Network Analysis

POST /wogm/ HTTP/1.1 Host: www.sinagropuree.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.sinagropuree.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.sinagropuree.com/wogm/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /wogm/?jDKP8=nwMgSNojV35EyJ9hphk06is8J3BDs4E1a66hewTnIuP7M3cS+zLeGjThioYS1Y8r0L7sYBrx&8p3=IbtHbD HTTP/1.1 Host: www.sinagropuree.com Connection: close

POST /wogm/ HTTP/1.1 Host: www.workospbit.space Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.workospbit.space User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.workospbit.space/wogm/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: ddos-guard Connection: close Set-Cookie: __ddg1=Nkz7haE7mlEeqpFZi9WJ; Domain=.workospbit.space; HttpOnly; Path=/; Expires=Sat, 15-Oct-2022 00:38:30 GMT Date: Fri, 15 Oct 2021 00:38:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 355 Last-Modified: Mon, 04 Jun 2018 16:21:43 GMT ETag: "163-56dd35446b3c0" Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN

GET /wogm/?jDKP8=tAL4F5NLH4VmvVC1AGtDqpAVgb8tD+i+qrKuhbccqAXskllAguOxxUH0apD5Y6EEQuKJRsNk&8p3=IbtHbD HTTP/1.1 Host: www.workospbit.space Connection: close

HTTP/1.1 404 Not Found Server: ddos-guard Connection: close Set-Cookie: __ddg1=NKxW7Y1nGvbigX3wplg5; Domain=.workospbit.space; HttpOnly; Path=/; Expires=Sat, 15-Oct-2022 00:38:30 GMT Date: Fri, 15 Oct 2021 00:38:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 355 Last-Modified: Mon, 04 Jun 2018 16:21:43 GMT ETag: "163-56dd35446b3c0" Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN

POST /wogm/ HTTP/1.1 Host: www.eygtogel021.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.eygtogel021.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.eygtogel021.com/wogm/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /wogm/?jDKP8=OLfsUZOZM89huaQ2Rhq4Iq6vg35ZMytgB5JTmZSEOAiHvxtp6AgRBdz2Ob59YcBboWHm0lh9&8p3=IbtHbD HTTP/1.1 Host: www.eygtogel021.com Connection: close

HTTP/1.1 301 Moved Permanently Date: Fri, 15 Oct 2021 00:38:34 GMT Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 Expires: Fri, 15 Oct 2021 01:38:34 GMT Location: https://www.eygtogel021.com/wogm/?jDKP8=OLfsUZOZM89huaQ2Rhq4Iq6vg35ZMytgB5JTmZSEOAiHvxtp6AgRBdz2Ob59YcBboWHm0lh9&8p3=IbtHbD Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fi6T%2BcAUKcPvNM%2Fvem5XdPbUNXBD7FKGiVizMqnvGMr8wPb%2BIB7ugp0ln343hhhOhB8Hzmv6b4Q%2BQmDigk%2BC0Gr68l4pvO26B1GFiPgAvG4lSsvQPDlx0UusTG8%2FW00x0dO9aULU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 69e4fc3fc891ae91-KIX alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

POST /wogm/ HTTP/1.1 Host: www.insightmyhome.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.insightmyhome.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.insightmyhome.com/wogm/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Date: Fri, 15 Oct 2021 00:38:46 GMT Server: Apache/2.4.6 (CentOS) PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 476 Connection: close Content-Type: text/html; charset=UTF-8

GET /wogm/?jDKP8=85BUmEEX/LdX7Ydf+9I0bWyJhbr74kbGW+J4EcMhGlvjV6F5mj5NWVmgik83SynmBl96r7SB&8p3=IbtHbD HTTP/1.1 Host: www.insightmyhome.com Connection: close

HTTP/1.1 200 OK Date: Fri, 15 Oct 2021 00:38:46 GMT Server: Apache/2.4.6 (CentOS) PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 476 Connection: close Content-Type: text/html; charset=UTF-8

POST /wogm/ HTTP/1.1 Host: www.weeklywars.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.weeklywars.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.weeklywars.com/wogm/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Fri, 15 Oct 2021 00:38:52 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_C5Mn5tIGoiQeU97h9a6jO/Qg4+jb14qcHB47aqPjbjxzf1hsBYsMhsX0gOj2Z39WEvMteuKHC1Nyz1uQ+OnMmw Via: 1.1 google Connection: close

GET /wogm/?jDKP8=4vPo1SJ4QXujYzlw76fQXs7HvlTQbV0+0txMnGRghQaMN633jA6UZgSWswdwEnRAOgPWuZC1&8p3=IbtHbD HTTP/1.1 Host: www.weeklywars.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Fri, 15 Oct 2021 00:38:52 GMT Content-Type: text/html Content-Length: 275 ETag: "615c5dfa-113" Via: 1.1 google Connection: close

POST /wogm/ HTTP/1.1 Host: www.straetah.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.straetah.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.straetah.com/wogm/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /wogm/?jDKP8=VugJ8iGiQbMyEpiZcguIhpak7udmJ3C00wBMtiXi6+Au/rTbCR/obkne6QZn8sjGYaJfXaMw&8p3=IbtHbD HTTP/1.1 Host: www.straetah.com Connection: close

HTTP/1.1 409 Conflict Date: Fri, 15 Oct 2021 00:38:58 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 69e4fcd53f2c00cf-ICN

POST /wogm/ HTTP/1.1 Host: www.yourhomestimate.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.yourhomestimate.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.yourhomestimate.com/wogm/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /wogm/?jDKP8=OiSf9jV3Npz/RZJgbb0bKL9e2athsvXRQV6jCPdiTUSk124+vr4+cLKhD6dZYTypWjoW5Nc5&8p3=IbtHbD HTTP/1.1 Host: www.yourhomestimate.com Connection: close

POST /wogm/ HTTP/1.1 Host: www.pokipass-niigata.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.pokipass-niigata.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.pokipass-niigata.com/wogm/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 15 Oct 2021 00:39:09 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 246 Connection: close Location: https://www.pokipass-niigata.com/wogm/

GET /wogm/?jDKP8=5JB5Sfq0uItgtJtC5HDt9qd+awyibUOSqveCkor2hMTAiAHHLxQY8a2Rwp3Q+p3+yguzgVgy&8p3=IbtHbD HTTP/1.1 Host: www.pokipass-niigata.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 15 Oct 2021 00:39:09 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 340 Connection: close Location: https://www.pokipass-niigata.com/wogm/?jDKP8=5JB5Sfq0uItgtJtC5HDt9qd+awyibUOSqveCkor2hMTAiAHHLxQY8a2Rwp3Q+p3+yguzgVgy&8p3=IbtHbD

POST /wogm/ HTTP/1.1 Host: www.muescabynes.quest Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.muescabynes.quest User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.muescabynes.quest/wogm/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 403 Forbidden Server: nginx/1.10.3 (Ubuntu) Date: Fri, 15 Oct 2021 00:39:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip

GET /wogm/?jDKP8=Cp2YzvgLUfohnHjhVFBNosoQ2J5qGB8UGxOLTRa7K8nkaGFbF9DyFpQO+4Qxvwo23h3ZSf7z&8p3=IbtHbD HTTP/1.1 Host: www.muescabynes.quest Connection: close

HTTP/1.1 403 Forbidden Server: nginx/1.10.3 (Ubuntu) Date: Fri, 15 Oct 2021 00:39:15 GMT Content-Type: text/html Content-Length: 178 Connection: close

POST /wogm/ HTTP/1.1 Host: www.blessedfurnitures.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.blessedfurnitures.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.blessedfurnitures.com/wogm/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /wogm/?jDKP8=zV6Dv0kcLx7IGnnwhXAN0xDRsIYVVts8P2q2S3hOBQp88DOpKfnLZ8aifiCKR08hOFrs3RzE&8p3=IbtHbD HTTP/1.1 Host: www.blessedfurnitures.com Connection: close