Network Analysis

POST /nnmd/ HTTP/1.1 Host: www.scott-re.online Connection: close Content-Length: 213 Cache-Control: no-cache Origin: http://www.scott-re.online User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.scott-re.online/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Tue, 13 Apr 2021 00:15:30 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_bVy1WFOLp+GJwv8D9OHvymPAPIU8AQtm03KFzf0LVoLEPavuNYFv7SB5PaP/JV0q7o24vwjKhbf7gncFwmoiQQ Via: 1.1 google Connection: close

GET /nnmd/?9rq=YoDjfv9GFAPxmC/m/YrXEnPJINgN/ZGcUJt6czxWwkNRV1BAm2Kb0tXyCx+SX/c+MMPjJ8db&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.scott-re.online Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Tue, 13 Apr 2021 00:15:30 GMT Content-Type: text/html Content-Length: 275 ETag: "60740d7f-113" Via: 1.1 google Connection: close

POST /nnmd/ HTTP/1.1 Host: www.ufa2345.com Connection: close Content-Length: 213 Cache-Control: no-cache Origin: http://www.ufa2345.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.ufa2345.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /nnmd/?9rq=yfw2M87HGp1q9j5w2tOxvPCGM4BQpJS5ADPSvETU0AeQ1mwLyedYVruDCTm82rBipcZzI418&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.ufa2345.com Connection: close

HTTP/1.1 301 Moved Permanently Date: Tue, 13 Apr 2021 00:15:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: __cfduid=d20ab80ab8c8e7afdfab672f80533d57e1618272950; expires=Thu, 13-May-21 00:15:50 GMT; path=/; domain=.ufa2345.com; HttpOnly; SameSite=Lax X-Powered-By: PHP/7.4.14 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: https://www.ufa2345.com/nnmd/?9rq=yfw2M87HGp1q9j5w2tOxvPCGM4BQpJS5ADPSvETU0AeQ1mwLyedYVruDCTm82rBipcZzI418&OtxhT2=wZR8DbLPAxEHbr Vary: User-Agent CF-Cache-Status: DYNAMIC cf-request-id: 096a2eb2090000e7c51b2df000000001 Report-To: {"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=zlRkXSQoKrd9XxNehA%2FhsoTJafKJI4C57uDmbzyx8VG%2FFL1O%2F%2BLz0UUHq70r1PL31Pm5Uvykb%2Bx0JLJS4GqtS0WfsmGuR7c7308dcM4OqrY%3D"}],"max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 63f0809679dfe7c5-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400

POST /nnmd/ HTTP/1.1 Host: www.suns-brothers.com Connection: close Content-Length: 213 Cache-Control: no-cache Origin: http://www.suns-brothers.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.suns-brothers.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 13 Apr 2021 00:15:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/7.4.15 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://suns-brothers.com/wp-json/>; rel="https://api.w.org/"

GET /nnmd/?9rq=63wAYXMAzZTyFdbPgeduTMtZQGbVrU0zhbRFEm9YjPWC1DQzp3NhpDeeRLu3xGp5GtFJL6GJ&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.suns-brothers.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 13 Apr 2021 00:15:57 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/7.4.15 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Location: http://suns-brothers.com/nnmd/?9rq=63wAYXMAzZTyFdbPgeduTMtZQGbVrU0zhbRFEm9YjPWC1DQzp3NhpDeeRLu3xGp5GtFJL6GJ&OtxhT2=wZR8DbLPAxEHbr

POST /nnmd/ HTTP/1.1 Host: www.elticrecruit.com Connection: close Content-Length: 213 Cache-Control: no-cache Origin: http://www.elticrecruit.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.elticrecruit.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 13 Apr 2021 00:16:02 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: script-src 'nonce-Zlv93wLmiHKP/CsgAY5ZKA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AdsLandingUi/cspreport;worker-src 'self' Content-Encoding: gzip Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Connection: close

GET /nnmd/?9rq=kngYRuVfLuuPny+4CliufAMPT2DrkHQGtZ529sxu6AZ+mjDb8TOV5Kb0i+tB46tvYkYEaNVD&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.elticrecruit.com Connection: close

HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 13 Apr 2021 00:16:02 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: script-src 'report-sample' 'nonce-taDOOnu2UbKUAYt+GDvcrA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AdsLandingUi/cspreport;worker-src 'self' Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Accept-Ranges: none Vary: Accept-Encoding Transfer-Encoding: chunked Connection: close

POST /nnmd/ HTTP/1.1 Host: www.gujaratmba.com Connection: close Content-Length: 213 Cache-Control: no-cache Origin: http://www.gujaratmba.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.gujaratmba.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST Date: Tue, 13 Apr 2021 00:16:06 GMT Connection: close Content-Length: 1163

GET /nnmd/?9rq=jbWwWnjt2fcw4sTPwkTTgKQsQCJDA9NuaUgkL4WeQHKWMPBCQlGqgB/Udc+7oCkc2k0at6cZ&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.gujaratmba.com Connection: close

HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST Date: Tue, 13 Apr 2021 00:16:07 GMT Connection: close Content-Length: 1163

POST /nnmd/ HTTP/1.1 Host: www.raison-sociale.com Connection: close Content-Length: 213 Cache-Control: no-cache Origin: http://www.raison-sociale.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.raison-sociale.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Tue, 13 Apr 2021 00:16:14 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 196 Connection: close Server: Apache X-IPLB-Request-ID: AFD08696:C29D_A484EB11:0050_6074E2CE_3171:500B X-IPLB-Instance: 17202

GET /nnmd/?9rq=P1LpRENdnqb1fbOGyNga4nCXTVuCGTreTbOaFjWN+nixYx/3vSvBuhMK5uJ9XJmSyj6SVpMN&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.raison-sociale.com Connection: close

HTTP/1.1 404 Not Found Date: Tue, 13 Apr 2021 00:16:14 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 196 Connection: close Server: Apache X-IPLB-Request-ID: AFD08696:C29E_A484EB11:0050_6074E2CE_96D6:6F90 X-IPLB-Instance: 38223

POST /nnmd/ HTTP/1.1 Host: www.yetbor.com Connection: close Content-Length: 213 Cache-Control: no-cache Origin: http://www.yetbor.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.yetbor.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 13 Apr 2021 00:16:19 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.yetbor.com/nnmd/

GET /nnmd/?9rq=yFTKtd1luZIo7wvqEcSXbkRM0Fu9DXTErvPZ/33h4h9ltL5T5vX0h6V8ouFS6Gain5PLz56o&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.yetbor.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 13 Apr 2021 00:16:19 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.yetbor.com/nnmd/?9rq=yFTKtd1luZIo7wvqEcSXbkRM0Fu9DXTErvPZ/33h4h9ltL5T5vX0h6V8ouFS6Gain5PLz56o&OtxhT2=wZR8DbLPAxEHbr

POST /nnmd/ HTTP/1.1 Host: www.valid8.network Connection: close Content-Length: 213 Cache-Control: no-cache Origin: http://www.valid8.network User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.valid8.network/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 400 Bad Request Connection: close

GET /nnmd/?9rq=CGq8FpRO0AiTL86OI7qyWUGcdnK3uFmp3WOqNHKk+zAOrlhHiWtpg/dTztC/+VOwDx9e6LJ8&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.valid8.network Connection: close

HTTP/1.1 400 Bad Request Connection: close

POST /nnmd/ HTTP/1.1 Host: www.topmejoresproductos.com Connection: close Content-Length: 213 Cache-Control: no-cache Origin: http://www.topmejoresproductos.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.topmejoresproductos.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /nnmd/?9rq=5oGfYuXOY9e6Wgzyw65MR7pWmotIxUI2yZPS8hwMrcBGefCHV1tZ9t+5FZg010TA0GKtEOYf&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.topmejoresproductos.com Connection: close

HTTP/1.1 200 OK Date: Tue, 13 Apr 2021 00:16:33 GMT Server: Apache Set-Cookie: vsid=921vr3658185938721063; expires=Sun, 12-Apr-2026 00:16:33 GMT; Max-Age=157680000; path=/; domain=www.topmejoresproductos.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_SL5T+sXAt/qy4Gd30OrFgSR6v02qOLJvUUBxk2HtShFWW5L9ykdQynSIk7nSkxWUjW34M9gSj3S3+1iwXzHr0Q== Keep-Alive: timeout=5, max=125 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

POST /nnmd/ HTTP/1.1 Host: www.krphp.com Connection: close Content-Length: 213 Cache-Control: no-cache Origin: http://www.krphp.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.krphp.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /nnmd/?9rq=PjB4lvTlAKGYAKn+VSQZPpVCBgwlvzjythr7BfvIej7nd7TDf0ugYZ/oqO22EBbm4ji9UIJN&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.krphp.com Connection: close

HTTP/1.1 301 Moved Permanently Server: CFWS/1.18.0 Date: Tue, 13 Apr 2021 00:16:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://krphp.com/nnmd/?9rq=PjB4lvTlAKGYAKn+VSQZPpVCBgwlvzjythr7BfvIej7nd7TDf0ugYZ/oqO22EBbm4ji9UIJN&OtxhT2=wZR8DbLPAxEHbr

GET /nnmd/?9rq=vRs6n4JRqe7Dt1ePX7b+YJv/yKqWGc/3Y/UBZKRypASveBlD9HGJWm4G1cXUL/JYAaDcAVpU&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.likehowto.com Connection: close

POST /nnmd/ HTTP/1.1 Host: www.buyeverythingforbaby.com Connection: close Content-Length: 213 Cache-Control: no-cache Origin: http://www.buyeverythingforbaby.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.buyeverythingforbaby.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Tue, 13 Apr 2021 00:16:57 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_j791BOGjvON3oNZCIg1igotgAXthN8TrHqJvtF+QOXv8WuG0j8tOGZJboanvvRD582oGqDXuizJWK9AE+dEILg Via: 1.1 google Connection: close

GET /nnmd/?9rq=ubi4+Pcpe5Ar+4Jek7aF79/+gi3GiunqWbDqm/5cKY51CC3oh7TAhiurYFYoh5USfo3eOT/h&OtxhT2=wZR8DbLPAxEHbr HTTP/1.1 Host: www.buyeverythingforbaby.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Tue, 13 Apr 2021 00:16:57 GMT Content-Type: text/html Content-Length: 275 ETag: "60736514-113" Via: 1.1 google Connection: close