Winnowing Double Structure for Wildcard Query in Payload Attribution