$1   RegExp.rightContext
strdec(AdodbStream.ReadText);
0.0.0.0
0000000000
Shell.Application
Function Getcpuid()
Set cpuSet = GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf("Win32_Processor")
getcpuid=cpu.ProcessorId
Getcpuid
Set mc=GetObject("Winmgmts:").InstancesOf("Win32_NetworkAdapterConfiguration")
If mo.IPEnabled=True Then
MACAddress= mo.MacAddress
\\.\PHYSICALDRIVE0
wshom.ocx
WindowStyle
Hotkey
BASEURL
CascadeWindows
Math.round(new Date().getTime()/1000)
Math.round(new Date().getTime())
Math.round(new Date().getTime() * 100)
7 9 10 5 8 4 2 1 6 3 7 9 10 5 8 4 2
WScript.Shell
rundll32.exe url.dll,FileProtocolHandler
function trim_output() {while (output.length && (output[output.length - 1] === " " || output[output.length - 1] === indent_string)) {output.pop();}}
function print_newline(ignore_repeated) {ignore_repeated = typeof ignore_repeated === "undefined" ? true : ignore_repeated;trim_output();if (!output.length) {return;}if (output[output.length - 1] !== "\n" || !ignore_repeated) {output.push("\n");}for (var i = 0; i < indent_level; i  ) {output.push(indent_string);}}
function print_space() {var last_output = output.length ? output[output.length - 1] : " ";if (last_output !== " " && last_output !== "\n" && last_output !== indent_string) {output.push(" ");}}
function print_token() {output.push(token_text);}
function remove_indent() {if (output.length && output[output.length - 1] === indent_string) {output.pop();}}
function set_mode(mode) {modes.push(current_mode);current_mode = mode;}
function restore_mode() {do_block_just_closed = current_mode === "DO_BLOCK";current_mode = modes.pop();}
function in_array(what, arr) {for (var i = 0; i < arr.length; i  ) {if (arr[i] === what) {return true;}}return false;}
function get_next_token() {var n_newlines = 0;var c = "";do {if (parser_pos >= input.length) {return ["", "TK_EOF"];}c = input.charAt(parser_pos);parser_pos  = 1;if (c === "\n") {n_newlines  = 1;}} while (in_array(c, whitespace));if (n_newlines > 1) {for (var i = 0; i < 2; i  ) {print_newline(i === 0);}}var wanted_newline = n_newlines === 1;if (in_array(c, wordchar)) {if (parser_pos < input.length) {while (in_array(input.charAt(parser_pos), wordchar)) {c  = input.charAt(parser_pos);parser_pos  = 1;if (parser_pos === input.length) {break;}}}if (parser_pos !== input.length && c.match(/^[0-9] [Ee]$/) && input.charAt(parser_pos) === "-") {parser_pos  = 1;var t = get_next_token(parser_pos);c  = "-"   t[0];return [c, "TK_WORD"];}if (c === "in") {return [c, "TK_OPERATOR"];}return [c, "TK_WORD"];}if (c === "(" || c === "[") {return [c, "TK_START_EXPR"];}if (c === ")" || c === "]") {return [c, "TK_END_EXPR"];}if (c === "{") {return [c, "TK_START_BLOCK"];}if (c === "}") {return [c, "TK_END_BLOCK"];}if (c === ";") {return [c, "TK_END_COMMAND"];}if (c === "/") {var comment = "";if (input.charAt(parser_pos) === "*") {parser_pos  = 1;if (parser_pos < input.length) {while (!(input.charAt(parser_pos) === "*" && input.charAt(parser_pos   1) && input.charAt(parser_pos   1) === "/") && parser_pos < input.length) {comment  = input.charAt(parser_pos);parser_pos  = 1;if (parser_pos >= input.length) {break;}}}parser_pos  = 2;return ["/*"   comment   "*/", "TK_BLOCK_COMMENT"];}if (input.charAt(parser_pos) === "/") {comment = c;while (input.charAt(parser_pos) !== "\r" && input.charAt(parser_pos) !== "\n") {comment  = input.charAt(parser_pos);parser_pos  = 1;if (parser_pos >= input.length) {break;}}parser_pos  = 1;if (wanted_newline) {print_newline();}return [comment, "TK_COMMENT"];}}if (c === "'" || c === "\"" || c === "/" && (last_type === "TK_WORD" && last_text === "return" || last_type === "TK_START_EXPR" || last_type === "TK_END_BLOCK" || last_type === "TK_OPERATOR" || last_type === "TK_EOF" || last_type === "TK_END_COMMAND")) {var sep = c;var esc = false;c = "";if (parser_pos < input.length) {while (esc || input.charAt(parser_pos) !== sep) {c  = input.charAt(parser_pos);if (!esc) {esc = input.charAt(parser_pos) === "\\";} else {esc = false;}parser_pos  = 1;if (parser_pos >= input.length) {break;}}}parser_pos  = 1;if (last_type === "TK_END_COMMAND") {print_newline();}return [sep   c   sep, "TK_STRING"];}if (in_array(c, punct)) {while (parser_pos < input.length && in_array(c   input.charAt(parser_pos), punct)) {c  = input.charAt(parser_pos);parser_pos  = 1;if (parser_pos >= input.length) {break;}}return [c, "TK_OPERATOR"];}return [c, "TK_UNKNOWN"];}
indent_character = indent_character || " ";indent_size = indent_size || 4;indent_string = "";while (indent_size--) {indent_string  = indent_character;}input = js_source_text;last_word = "";last_type = "TK_START_EXPR";last_text = "";output = [];do_block_just_closed = false;var_line = false;var_line_tainted = false;whitespace = "\n\r\t ".split("");wordchar = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_$".split("");punct = "  - * / % &    -- =  = -= *= /= %= == === != !== > < >= <= >> << >>> >>>= >>= <<= && &= | || ! !! , : ? ^ ^= |=".split(" ");line_starters = "continue,try,throw,return,var,if,switch,case,default,for,while,break,function".split(",");current_mode = "BLOCK";modes = [current_mode];indent_level = indent_level || 0;parser_pos = 0;in_case = false;while (true) {var t = get_next_token(parser_pos);token_text = t[0];token_type = t[1];if (token_type === "TK_EOF") {break;}switch (token_type) {case "TK_START_EXPR":var_line = false;set_mode("EXPRESSION");if (last_type === "TK_END_EXPR" || last_type === "TK_START_EXPR") {} else if (last_type !== "TK_WORD" && last_type !== "TK_OPERATOR") {print_space();} else if (in_array(last_word, line_starters) && last_word !== "function") {print_space();}print_token();break;case "TK_END_EXPR":print_token();restore_mode();break;case "TK_START_BLOCK":if (last_word === "do") {set_mode("DO_BLOCK");} else {set_mode("BLOCK");}if (last_type !== "TK_OPERATOR" && last_type !== "TK_START_EXPR") {if (last_type === "TK_START_BLOCK") {print_newline();} else {print_space();}}print_token();indent();break;case "TK_END_BLOCK":if (last_type === "TK_START_BLOCK") {trim_output();unindent();} else {unindent();print_newline();}print_token();restore_mode();break;case "TK_WORD":if (do_block_just_closed) {print_space();print_token();print_space();break;}if (token_text === "case" || token_text === "default") {if (last_text === ":") {remove_indent();} else {unindent();print_newline();indent();}print_token();in_case = true;break;}prefix = "NONE";if (last_type === "TK_END_BLOCK") {if (!in_array(token_text.toLowerCase(), ["else", "catch", "finally"])) {prefix = "NEWLINE";} else {prefix = "SPACE";print_space();}} else if (last_type === "TK_END_COMMAND" && (current_mode === "BLOCK" || current_mode === "DO_BLOCK")) {prefix = "NEWLINE";} else if (last_type === "TK_END_COMMAND" && current_mode === "EXPRESSION") {prefix = "SPACE";} else if (last_type === "TK_WORD") {prefix = "SPACE";} else if (last_type === "TK_START_BLOCK") {prefix = "NEWLINE";} else if (last_type === "TK_END_EXPR") {print_space();prefix = "NEWLINE";}if (last_type !== "TK_END_BLOCK" && in_array(token_text.toLowerCase(), ["else", "catch", "finally"])) {print_newline();} else if (in_array(token_text, line_starters) || prefix === "NEWLINE") {if (last_text === "else") {print_space();} else if ((last_type === "TK_START_EXPR" || last_text === "=") && token_text === "function") {} else if (last_type === "TK_WORD" && (last_text === "return" || last_text === "throw")) {print_space();} else if (last_type !== "TK_END_EXPR") {if ((last_type !== "TK_START_EXPR" || token_text !== "var") && last_text !== ":") {if (token_text === "if" && last_type === "TK_WORD" && last_word === "else") {print_space();} else {print_newline();}}} else {if (in_array(token_text, line_starters) && last_text !== ")") {print_newline();}}} else if (prefix === "SPACE") {print_space();}print_token();last_word = token_text;if (token_text === "var") {var_line = true;var_line_tainted = false;}break;case "TK_END_COMMAND":print_token();var_line = false;break;case "TK_STRING":if (last_type === "TK_START_BLOCK" || last_type === "TK_END_BLOCK") {print_newline();} else if (last_type === "TK_WORD") {print_space();}print_token();break;case "TK_OPERATOR":var start_delim = true;var end_delim = true;if (var_line && token_text !== ",") {var_line_tainted = true;if (token_text === ":") {var_line = false;}}if (token_text === ":" && in_case) {print_token();print_newline();break;}in_case = false;if (token_text === ",") {if (var_line) {if (var_line_tainted) {print_token();print_newline();var_line_tainted = false;} else {print_token();print_space();}} else if (last_type === "TK_END_BLOCK") {print_token();print_newline();} else {if (current_mode === "BLOCK") {print_token();print_newline();} else {print_token();print_space();}}break;} else if (token_text === "--" || token_text === "  ") {if (last_text === ";") {start_delim = true;end_delim = false;} else {start_delim = false;end_delim = false;}} else if (token_text === "!" && last_type === "TK_START_EXPR") {start_delim = false;end_delim = false;} else if (last_type === "TK_OPERATOR") {start_delim = false;end_delim = false;} else if (last_type === "TK_END_EXPR") {start_delim = true;end_delim = true;} else if (token_text === ".") {start_delim = false;end_delim = false;} else if (token_text === ":") {if (last_text.match(/^\d $/)) {start_delim = true;} else {start_delim = false;}}if (start_delim) {print_space();}print_token();if (end_delim) {print_space();}break;case "TK_BLOCK_COMMENT":print_newline();print_token();print_newline();break;case "TK_COMMENT":print_space();print_token();print_newline();break;case "TK_UNKNOWN":print_token();break;default:;}last_type = token_type;last_text = token_text;}return output.join("");}
x =a.replace(/^\s /, '')
1970/01/01 00:00:00
WbemScripting.SWbemLocator
Win32_OperatingSystem
WindowsDirectory
Password
{00020404-0000-0000-C000-000000000046}
F%*.*f
CNotSupportedException
commctrl_DragListMsg
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
COMCTL32.DLL
CCmdTarget
__MSVCRT_HEAP_SELECT
RASAPI32.dll
iphlpapi.dll
SHLWAPI.dll
MPR.dll
WINMM.dll
WS2_32.dll
VERSION.dll
WinExec
KERNEL32.dll
GetKeyState
GetViewportOrgEx
WINSPOOL.DRV
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
ADVAPI32.dll
SHELL32.dll
OLEAUT32.dll
WSOCK32.dll
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
WININET.dll
GetCPInfo
CreateDialogIndirectParamA
UnhookWindowsHookEx
SetWindowsHookExA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetViewportExtEx
comdlg32.dll
.PAVCException@@
Shell32.dll
Mpr.dll
Advapi32.dll
User32.dll
Gdi32.dll
Kernel32.dll
(&07-034/)7 '
?? / %d]
%d / %d]
.PAVCFileException@@
: %d]
(*.*)|*.*||
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|BMP
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
\\.\Scsi0:
\\.\PhysicalDrive0
%s:%d
windows
.PAVCNotSupportedException@@
out.prn
(*.prn)|*.prn|
%d.%d
%d/%d
%d / %d
Bogus message code %d
(%d-%d):
%ld%c
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP/1.0
%s <%s>
Reply-To: %s
From: %s
To: %s
Subject: %s
Date: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
HELO %s
SMTP
AUTH LOGIN
LOGIN
AUTH=LOGIN
EHLO %s
Content-Type: application/octet-stream; name=%s
Content-Disposition: attachment; filename=%s
MAIL FROM:<%s>
RCPT TO:<%s>
1.1.3
;3 #>6.&
'2, / 0&7!4-)1#
www.dywt.com.cn
%s\%s.lnk
Software\Microsoft\Windows\CurrentVersion\Run
.PAVCObject@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.?AVCNotSupportedException@@
.PAVCResourceException@@
.PAVCUserException@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCTestCmdUI@@
.PAVCArchiveException@@
zcÁ
c:\%original file name%.exe
#include "l.chs\afxres.rc" // Standard components
1, 0, 6, 6
(*.*)
1.0.0.0
(http://www.eyuyan.com)

%original file name%.exe_588_rwx_10001000_00039000:

L$(h%f
SSh0j
msctls_hotkey32
TVCLHotKey
THotKey
\skinh.she
}uo,x6l5k%x-l h
9p%s m)t4`#b
e"m?c&y1`Ð<
SetViewportOrgEx
SetViewportExtEx
SetWindowsHookExA
UnhookWindowsHookEx
EnumThreadWindows
EnumChildWindows
`c%US.4/
!#$<#$#=
.text
`.rdata
@.data
.rsrc
@.UPX0
`.UPX1
`.reloc


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
  2. Delete the original Trojan file.
  3. Delete or disinfect the following files created/modified by the Trojan:

    %Documents and Settings%\%current user%\Cookies\index.dat (66516 bytes)
    C:\SkinH_EL.dll (88 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@iwofeng[1].txt (4578 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@iwofeng[2].txt (4444 bytes)

  4. Delete the following value(s) in the autorun key (How to Work with System Registry):

    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "%original file name%.exe" = "c:\%original file name%.exe"

  5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  6. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet

x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now