Network Analysis

POST /imi7/ HTTP/1.1 Host: www.southerngiggle.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.southerngiggle.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.southerngiggle.com/imi7/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Tue, 07 Sep 2021 10:05:13 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_jfa13nu1i2JAPituyazg1vjSxGWo3EHE7qbTZ60LhTPznATfelTnrwtwN/noZd10N1lzwDcYHtNnfrrYPTpsqg Via: 1.1 google Connection: close

GET /imi7/?GzuD=6DPXXUxjNhAUxFF0HJPciD7wCMdQ5Kjpq9HSdggl9T7QEXc1VUDnpVSWHHH5kcZKJv7Ciavm&AlB=O2Mthllp7 HTTP/1.1 Host: www.southerngiggle.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Tue, 07 Sep 2021 10:05:13 GMT Content-Type: text/html Content-Length: 275 ETag: "6132e613-113" Via: 1.1 google Connection: close

POST /imi7/ HTTP/1.1 Host: www.powerlinkme.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.powerlinkme.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.powerlinkme.com/imi7/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /imi7/?GzuD=M//sfA69f+etYomJd9U2YdUVkVopbLoRE9mfqGVotdj8O3ZNk+jc/j3Mry8rPUpRzBLqbT1f&AlB=O2Mthllp7 HTTP/1.1 Host: www.powerlinkme.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 07 Sep 2021 10:05:18 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Request-ID: adc0b714985410af005dfefdd0e7ed72 X-Protected-By: OpenRASP Location: http://www.powerlinkme.com

POST /imi7/ HTTP/1.1 Host: www.agamdesigners.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.agamdesigners.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.agamdesigners.com/imi7/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 400 Bad Request Connection: close

GET /imi7/?GzuD=+Q7WlN4Hp8A5gOzDFXVaDonw6sKaX4xwzxcmYTkSJF2wJC8otdv/8Zp0zZIInzmaXv0UDelR&AlB=O2Mthllp7 HTTP/1.1 Host: www.agamdesigners.com Connection: close

HTTP/1.1 400 Bad Request Connection: close

POST /imi7/ HTTP/1.1 Host: www.sungoldhomeliving.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.sungoldhomeliving.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.sungoldhomeliving.com/imi7/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Tue, 07 Sep 2021 10:05:30 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_YpmKb6R14f7M6N6rloRupjhXR34mvbRX5+nzcpjulsgBWv0ULcQ4GRyWawuwRz8paIC0eu6aKp3wtjQEbZweDg Via: 1.1 google Connection: close

GET /imi7/?GzuD=IZKb4HJqMXyJMqZyZW8ea0lZO79FfsahuXlqQdaEcqwYU031mgchofAtsOPxSTnym90X9JnS&AlB=O2Mthllp7 HTTP/1.1 Host: www.sungoldhomeliving.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Tue, 07 Sep 2021 10:05:30 GMT Content-Type: text/html Content-Length: 275 ETag: "6132e613-113" Via: 1.1 google Connection: close

POST /imi7/ HTTP/1.1 Host: www.abc-staff.com Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.abc-staff.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.abc-staff.com/imi7/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 302 Found Server: nginx Date: Tue, 07 Sep 2021 10:05:54 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: https://abc-staff.com?password-protected=login&redirect_to=http%3A%2F%2Fwww.abc-staff.com%2Fimi7%2F

GET /imi7/?GzuD=3LZm1iRscnuMBa7eXiRmSKBb+/H8umyVbYMems3WtreaiyBf/kGruuLJ8kceVNcEixw/yb8u&AlB=O2Mthllp7 HTTP/1.1 Host: www.abc-staff.com Connection: close

HTTP/1.1 302 Found Server: nginx Date: Tue, 07 Sep 2021 10:05:54 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: https://abc-staff.com?password-protected=login&redirect_to=http%3A%2F%2Fwww.abc-staff.com%2Fimi7%2F%3FGzuD%3D3LZm1iRscnuMBa7eXiRmSKBb%2B%2FH8umyVbYMems3WtreaiyBf%2FkGruuLJ8kceVNcEixw%2Fyb8u%26AlB%3DO2Mthllp7

POST /imi7/ HTTP/1.1 Host: www.gtof.net Connection: close Content-Length: 282 Cache-Control: no-cache Origin: http://www.gtof.net User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.gtof.net/imi7/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /imi7/?GzuD=+j1/LGSTzSFy2WiPqgX06qTWSgEnm/IsRi2ZZUw9cN5z+r+J9ApLQHqEeUtXBDfftexbEh7P&AlB=O2Mthllp7 HTTP/1.1 Host: www.gtof.net Connection: close

HTTP/1.1 200 OK Date: Tue, 07 Sep 2021 10:06:05 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close