Network Analysis

POST /uytf/ HTTP/1.1 Host: www.gamifibase.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.gamifibase.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.gamifibase.com/uytf/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 410 Gone Server: openresty Date: Sun, 19 Sep 2021 02:31:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close

GET /uytf/?Sh=CwRnMgJ6AEXlyF/jKZg7oborm7R79l5xa+5n2ZgG5sEle5VUrafcSZp6yLufT347zDKzSZ43&RX=dnHxWbyHWxZpYNu HTTP/1.1 Host: www.gamifibase.com Connection: close

HTTP/1.1 410 Gone Server: openresty Date: Sun, 19 Sep 2021 02:31:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close

POST /uytf/ HTTP/1.1 Host: www.almedmedicalcenter.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.almedmedicalcenter.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.almedmedicalcenter.com/uytf/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Sun, 19 Sep 2021 02:32:18 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_DGmPDjxQoO2oqh28cyicGy57Lk6zQd0Z0j4tyzNbJCoKSf3wdd5SHOx9BINDbv5A7AjfUC+VUc0cjsRSzO2PgQ Via: 1.1 google Connection: close

GET /uytf/?Sh=CMn/+JAVmZa//v9iTT1c0PrpwAoX5pd+daibJAiEcfq4FJjy+aHWUyI7RI9yMXp8vzyf5Olc&RX=dnHxWbyHWxZpYNu HTTP/1.1 Host: www.almedmedicalcenter.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Sun, 19 Sep 2021 02:32:18 GMT Content-Type: text/html Content-Length: 275 ETag: "6138e209-113" Via: 1.1 google Connection: close

POST /uytf/ HTTP/1.1 Host: www.cloudfolderplayer.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.cloudfolderplayer.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.cloudfolderplayer.com/uytf/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 401 Unauthorised Cache-Control: private Content-Type: text/html Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Sun, 19 Sep 2021 02:32:22 GMT Connection: close Content-Length: 1181

GET /uytf/?Sh=pOiemYHyJPTiJwEATjOWHj0DR/m+1Q4isQ4DKhUYkhulB7REoMmaPfKn/+02D0VgN3J7qbt9&RX=dnHxWbyHWxZpYNu HTTP/1.1 Host: www.cloudfolderplayer.com Connection: close

POST /uytf/ HTTP/1.1 Host: www.curiousmug.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.curiousmug.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.curiousmug.com/uytf/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /uytf/?Sh=rlEgocr/cRqued2MJUJEoA68cXJoe1zLbbF6Iz5KQZzDKqnTxzs7uH2Qpbq3qNnV7reCANZ2&RX=dnHxWbyHWxZpYNu HTTP/1.1 Host: www.curiousmug.com Connection: close

HTTP/1.1 200 OK Date: Sun, 19 Sep 2021 02:32:29 GMT Server: Apache Set-Cookie: vsid=928vr3795643494317473; expires=Fri, 18-Sep-2026 02:32:29 GMT; Max-Age=157680000; path=/; domain=www.curiousmug.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_bFAO0KwpObDyLwm/tn4VQswq9dywh2KFRac2WrEStMdVgIb2xDJPwaEi8mbwZQoAmgbC18s1vdXX1mSdCGhIWQ== Content-Length: 2567 Keep-Alive: timeout=5, max=40 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

POST /uytf/ HTTP/1.1 Host: www.hobonickelsvillarrubia.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.hobonickelsvillarrubia.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.hobonickelsvillarrubia.com/uytf/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /uytf/?Sh=f9KM9ogs0StpyR3mU2q5KVPo7gvBCgzLcBqFa2uo8M/syO0R7vUL3RfUm8hUG4/+2418GGw4&RX=dnHxWbyHWxZpYNu HTTP/1.1 Host: www.hobonickelsvillarrubia.com Connection: close

POST /uytf/ HTTP/1.1 Host: www.svetarielt.site Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.svetarielt.site User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.svetarielt.site/uytf/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /uytf/?Sh=qsKz56DA7VsNKzdoXhQ4n5PQuPC6Q83tLlNoWlShWBrsoLepiEhOuwsefgWItpGgRvC4yEMA&RX=dnHxWbyHWxZpYNu HTTP/1.1 Host: www.svetarielt.site Connection: close

HTTP/1.1 302 Found Server: nginx Date: Sun, 19 Sep 2021 02:32:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Sun, 19 Sep 2021 02:32:41 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Location: http://svetarielt.site/uytf/?Sh=qsKz56DA7VsNKzdoXhQ4n5PQuPC6Q83tLlNoWlShWBrsoLepiEhOuwsefgWItpGgRvC4yEMA&RX=dnHxWbyHWxZpYNu Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url

POST /uytf/ HTTP/1.1 Host: www.chowding.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.chowding.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.chowding.com/uytf/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /uytf/?Sh=KjPIUqWGSwcpMb1JQuy7+0U5rXawkPVPr7fK8WZb5vSYhxBFfvmkEsL/MgpgoLsWmZ9LBflA&RX=dnHxWbyHWxZpYNu HTTP/1.1 Host: www.chowding.com Connection: close

HTTP/1.1 200 OK Date: Sun, 19 Sep 2021 02:32:47 GMT Server: Apache Cache-Control: no-cache, must-revalidate Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8