Network Analysis

POST /aqu2/ HTTP/1.1 Host: www.income-academy.net Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.income-academy.net User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.income-academy.net/aqu2/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /aqu2/?9r4P2=yTaVLqrhN05vYiJqrghKhV1kwkPK3wCJaLMYrf/MNipjQST+eEaDoRfCXS8xMdNgXSn1AdLb&EjU4Sz=gdMTVRIPlB HTTP/1.1 Host: www.income-academy.net Connection: close

HTTP/1.1 301 Moved Permanently Date: Fri, 06 Aug 2021 00:59:13 GMT Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 Expires: Fri, 06 Aug 2021 01:59:13 GMT Location: https://www.income-academy.net/aqu2/?9r4P2=yTaVLqrhN05vYiJqrghKhV1kwkPK3wCJaLMYrf/MNipjQST+eEaDoRfCXS8xMdNgXSn1AdLb&EjU4Sz=gdMTVRIPlB Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FpTpX%2FAKAeRhb4iC0UwUY6hvGu6C4M4yvqX3nVHvga7AqPX9kJ9kleyUy6P7yLln3yNtK6NMR118%2BHUN82l4zo0y44mzTiS4DgRcnKUDFGhvzyyAcO%2FKXX7pudqIrOc7mhnzVybwUfob"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 67a452400fef368c-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400

POST /aqu2/ HTTP/1.1 Host: www.golloctror.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.golloctror.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.golloctror.com/aqu2/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /aqu2/?9r4P2=4uR/nYjgwVtYQYbEgqLfVeOvQ0g/0VggqoBfHm1YELVh/dVGB1YhVcaz8p3nfDlAqMtpxI2v&EjU4Sz=gdMTVRIPlB HTTP/1.1 Host: www.golloctror.com Connection: close

HTTP/1.1 200 OK Server: openresty Date: Fri, 06 Aug 2021 00:59:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_e9+JV5WtBV80ch9XGDmUPPIT2yOTN97DDPe7ZqEgPNb2/O0twh1W4cYFlLrace4ZtsLI99SbJBw+Kk/6G/B2+g==

POST /aqu2/ HTTP/1.1 Host: www.sharperimege.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.sharperimege.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.sharperimege.com/aqu2/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Expires: -1 Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Fri, 06 Aug 2021 00:59:24 GMT Connection: close Content-Length: 1791

GET /aqu2/?9r4P2=kVL+er5siNlB7pe1dLZS/sGAoq3svs4UfEDtCPtiHJKEfyVztMafNvCw4QsKRCCzR1PEWQeU&EjU4Sz=gdMTVRIPlB HTTP/1.1 Host: www.sharperimege.com Connection: close

HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=UTF-8 Expires: -1 Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Fri, 06 Aug 2021 00:59:24 GMT Connection: close Content-Length: 3478

POST /aqu2/ HTTP/1.1 Host: www.barrieratxfence.info Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.barrieratxfence.info User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.barrieratxfence.info/aqu2/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Date: Fri, 06 Aug 2021 00:59:30 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 560 Connection: close Content-Type: text/html; charset=utf-8

GET /aqu2/?9r4P2=lXd4zSUgCC+Gjsky/2vKTrlJaFfVYkpLux/MwnR2z2M4YDrYm4lj055+c6MS0ib3/EWLUfQU&EjU4Sz=gdMTVRIPlB HTTP/1.1 Host: www.barrieratxfence.info Connection: close

HTTP/1.1 200 OK Date: Fri, 06 Aug 2021 00:59:30 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8

POST /aqu2/ HTTP/1.1 Host: www.grandfinishremodeling.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.grandfinishremodeling.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.grandfinishremodeling.com/aqu2/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 403 Forbidden Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 06 Aug 2021 00:59:35 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Encoding: gzip Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Set-Cookie: NID=220=BgYP95nCGAZmKBTHNMFWZNyprt58pLjRuMCPyH9snvTbJciQ3BDCYwu-4FKGVGKpy3G96qR1LV4BYqJ8DZl9ID0oFy_vd0nw_TN-etrxjLCrnsWipn6DkPq80xWg6U16OIFirkUPoaT4ESbG-CHM2AcfiapNBZ7G9G0jAsq93bY; expires=Sat, 05-Feb-2022 00:59:35 GMT; path=/; domain=.google.com; HttpOnly Connection: close

GET /aqu2/?9r4P2=NRZUopoDI9LJwLB83JD0yzozs/oGQMk+mwWEPr2pPkzgK4yBOGRtKPbgK/BnV+66QBsVMhyW&EjU4Sz=gdMTVRIPlB HTTP/1.1 Host: www.grandfinishremodeling.com Connection: close

HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 06 Aug 2021 00:59:35 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'report-sample' 'nonce-VhWJZG5eZ+RK/QOV0znN9w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/GeoMerchantPrestoSiteUi/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: unsafe-none; report-to="GeoMerchantPrestoSiteUi" Report-To: {"group":"GeoMerchantPrestoSiteUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/GeoMerchantPrestoSiteUi/external"}]} Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Set-Cookie: NID=220=Q-xuQzgbWJ3gRgf_Eo3Snr-Z6_HC6BkbnS76CN86KQu9qpkHPc_KPfpoAUZ52A_Be3B67eOjLjFtsMr4FQNklvoA_YFocGPmiCMljbCz9rOuofAH53GZ0ckqh7bKBt4gW1oEx8LqUj3mz7OKEqVAk3WQUQTKwGQHZHHe4CzH_Dg; expires=Sat, 05-Feb-2022 00:59:35 GMT; path=/; domain=.google.com; HttpOnly Accept-Ranges: none Vary: Accept-Encoding Transfer-Encoding: chunked Connection: close

POST /aqu2/ HTTP/1.1 Host: www.mylove4tees.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.mylove4tees.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.mylove4tees.com/aqu2/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /aqu2/?9r4P2=9ws66imtgg3T3b9kOnthfi50Nu6P9IVW/TE+7j+Pbvzlz2d9z3p7URmmP+8NozKSwRBm4C3L&EjU4Sz=gdMTVRIPlB HTTP/1.1 Host: www.mylove4tees.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx/1.16.1 Date: Fri, 06 Aug 2021 00:59:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: http://teespring.com/stores/mylove4tees?9r4P2=9ws66imtgg3T3b9kOnthfi50Nu6P9IVW/TE+7j+Pbvzlz2d9z3p7URmmP+8NozKSwRBm4C3L&EjU4Sz=gdMTVRIPlB