Network Analysis

POST /m5cw/ HTTP/1.1 Host: www.agircredit.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.agircredit.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.agircredit.com/m5cw/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 302 Found Connection: close content-type: text/html content-length: 683 date: Tue, 26 Oct 2021 00:55:16 GMT server: LiteSpeed cache-control: no-cache, no-store, must-revalidate, max-age=0 location: http://www.agircredit.com/cgi-sys/suspendedpage.cgi

GET /m5cw/?DhA83=pyQ/3Qovfc/RPZMCxW1OunUS9o/5gtBsSz/IO5NXG9CNMrfiYkJ8HHxCBG/KRbNCHZObSuIw&EzuxZr=3fX4qpLxsHG HTTP/1.1 Host: www.agircredit.com Connection: close

HTTP/1.1 302 Found Connection: close content-type: text/html content-length: 683 date: Tue, 26 Oct 2021 00:55:17 GMT server: LiteSpeed cache-control: no-cache, no-store, must-revalidate, max-age=0 location: http://www.agircredit.com/cgi-sys/suspendedpage.cgi?DhA83=pyQ/3Qovfc/RPZMCxW1OunUS9o/5gtBsSz/IO5NXG9CNMrfiYkJ8HHxCBG/KRbNCHZObSuIw&EzuxZr=3fX4qpLxsHG

POST /m5cw/ HTTP/1.1 Host: www.limitlesschurchbf.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.limitlesschurchbf.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.limitlesschurchbf.com/m5cw/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /m5cw/?DhA83=FJ7qf+03OJ299TaeGYRCEgZhI0FCy0KPlWjCSoUTV71bkUOf+2adFNNc+T1Jy75KmXZNbCqV&EzuxZr=3fX4qpLxsHG HTTP/1.1 Host: www.limitlesschurchbf.com Connection: close

HTTP/1.1 404 Not Found Date: Tue, 26 Oct 2021 00:55:27 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-wix-request-id: 1635209727.527225688602222572 Age: 0 Server-Timing: cache;desc=miss, varnish;desc=miss, dc;desc=ae1 X-Seen-By: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVipJJBZGHquuKQc515pOj3x,m0j2EEknGIVUW/liY8BLLqEyeDFM1EEypsL62hd/euTkSKZSxqn1WKO11csTt54x,2d58ifebGbosy5xc+FRalppAN5g3ygh++PwIYZtuLh8TB5yJIfH+6yG+3Wxq/e/u/Bwz/cqXIWh9I3vEkQiWcliB5QmpRe2J37zq9nDD6cs=,2UNV7KOq4oGjA5+PKsX47DWeAMF7nASuJ5hkhRAAWndYgeUJqUXtid+86vZww+nL,YO37Gu9ywAGROWP0rn2IfgW5PRv7IKD225xALAZbAmk=,xXLsLbWEHLk6hl9EcGlmxpwLxwrurDb/52pb/yA5vII=,wjXkXN74v+Dcwxj+UalvvpiOrWDN5Nvj2v8UJcelT0TOQZL7Sg6faY+W66Oy1EIG2EDZKpTXDe1HJtHUkHf0oA== Vary: Accept-Encoding X-Content-Type-Options: nosniff Server: Pepyaka/1.19.10

POST /m5cw/ HTTP/1.1 Host: www.art-for-a-cause.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.art-for-a-cause.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.art-for-a-cause.com/m5cw/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 26 Oct 2021 00:55:32 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.art-for-a-cause.com/m5cw/ X-ac: 3.nrt _bur

GET /m5cw/?DhA83=J8VJ8UCC0khwQJPb8jXSgpuDN+WtvXxDYaYel8rzuxdPQ32TBsL8hQV0C7xWeQV4TeCDFs/g&EzuxZr=3fX4qpLxsHG HTTP/1.1 Host: www.art-for-a-cause.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 26 Oct 2021 00:55:32 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.art-for-a-cause.com/m5cw/?DhA83=J8VJ8UCC0khwQJPb8jXSgpuDN+WtvXxDYaYel8rzuxdPQ32TBsL8hQV0C7xWeQV4TeCDFs/g&EzuxZr=3fX4qpLxsHG X-ac: 3.nrt _bur

POST /m5cw/ HTTP/1.1 Host: www.classificationmetallurgie.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.classificationmetallurgie.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.classificationmetallurgie.com/m5cw/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 302 Moved Temporarily server: nginx date: Tue, 26 Oct 2021 00:55:43 GMT content-type: text/html content-length: 138 location: http://www.classificationmetallurgie.com x-iplb-request-id: AFD08696:C039_D5BA2105:0050_6177520F_41D566F4:1C783 x-iplb-instance: 16980 set-cookie: SERVERID77446=200178|YXdSE|YXdSE; path=/; HttpOnly connection: close

GET /m5cw/?DhA83=/JTTvVUTsa8Y0xLO6KtGC+8GgnhRVvgk70AJBJ4TlCs6p2eL5EP4A9DynmjO2wjoVGTCezE4&EzuxZr=3fX4qpLxsHG HTTP/1.1 Host: www.classificationmetallurgie.com Connection: close

HTTP/1.1 302 Moved Temporarily server: nginx date: Tue, 26 Oct 2021 00:55:43 GMT content-type: text/html content-length: 138 location: http://www.classificationmetallurgie.com x-iplb-request-id: AFD08696:C03A_D5BA2105:0050_6177520F_7CB5AF95:1C787 x-iplb-instance: 16980 set-cookie: SERVERID77446=200177|YXdSE|YXdSE; path=/; HttpOnly connection: close

POST /m5cw/ HTTP/1.1 Host: www.grippyent.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.grippyent.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.grippyent.com/m5cw/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Tue, 26 Oct 2021 00:55:59 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_h/THMoOjqr+QdRNZP8xDnPTiJJ1QFMkgd8V9v+FlIvJ5u76ML0YxKkKssCj2L51qNVYYvchqEvbfzrixBusczg Via: 1.1 google Connection: close

GET /m5cw/?DhA83=i4icWyR5Y9i2t0xbz2p0H2L6OJRLVM0eNrDAHmVfjhFHrzfGIW3vf7ZP4pCLEbHBwypZOUqc&EzuxZr=3fX4qpLxsHG HTTP/1.1 Host: www.grippyent.com Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Tue, 26 Oct 2021 00:55:59 GMT Content-Type: text/html Content-Length: 275 ETag: "6169a6d6-113" Via: 1.1 google Connection: close

POST /m5cw/ HTTP/1.1 Host: www.byrdemailplans.xyz Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.byrdemailplans.xyz User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.byrdemailplans.xyz/m5cw/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /m5cw/?DhA83=c7feWHcm0LII4MK/sCK1JbYS7bcjHAYM2455Rh7sTmKPwd3owB2HX887+DCt26EIPFNWBKVP&EzuxZr=3fX4qpLxsHG HTTP/1.1 Host: www.byrdemailplans.xyz Connection: close

POST /m5cw/ HTTP/1.1 Host: www.customsoftwarelogistics.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.customsoftwarelogistics.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.customsoftwarelogistics.com/m5cw/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Tue, 26 Oct 2021 00:56:20 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Accept-Ranges: bytes Content-Length: 1699 Content-Type: text/html

GET /m5cw/?DhA83=+S8mLshjf5hvUDGw0RmMlmkW9vRy5Hz2J+O5LZqlmuEIOFnlku0LQHz9Sw/RJOPoOd8q5Iza&EzuxZr=3fX4qpLxsHG HTTP/1.1 Host: www.customsoftwarelogistics.com Connection: close

HTTP/1.1 404 Not Found Date: Tue, 26 Oct 2021 00:56:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Accept-Ranges: bytes Content-Length: 1699 Content-Type: text/html

POST /m5cw/ HTTP/1.1 Host: www.runawaypklyau.xyz Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.runawaypklyau.xyz User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.runawaypklyau.xyz/m5cw/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Date: Tue, 26 Oct 2021 00:56:41 GMT Content-Type: text/html Content-Length: 556 Connection: close Server: namecheap-nginx Allow: GET, HEAD

GET /m5cw/?DhA83=5Bv/JLUtJrKO/9gZnmFexZq+Xed7eHY5Ibz4cfGRYXJLjLoDi3CrUEok8Uzan4zmfs4GZz2f&EzuxZr=3fX4qpLxsHG HTTP/1.1 Host: www.runawaypklyau.xyz Connection: close

POST /m5cw/ HTTP/1.1 Host: www.wuruixin.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.wuruixin.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.wuruixin.com/m5cw/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /m5cw/?DhA83=0EeHxnJ+lNU4xFJNfOARrzBQsLlykirUfGVKXlUPhiG1Vhwkxb1PbSgC0MAJvHsVsTmDYrcN&EzuxZr=3fX4qpLxsHG HTTP/1.1 Host: www.wuruixin.com Connection: close

POST /m5cw/ HTTP/1.1 Host: www.the22yards.club Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.the22yards.club User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.the22yards.club/m5cw/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Tue, 26 Oct 2021 00:56:52 GMT Server: Apache X-Powered-By: PHP/7.4.24 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache; private Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

GET /m5cw/?DhA83=emMSuu7GUcaDa4Oo/eoU+baJRAHOsrVhqwxc30o52Oy/Uh4TjPMUhzrdSct0qi37V/+TpRYI&EzuxZr=3fX4qpLxsHG HTTP/1.1 Host: www.the22yards.club Connection: close

HTTP/1.1 404 Not Found Date: Tue, 26 Oct 2021 00:56:52 GMT Server: Apache X-Powered-By: PHP/7.4.24 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache; private Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8