Network Analysis

POST /nnmd/ HTTP/1.1 Host: www.vinegret.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.vinegret.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.vinegret.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /nnmd/?GFQL=vSTcV67Wsym0gjaMHw+BLsLDF404VwtlM2ZL2+kS2oryP3sG0sNRMddYy5XCOzyR+w1r1rN4&Rl=VtX4M HTTP/1.1 Host: www.vinegret.com Connection: close

HTTP/1.1 301 Moved Permanently Date: Tue, 13 Apr 2021 02:31:53 GMT Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 Expires: Tue, 13 Apr 2021 03:31:53 GMT Location: https://www.vinegret.com/nnmd/?GFQL=vSTcV67Wsym0gjaMHw+BLsLDF404VwtlM2ZL2+kS2oryP3sG0sNRMddYy5XCOzyR+w1r1rN4&Rl=VtX4M cf-request-id: 096aab3fd200003649e38d9000000001 Report-To: {"max_age":604800,"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=xCzlJo5CF7%2BKM3C18jRPNBnuBngnFo7oPoyYE3%2BU0N%2BiVlN3gcZxpehUkJjCv%2FTrPsJriIooYe6EDTpIdBag5g%2FRzkeZXC%2FV2vIOrXUB%2Fadx"}],"group":"cf-nel"} NEL: {"max_age":604800,"report_to":"cf-nel"} Server: cloudflare CF-RAY: 63f147dfb9c43649-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400

POST /nnmd/ HTTP/1.1 Host: www.israeldigitalblog.net Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.israeldigitalblog.net User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.israeldigitalblog.net/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Tue, 13 Apr 2021 02:31:59 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_aRQGc0S+Bof2wMG5kfUujr2toHG9wy4jH74yLUY38jEtXXYYL1z/fvYOxS4/YcCsDRP43ja17zX2e/egH46QEg Via: 1.1 google Connection: close

GET /nnmd/?GFQL=RhKwvNZRq71Tr7FYOMJQyYr9uwiqQ6gfx1wpRXHKZy0OdMvbN5VELlZYmhSRX7q9d8bqmLsF&Rl=VtX4M HTTP/1.1 Host: www.israeldigitalblog.net Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Tue, 13 Apr 2021 02:31:59 GMT Content-Type: text/html Content-Length: 275 ETag: "6073541a-113" Via: 1.1 google Connection: close

POST /nnmd/ HTTP/1.1 Host: www.acernoxsas.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.acernoxsas.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.acernoxsas.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /nnmd/?GFQL=RIRhBHcBnpQFpzVEdm9Qn3YrBBK1OZbcUKpQDD4XzYml+x0kk9G8REWbCSESFdmiGdYULLFI&Rl=VtX4M HTTP/1.1 Host: www.acernoxsas.com Connection: close

HTTP/1.1 301 Moved Permanently Date: Tue, 13 Apr 2021 02:32:10 GMT Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 Expires: Tue, 13 Apr 2021 03:32:10 GMT Location: https://www.acernoxsas.com/nnmd/?GFQL=RIRhBHcBnpQFpzVEdm9Qn3YrBBK1OZbcUKpQDD4XzYml+x0kk9G8REWbCSESFdmiGdYULLFI&Rl=VtX4M cf-request-id: 096aab825e0000e7d17a92c000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=1Xnjo71eq2EtTV7ekXoKRI4XIHhgaDfNjv0x6lhoVk4H3NvF%2FyTiueT7vjukYq5lwzCgMLI8NgIb5ANJf%2B0HmQzKIq8YN1QXFOGIv0FMuR5RcHc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 63f1484a2a7ae7d1-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400

POST /nnmd/ HTTP/1.1 Host: www.yetbor.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.yetbor.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.yetbor.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 13 Apr 2021 02:32:15 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.yetbor.com/nnmd/

GET /nnmd/?GFQL=yFTKtd1luZIo7wvqEcSXbkRM0Fu9DXTErvPZ/33h4h9ltL5T5vX0h6V8ouFS6Gain5PLz56o&Rl=VtX4M HTTP/1.1 Host: www.yetbor.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 13 Apr 2021 02:32:15 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.yetbor.com/nnmd/?GFQL=yFTKtd1luZIo7wvqEcSXbkRM0Fu9DXTErvPZ/33h4h9ltL5T5vX0h6V8ouFS6Gain5PLz56o&Rl=VtX4M

POST /nnmd/ HTTP/1.1 Host: www.regalparkllc.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.regalparkllc.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.regalparkllc.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 13 Apr 2021 02:32:21 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.regalparkllc.com/nnmd/ X-ac: 3.kix _bur

GET /nnmd/?GFQL=tTl8v8g2q+7FzdYz1UQNVvYPTgelaUE7gW7tW0qfdn51WjA1prpQnhugYZXHkQH8F1WTaXCY&Rl=VtX4M HTTP/1.1 Host: www.regalparkllc.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 13 Apr 2021 02:32:21 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.regalparkllc.com/nnmd/?GFQL=tTl8v8g2q+7FzdYz1UQNVvYPTgelaUE7gW7tW0qfdn51WjA1prpQnhugYZXHkQH8F1WTaXCY&Rl=VtX4M X-ac: 3.kix _bur

POST /nnmd/ HTTP/1.1 Host: www.scott-re.online Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.scott-re.online User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.scott-re.online/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Tue, 13 Apr 2021 02:32:26 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_bVy1WFOLp+GJwv8D9OHvymPAPIU8AQtm03KFzf0LVoLEPavuNYFv7SB5PaP/JV0q7o24vwjKhbf7gncFwmoiQQ Via: 1.1 google Connection: close

GET /nnmd/?GFQL=YoDjfv9GFAPxmC/m/YrXEnPJINgN/ZGcUJt6czxWwkNRV1BAm2Kb0tXyCx+SX/c+MMPjJ8db&Rl=VtX4M HTTP/1.1 Host: www.scott-re.online Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Tue, 13 Apr 2021 02:32:26 GMT Content-Type: text/html Content-Length: 275 ETag: "60740d7f-113" Via: 1.1 google Connection: close

POST /nnmd/ HTTP/1.1 Host: www.valid8.network Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.valid8.network User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.valid8.network/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 400 Bad Request Connection: close

GET /nnmd/?GFQL=CGq8FpRO0AiTL86OI7qyWUGcdnK3uFmp3WOqNHKk+zAOrlhHiWtpg/dTztC/+VOwDx9e6LJ8&Rl=VtX4M HTTP/1.1 Host: www.valid8.network Connection: close

HTTP/1.1 400 Bad Request Connection: close

POST /nnmd/ HTTP/1.1 Host: www.samanthataylordesigns.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.samanthataylordesigns.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.samanthataylordesigns.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 502 Bad Gateway Connection: close Date: Tue, 13 Apr 2021 02:32:37 GMT Content-Length: 0

GET /nnmd/?GFQL=sVCsP3nYsNXlW4I2EqS3kB52HqjY7ZxXgFnkWYmWMO+p6LFBhhCa6Vg5Ah+KszLMV8i2Kccl&Rl=VtX4M HTTP/1.1 Host: www.samanthataylordesigns.com Connection: close

HTTP/1.1 400 Bad Request Cache-Control: no-cache, must-revalidate Content-Length: 77564 Content-Type: text/html; charset=UTF-8 Date: Tue, 13 Apr 2021 02:32:37 UTC Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Server: Squarespace X-Contextid: Urrh3ogY/cOgA1aNS Connection: close

POST /nnmd/ HTTP/1.1 Host: www.nevertraveled.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.nevertraveled.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.nevertraveled.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Date: Tue, 13 Apr 2021 2:32:41 GMT Connection: close Content-Length: 485 Content-Encoding: gzip X-Frame-Options: SAMEORIGIN Cache-Control: private, no-cache, no-store, max-age=0 Expires: Mon, 01 Jan 1990 0:00:00 GMT

GET /nnmd/?GFQL=SYHpgW1+yTc6qOKF4v10dIdNZgCXdFrWPz9etZYqQDofpKwnSaEEWXbh+jQacXfWTKEwdu6J&Rl=VtX4M HTTP/1.1 Host: www.nevertraveled.com Connection: close

HTTP/1.1 200 OK Date: Tue, 13 Apr 2021 2:32:41 GMT Connection: close Content-Length: 829 X-Frame-Options: SAMEORIGIN Cache-Control: private, no-cache, no-store, max-age=0 Expires: Mon, 01 Jan 1990 0:00:00 GMT

POST /nnmd/ HTTP/1.1 Host: www.verochfotografa.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.verochfotografa.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.verochfotografa.com/nnmd/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Tue, 13 Apr 2021 02:33:09 GMT Connection: close

GET /nnmd/?GFQL=5OXGp+Ye6mLmJS8fiP7moOjeBKd2VER7UUKnbPVzr25Ffc+7XnMrSBGyQLkDJ090wwdXjBMo&Rl=VtX4M HTTP/1.1 Host: www.verochfotografa.com Connection: close

HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Tue, 13 Apr 2021 02:33:10 GMT Connection: close