Network Analysis

POST /wufn/ HTTP/1.1 Host: www.ashestore.site Connection: close Content-Length: 285 Cache-Control: no-cache Origin: http://www.ashestore.site User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.ashestore.site/wufn/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Server: openresty Date: Thu, 05 Aug 2021 00:52:23 GMT Content-Type: text/html Content-Length: 166 Connection: close Location: https://www.ashestore.site/wufn/

GET /wufn/?9rj01D0=ISgUE+y+HqjXLrBNcsoJQrgsUIy+PQnmT8IaV+VtAkMVvOhkkzR0T7N+DJe4wV9WEmWhQkdE&v4=Ch6LF HTTP/1.1 Host: www.ashestore.site Connection: close

HTTP/1.1 301 Moved Permanently Server: openresty Date: Thu, 05 Aug 2021 00:52:23 GMT Content-Type: text/html Content-Length: 166 Connection: close Location: https://www.ashestore.site/wufn/?9rj01D0=ISgUE+y+HqjXLrBNcsoJQrgsUIy+PQnmT8IaV+VtAkMVvOhkkzR0T7N+DJe4wV9WEmWhQkdE&v4=Ch6LF

POST /wufn/ HTTP/1.1 Host: www.thetew.com Connection: close Content-Length: 285 Cache-Control: no-cache Origin: http://www.thetew.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.thetew.com/wufn/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Date: Thu, 05 Aug 2021 00:52:29 GMT Server: Apache Location: https://www.thetew.com/wufn/ Cache-Control: max-age=300 Expires: Thu, 05 Aug 2021 00:57:29 GMT Content-Length: 236 Connection: close Content-Type: text/html; charset=iso-8859-1

GET /wufn/?9rj01D0=krP6P15MZQO22/e1Z0jungPG+tUyhBT5786LeGCZDahp25nY4EPnlmCvSbt3zmNAYEf0+pED&v4=Ch6LF HTTP/1.1 Host: www.thetew.com Connection: close

HTTP/1.1 301 Moved Permanently Date: Thu, 05 Aug 2021 00:52:29 GMT Server: nginx/1.19.10 Content-Type: text/html; charset=iso-8859-1 Content-Length: 330 Location: https://www.thetew.com/wufn/?9rj01D0=krP6P15MZQO22/e1Z0jungPG+tUyhBT5786LeGCZDahp25nY4EPnlmCvSbt3zmNAYEf0+pED&v4=Ch6LF Cache-Control: max-age=300 Expires: Thu, 05 Aug 2021 00:57:29 GMT X-Server-Cache: true X-Proxy-Cache: MISS host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==

POST /wufn/ HTTP/1.1 Host: www.gaigoilaocai.com Connection: close Content-Length: 285 Cache-Control: no-cache Origin: http://www.gaigoilaocai.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.gaigoilaocai.com/wufn/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /wufn/?9rj01D0=+cvcaH9t4IGOvfSH2s/pGQCzCoMlKLNX9S4pg+CdqO+ehvTRSw4m6C0WiIEOYf+cYXNRRXby&v4=Ch6LF HTTP/1.1 Host: www.gaigoilaocai.com Connection: close

HTTP/1.1 301 Moved Permanently Date: Thu, 05 Aug 2021 00:52:34 GMT Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 Expires: Thu, 05 Aug 2021 01:52:34 GMT Location: https://www.gaigoilaocai.com/wufn/?9rj01D0=+cvcaH9t4IGOvfSH2s/pGQCzCoMlKLNX9S4pg+CdqO+ehvTRSw4m6C0WiIEOYf+cYXNRRXby&v4=Ch6LF Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=upDC6cwE%2BHXr22I8lns4WgDDOPUYZffkftfbseOYI3ArTWjW8HsW9nDbJ%2FWuIsbtt1EsS19morhXi2TrDWteMYgmOYBuD46tberhjzutVRmN8QiowOliayXCriCezhlJcTpcTODPCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 679c0b2508270550-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400

POST /wufn/ HTTP/1.1 Host: www.rsautoluxe.com Connection: close Content-Length: 285 Cache-Control: no-cache Origin: http://www.rsautoluxe.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.rsautoluxe.com/wufn/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 302 Moved Temporarily Date: Thu, 05 Aug 2021 00:52:40 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=15srn6jjp3d0rmctploo8bjhl6; path=/ Upgrade: h2 Connection: Upgrade, close Location: / Content-Length: 0 Content-Type: text/html; charset=gbk

GET /wufn/?9rj01D0=w5EnrSKap8oRy2zPlnddF8gTSk3mhpsg6+K+ZUM/zOnILWZ553OzJd1vgJ8iXK568zhVN9hj&v4=Ch6LF HTTP/1.1 Host: www.rsautoluxe.com Connection: close

HTTP/1.1 302 Moved Temporarily Date: Thu, 05 Aug 2021 00:52:40 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=mfno5chnp4nc33hfh1rriuk275; path=/ Upgrade: h2 Connection: Upgrade, close Location: / Content-Length: 0 Content-Type: text/html; charset=gbk

POST /wufn/ HTTP/1.1 Host: www.goteclift.com Connection: close Content-Length: 285 Cache-Control: no-cache Origin: http://www.goteclift.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.goteclift.com/wufn/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /wufn/?9rj01D0=em0DFdLl6esmbY8UPc/uZDIcKySfcb/lSoae1pTrnNJVgQ0OOt09p+wnf9M0i6X3i3/It/+2&v4=Ch6LF HTTP/1.1 Host: www.goteclift.com Connection: close

HTTP/1.1 302 Found Date: Thu, 05 Aug 2021 00:52:47 GMT Server: Apache Location: http://www.goteclift.com/cgi-sys/suspendedpage.cgi?9rj01D0=em0DFdLl6esmbY8UPc/uZDIcKySfcb/lSoae1pTrnNJVgQ0OOt09p+wnf9M0i6X3i3/It/+2&v4=Ch6LF Content-Length: 328 Connection: close Content-Type: text/html; charset=iso-8859-1

POST /wufn/ HTTP/1.1 Host: www.brasilupshop.com Connection: close Content-Length: 285 Cache-Control: no-cache Origin: http://www.brasilupshop.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.brasilupshop.com/wufn/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Thu, 05 Aug 2021 00:52:53 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_WfSQMHFuzvRu7K6StPgdwosCfaxk14Iphp0KAHlwoSBa2hc7yHaCWLoSjOT9dA044E8lTvEz/aMkHZwEAjcS8g Via: 1.1 google Connection: close

GET /wufn/?9rj01D0=59brRu9dLS77nFy0s50o1uJFUTMvI+fKw5ePYjcZBjdZ1DjOWYIxIDuCUckQyVdYQE+vfh4M&v4=Ch6LF HTTP/1.1 Host: www.brasilupshop.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Thu, 05 Aug 2021 00:52:53 GMT Content-Type: text/html Content-Length: 275 ETag: "61064ea2-113" Via: 1.1 google Connection: close

POST /wufn/ HTTP/1.1 Host: www.pon.xyz Connection: close Content-Length: 285 Cache-Control: no-cache Origin: http://www.pon.xyz User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.pon.xyz/wufn/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /wufn/?9rj01D0=TjHmMFEWoC7f3AvZD4fy73K0u4EyZw5fKqkeqDjs9aj0G9oQA4BDCe56sbMIcecYmi82gg8d&v4=Ch6LF HTTP/1.1 Host: www.pon.xyz Connection: close

HTTP/1.1 200 OK Server: openresty Date: Thu, 05 Aug 2021 00:53:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_sgBLtfsqFBmnTB5oMDi0AIRdf2Sq/FHWSfU4FDCdUmKQ51U1ogKCpPE5hi+m2OZ5+jPvJzUGgmzyCWFKmVpm9g==

POST /wufn/ HTTP/1.1 Host: www.kingdomvets.com Connection: close Content-Length: 285 Cache-Control: no-cache Origin: http://www.kingdomvets.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.kingdomvets.com/wufn/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Thu, 05 Aug 2021 00:53:15 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_RaJnEI3xYp5YeYvE5H76FsNZG6ChmiAoWcGZepz6fgrvhegjGh9x0ra/HlEiUyl32zehrf9QpQUYjkxZMco/WQ Via: 1.1 google Connection: close

GET /wufn/?9rj01D0=o6NP/38pvTDlv+JV19NTB11bpLiuGI0dHMB5Vx/enan56b3Zy4geNSKYW/CwegZqLuXFQkxp&v4=Ch6LF HTTP/1.1 Host: www.kingdomvets.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Thu, 05 Aug 2021 00:53:15 GMT Content-Type: text/html Content-Length: 275 ETag: "610650f1-113" Via: 1.1 google Connection: close