Network Analysis

GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-E322EE0C66235D8B40A9334F1FF263B9.html HTTP/1.1 Accept: application/json Host: kakosidobrosam.gq Connection: Keep-Alive

HTTP/1.1 200 OK Date: Sat, 03 Jul 2021 00:39:47 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Thu, 01 Jul 2021 21:01:52 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=rad86xwhFUZ6222a2ASk%2BP9NAtpoBpsb56fTPGMDHtQ1SnQDM8ly0OOv5sjVeu3Rlcmg9FkCnYcTAC6QFIEjT7370UvELgRm7tWePuq88SvaHfzyePdHYZEphuDUIN8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 668c0f08edf7e819-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400

GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-F6E7D76D7517CFB3E9EF1C0C7D4E0D6D.html HTTP/1.1 Accept: application/json Host: kakosidobrosam.gq

HTTP/1.1 200 OK Date: Sat, 03 Jul 2021 00:39:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Thu, 01 Jul 2021 21:01:53 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=wDtJe%2B1DT2q1gGNTxZlznFireLTgu9MYOqg7FweOVNQriN2QEW87eBtUpuW6Ela3loTBNMfDKlZs%2FtASA7S0GQ%2BDBI1dkc0rLQ0vPH68qmSk%2F8eIcZFM9XdG8gg1%2FT4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 668c0f142c64e819-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400

POST /ushb/ HTTP/1.1 Host: www.dawnjarvisltd.com Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.dawnjarvisltd.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.dawnjarvisltd.com/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Location: https://www.dawnjarvisltd.com/ushb/ X-Mc-Dc: suw01 Date: Sat, 03 Jul 2021 00:40:22 GMT Content-Length: 0 Connection: close

GET /ushb/?mHIx40=3SmC3UZByhcbL2mGDdoUlUv2kDP+K/S2WzQTgf/dbZLTYyxdpUCpCwWiKx+wC7XxiANrTe4Z&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.dawnjarvisltd.com Connection: close

HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: https://www.dawnjarvisltd.com/ushb/?mHIx40=3SmC3UZByhcbL2mGDdoUlUv2kDP+K/S2WzQTgf/dbZLTYyxdpUCpCwWiKx+wC7XxiANrTe4Z&_jAPiL=UfgdTxvpJHM X-Mc-Dc: suw01 Date: Sat, 03 Jul 2021 00:40:22 GMT Content-Length: 173 Connection: close

POST /ushb/ HTTP/1.1 Host: www.waaaghstore.com Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.waaaghstore.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.waaaghstore.com/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /ushb/?mHIx40=d2db7vz8b4gdNrrt4qkzq0tG6Pmid53TShP84iPEhYJEnjJIFmT0kwvEdr2qbrsXJSoEJg75&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.waaaghstore.com Connection: close

HTTP/1.1 404 Not Found Date: Sat, 03 Jul 2021 00:40:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-wix-request-id: 1625272828.260194919404427342 Age: 0 Server-Timing: cache;desc=miss, varnish;desc=miss, dc;desc=ae1 X-Seen-By: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVjXEiYoJWU39hleHssJhKMo,m0j2EEknGIVUW/liY8BLLsodEopM6eMV4cIGkytipUgsxHMvs66Scc9GzPdq8oXa,2d58ifebGbosy5xc+FRaliavy1wtpx8EVMTWjZyQ+Tph/V6qLMnNl2GboMLcbnn1V8JfroQhZo7tdk4TdYqquliB5QmpRe2J37zq9nDD6cs=,2UNV7KOq4oGjA5+PKsX47A854LMbfJpsAbFOiDuCtCY=,xXLsLbWEHLk6hl9EcGlmxoqGHKULnVCcsdhwU3F3G5Y=,7qRhWu5NOm1hVs7o3HvocDUNk75Un1YC9rZyfRLgOGHZhNbXTUyz+WLZvW6wW4zIQmlm80b3zoLHAQZKNsrCLA== Vary: Accept-Encoding X-Content-Type-Options: nosniff Server: Pepyaka/1.19.0

POST /ushb/ HTTP/1.1 Host: www.shopcavo.com Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.shopcavo.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.shopcavo.com/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /ushb/?mHIx40=QYepAKqqZzG2kR/57317p6KhzVHBF5g+kyT5gGECjnJqX6eG1WlH3e963VsDQqp1ReenidM4&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.shopcavo.com Connection: close

HTTP/1.1 403 Forbidden Date: Sat, 03 Jul 2021 00:40:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Sorting-Hat-PodId: 174 X-Sorting-Hat-ShopId: 45803438244 X-Dc: gcp-us-central1 X-Request-ID: 9bb41256-c7cb-4e45-8853-1a8929aea196 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block X-Download-Options: noopen CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 668c102ace9eeb25-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400

POST /ushb/ HTTP/1.1 Host: www.jjayphoto.com Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.jjayphoto.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.jjayphoto.com/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /ushb/?mHIx40=l2QH2d7PUWvRkU9SKQdvN0s95WcJxjd9CPijL6arS0ynTjqyQUYKcLuVD3sUO6nj8FIa5lUc&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.jjayphoto.com Connection: close

HTTP/1.1 200 OK Server: nginx Date: Sat, 03 Jul 2021 00:40:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding

POST /ushb/ HTTP/1.1 Host: www.poetasamigosypensadores.com Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.poetasamigosypensadores.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.poetasamigosypensadores.com/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /ushb/?mHIx40=fbMAEC5I5bGZsvMeVZfdSh5kpbdGGNxOXI23Y+fwKREdh+1jMwB4L2byPtlzBsiu6rKFsHuZ&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.poetasamigosypensadores.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Sat, 03 Jul 2021 00:40:50 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 356 Connection: close Location: https://www.poetasamigosypensadores.com/ushb/?mHIx40=fbMAEC5I5bGZsvMeVZfdSh5kpbdGGNxOXI23Y+fwKREdh+1jMwB4L2byPtlzBsiu6rKFsHuZ&_jAPiL=UfgdTxvpJHM Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP:

POST /ushb/ HTTP/1.1 Host: www.deliciousnukes.com Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.deliciousnukes.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.deliciousnukes.com/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Sat, 03 Jul 2021 00:40:55 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_dTmqkw3pkau+68krQkj4JgUjFhvVwe3XuaIhfL/2983MybVy7hkdV+RDdBGGVL4fJJX6C8Pkouy9vCMZBUW1vg Via: 1.1 google Connection: close

GET /ushb/?mHIx40=CoY64qMwiO6SnAqEo6cwd7vVtOzq42WOKh1biPKYD71bz+rRFAinell2lJMFOMTK0ellYB+l&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.deliciousnukes.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Sat, 03 Jul 2021 00:40:55 GMT Content-Type: text/html Content-Length: 275 ETag: "60dcd035-113" Via: 1.1 google Connection: close

POST /ushb/ HTTP/1.1 Host: www.tigersonindonesia.com Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.tigersonindonesia.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.tigersonindonesia.com/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Connection: close content-type: text/html content-length: 707 date: Sat, 03 Jul 2021 00:41:00 GMT server: LiteSpeed location: https://www.tigersonindonesia.com/ushb/

GET /ushb/?mHIx40=LS6MOTI15xEst6X5E3hLeUbVHph5If8WCZS1PbHDLcXlz/LjLfM6q15glOfELeIimIqtDGOZ&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.tigersonindonesia.com Connection: close

HTTP/1.1 301 Moved Permanently Connection: close content-type: text/html content-length: 707 date: Sat, 03 Jul 2021 00:41:00 GMT server: LiteSpeed location: https://www.tigersonindonesia.com/ushb/?mHIx40=LS6MOTI15xEst6X5E3hLeUbVHph5If8WCZS1PbHDLcXlz/LjLfM6q15glOfELeIimIqtDGOZ&_jAPiL=UfgdTxvpJHM

POST /ushb/ HTTP/1.1 Host: www.ossotasarim.com Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.ossotasarim.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.ossotasarim.com/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /ushb/?mHIx40=Kis9qagQgFI/pgEC90LDhBb2/hkn9V+B079wctmSP192jSk/5pov+dY2uUpHLbHPLnwA/Tk/&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.ossotasarim.com Connection: close

HTTP/1.1 301 Moved Permanently Date: Sat, 03 Jul 2021 00:41:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/7.4.11 x-redirect-by: WordPress location: https://www.ossotasarim.com/ushb/?mHIx40=Kis9qagQgFI/pgEC90LDhBb2/hkn9V+B079wctmSP192jSk/5pov+dY2uUpHLbHPLnwA/Tk/&_jAPiL=UfgdTxvpJHM content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=oCVgBoSOe68gBsHIujAbgJdy3SBcL3EACHE4txmHOiN1WKoQIdxyiZTbHAbw43DA0UKVLaeU76zlA6XxuOKFGXpX3%2BXv5yh8iO%2Bsa9TPf5dYurzDKeq9EgykKU%2BGaJZMMA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 668c10f7fc98e815-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400

GET /ushb/?mHIx40=TZZwrrhqgDwgA3wgZEkIn+5Y0i33oms/xFRek6mxYnSgwbHptw7FsqII1T+6/LgkP21MZkXY&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.seswebsite.com Connection: close

POST /ushb/ HTTP/1.1 Host: www.wounded-deer.com Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.wounded-deer.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.wounded-deer.com/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /ushb/?mHIx40=JW6wJS/fCyqdc2JhPnJNDDubHmZuYWrni9atbTQ1vgM5IXg85tcAFndz4NRwlP6sL42SfpTd&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.wounded-deer.com Connection: close

HTTP/1.1 403 Forbidden Date: Sat, 03 Jul 2021 00:41:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Sorting-Hat-PodId: 151 X-Sorting-Hat-ShopId: 45517242520 X-Dc: gcp-us-central1 X-Request-ID: e8091da4-c84a-4851-ac66-a2d67d00a765 X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block X-Download-Options: noopen X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 668c11467e60e7e5-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400

POST /ushb/ HTTP/1.1 Host: www.m-midas.com Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.m-midas.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.m-midas.com/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Server: nginx/1.20.1 Date: Sat, 03 Jul 2021 00:41:24 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://www.m-midas.com/ushb/

GET /ushb/?mHIx40=KETTpM1456fImzG2o/HCqgJBte/IHmJz01Qx96IPJzNgkPHHpmXueOKRfDyrAPg68mjcbOiZ&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.m-midas.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx/1.20.1 Date: Sat, 03 Jul 2021 00:41:25 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://www.m-midas.com/ushb/?mHIx40=KETTpM1456fImzG2o/HCqgJBte/IHmJz01Qx96IPJzNgkPHHpmXueOKRfDyrAPg68mjcbOiZ&_jAPiL=UfgdTxvpJHM

POST /ushb/ HTTP/1.1 Host: www.multitraditional.com Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.multitraditional.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.multitraditional.com/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Connection: close X-Powered-By: PHP/7.4.20 Content-Type: text/html; charset=UTF-8 Set-Cookie: PHPSESSID=375375a8cc2bd76b6e23051fa2243530; path=/ Pragma: no-cache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://multitraditional.com/wp-json/>; rel="https://api.w.org/" Transfer-Encoding: chunked Content-Encoding: gzip Vary: Accept-Encoding Date: Sat, 03 Jul 2021 00:41:37 GMT Server: LiteSpeed

GET /ushb/?mHIx40=Oc4WjS4DBu5AvhP85U59EprkqoXzMyfsJMpdZ9aVqZv/kvrlgbGtP2m1bh6Ukc03AoFAKmiH&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.multitraditional.com Connection: close

HTTP/1.1 301 Moved Permanently Connection: close X-Powered-By: PHP/7.4.20 Content-Type: text/html; charset=UTF-8 Set-Cookie: PHPSESSID=be119a1c673d4e5170946663125a8d56; path=/ Pragma: no-cache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://multitraditional.com/ushb/?mHIx40=Oc4WjS4DBu5AvhP85U59EprkqoXzMyfsJMpdZ9aVqZv/kvrlgbGtP2m1bh6Ukc03AoFAKmiH&_jAPiL=UfgdTxvpJHM Content-Length: 0 Date: Sat, 03 Jul 2021 00:41:37 GMT Server: LiteSpeed

POST /ushb/ HTTP/1.1 Host: www.wxsocial.net Connection: close Content-Length: 284 Cache-Control: no-cache Origin: http://www.wxsocial.net User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.wxsocial.net/ushb/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /ushb/?mHIx40=jD+SQ9M5OhBQJ5/3QGxgtYDN3MBJME7yhC8sQwvm8GBIEkJ4Y0691HdGHFaX56NR4IeIxVKV&_jAPiL=UfgdTxvpJHM HTTP/1.1 Host: www.wxsocial.net Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx/1.16.1 Date: Sat, 03 Jul 2021 00:41:42 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://usaweatherforecast.com/wxsocial?mHIx40=jD+SQ9M5OhBQJ5/3QGxgtYDN3MBJME7yhC8sQwvm8GBIEkJ4Y0691HdGHFaX56NR4IeIxVKV&_jAPiL=UfgdTxvpJHM