Network Analysis

POST /b2c0/ HTTP/1.1 Host: www.ideemimarlikinsaat.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.ideemimarlikinsaat.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.ideemimarlikinsaat.com/b2c0/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Cache-Control: public, max-age=691200 Content-Type: text/html; charset=UTF-8 Location: https://www.ideemimarlikinsaat.com/b2c0/ Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS Access-Control-Allow-Headers: Content-Type Date: Fri, 24 Sep 2021 00:17:37 GMT Connection: close Content-Length: 163

GET /b2c0/?5j=BhwIz8la4HUVi1nMBiVIC5A9YxwCbjsxx995Kt+xQMqbSybskl546EwbcvTy7pfoVmGr2lPQ&vTd8K=LHQx HTTP/1.1 Host: www.ideemimarlikinsaat.com Connection: close

HTTP/1.1 301 Moved Permanently Cache-Control: public, max-age=691200 Content-Type: text/html; charset=UTF-8 Location: https://www.ideemimarlikinsaat.com/b2c0/?5j=BhwIz8la4HUVi1nMBiVIC5A9YxwCbjsxx995Kt+xQMqbSybskl546EwbcvTy7pfoVmGr2lPQ&vTd8K=LHQx Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS Access-Control-Allow-Headers: Content-Type Date: Fri, 24 Sep 2021 00:17:37 GMT Connection: close Content-Length: 254

POST /b2c0/ HTTP/1.1 Host: www.dxxlewis.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.dxxlewis.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.dxxlewis.com/b2c0/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 302 Found Date: Fri, 24 Sep 2021 00:17:32 GMT Server: Apache/2.2.15 (CentOS) Location: https://apps.rackspace.com/b2c0/ Content-Length: 298 Connection: close Content-Type: text/html; charset=iso-8859-1

GET /b2c0/?5j=9ahEnHZeeTorCCf1BxWsn/rXQiL42ezX5ROQBOh91FMP3dxhyP3zcRxjW2sluygknGFgWtoi&vTd8K=LHQx HTTP/1.1 Host: www.dxxlewis.com Connection: close

HTTP/1.1 302 Found Date: Fri, 24 Sep 2021 00:17:33 GMT Server: Apache/2.2.15 (CentOS) Location: https://apps.rackspace.com/b2c0/?5j=9ahEnHZeeTorCCf1BxWsn/rXQiL42ezX5ROQBOh91FMP3dxhyP3zcRxjW2sluygknGFgWtoi&vTd8K=LHQx Content-Length: 389 Connection: close Content-Type: text/html; charset=iso-8859-1

POST /b2c0/ HTTP/1.1 Host: www.6233v.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.6233v.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.6233v.com/b2c0/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /b2c0/?5j=TXWnycs9/xQM88J50NGMQUHmzvUS8Ow5beoaBntAR1L12gyUTl4Vs8xkkPbSltJIhMz7f2PR&vTd8K=LHQx HTTP/1.1 Host: www.6233v.com Connection: close

HTTP/1.1 200 OK Date: Fri, 24 Sep 2021 00:17:59 GMT Content-Type: text/html Content-Length: 2030 Connection: close Last-Modified: Mon, 20 Sep 2021 08:41:04 GMT Vary: Accept-Encoding ETag: "61484920-7ee" X-Frame-Options: ALLOW-FROM https://www.6jaa8.com/home/index Accept-Ranges: bytes Server: Tengine X-Request-ID: 280

POST /b2c0/ HTTP/1.1 Host: www.roleconstructora.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.roleconstructora.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.roleconstructora.com/b2c0/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Fri, 24 Sep 2021 00:18:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 15 May 2019 19:06:05 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Content-Type: text/html

GET /b2c0/?5j=1K0N61gHDa1dphA2mScjseGlMpXBLPWPRyroe9GKqjCieTRKzq19FpKJorkSVL2IbFhLWsH/&vTd8K=LHQx HTTP/1.1 Host: www.roleconstructora.com Connection: close

HTTP/1.1 404 Not Found Date: Fri, 24 Sep 2021 00:18:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 15 May 2019 19:06:05 GMT Accept-Ranges: bytes Content-Length: 11816 Vary: Accept-Encoding Content-Type: text/html

POST /b2c0/ HTTP/1.1 Host: www.newstodayupdate.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.newstodayupdate.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.newstodayupdate.com/b2c0/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Method Not Allowed Server: openresty Date: Fri, 24 Sep 2021 00:18:15 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_YkzY6vmKXsT8DOO7/kkqf3SIxmFBgNuxZgDjjwPT5t7FEP7mXYr37+C2ozSkk1BGuEg03wIewYQ8EVZ5P6AFPw Via: 1.1 google Connection: close

GET /b2c0/?5j=ngE3zTESEmF1TlzaI1JtRqVv6LVi69c0ageAEF+ggQEJgbQkBMu6yGJsOdi7lkxHgRVmVRi9&vTd8K=LHQx HTTP/1.1 Host: www.newstodayupdate.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Fri, 24 Sep 2021 00:18:15 GMT Content-Type: text/html Content-Length: 275 ETag: "614a6c08-113" Via: 1.1 google Connection: close

POST /b2c0/ HTTP/1.1 Host: www.playstarexch.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.playstarexch.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.playstarexch.com/b2c0/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Fri, 24 Sep 2021 00:18:20 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_V77ywcTF9UEs455pLEmD2O2viGg4UXRZnWGRiTSEulRWwfZD0UaShjwHlAVeqjDAXNaVpTBsidomA48oPjcq1Q Via: 1.1 google Connection: close

GET /b2c0/?5j=F+Gco1RrSA+q6KRKzyydjUzXzSLtfZhJDsnZ0YatH9yILxLZnbeI6GZ7F32+m8aTJR9d/lLK&vTd8K=LHQx HTTP/1.1 Host: www.playstarexch.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Fri, 24 Sep 2021 00:18:20 GMT Content-Type: text/html Content-Length: 275 ETag: "614a69d4-113" Via: 1.1 google Connection: close

POST /b2c0/ HTTP/1.1 Host: www.elliotpioneer.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.elliotpioneer.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.elliotpioneer.com/b2c0/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Fri, 24 Sep 2021 00:18:25 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_Wmw25pscANZkQy96RkR/CiW7Um3rHMCxwJV7OD7EYbW9NZfYhaQ5APKo/3NADT5wPTCZHZSMyT0cV/8FzdqDog Via: 1.1 google Connection: close

GET /b2c0/?5j=/Ci6lA1yaE3CUS8uYzq6dZWl1lKVRbc/m6rjse/j6toaEbYIMAGoPQ/GjZ3pODpgFVgK+X0m&vTd8K=LHQx HTTP/1.1 Host: www.elliotpioneer.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Fri, 24 Sep 2021 00:18:25 GMT Content-Type: text/html Content-Length: 275 ETag: "614a6c07-113" Via: 1.1 google Connection: close