Network Analysis

POST /o2go/ HTTP/1.1 Host: www.cfaatampa.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.cfaatampa.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.cfaatampa.com/o2go/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /o2go/?Dxlpd=Pl/Ol+nOsw6/w/y+aU9P1RKojiUc7vyeNPaxTQPmfD352vP1/9QBqpNGE02dwnx78NU/bhk7&mnSh=TxlhkdU HTTP/1.1 Host: www.cfaatampa.com Connection: close

HTTP/1.1 301 Moved Permanently Date: Fri, 29 Oct 2021 00:41:05 GMT Content-Length: 0 Connection: close location: https://www.cfaatampa.com/o2go?Dxlpd=Pl%2FOl+nOsw6%2Fw%2Fy+aU9P1RKojiUc7vyeNPaxTQPmfD352vP1%2F9QBqpNGE02dwnx78NU%2Fbhk7&mnSh=TxlhkdU strict-transport-security: max-age=120 x-wix-request-id: 1635468065.80227886643324638 Age: 0 Server-Timing: cache;desc=miss, varnish;desc=miss, dc;desc=ae1 X-Seen-By: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVgp50XH6sxaLuCS2cnRcGUi,m0j2EEknGIVUW/liY8BLLhADhb9eqILX5d2WRAVNebUsxHMvs66Scc9GzPdq8oXa,2d58ifebGbosy5xc+FRalvlIDyZxPGYlrrk3/Lc8QAqZr7hVVfUXe0mx/l5JrDJr1zlMNzlIYERXhXsDo3rEZqap1S5AhqyO/hxlUuLz31Y=,2UNV7KOq4oGjA5+PKsX47OzyrNYmjL0tUHu5KHrjN3g=,YO37Gu9ywAGROWP0rn2IfgW5PRv7IKD225xALAZbAmk=,xXLsLbWEHLk6hl9EcGlmxhk5eLCFRsOr8cjraHuATdE=,55qjwvOxGQ2IECG75U03emRIMWFYEm7keUgskHrhkgHOQZL7Sg6faY+W66Oy1EIGWeOPBSQaKM0duTyfwwkpbg== Cache-Control: no-cache X-Content-Type-Options: nosniff Server: Pepyaka/1.19.10

POST /o2go/ HTTP/1.1 Host: www.canopuslector.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.canopuslector.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.canopuslector.com/o2go/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /o2go/?Dxlpd=ZAUpSgkpEDg8niFzuNKe6gEWnHhBWtidA2LwxNth08Qz4PbCXRD40C59E3bfaaHzXCIDtzc4&mnSh=TxlhkdU HTTP/1.1 Host: www.canopuslector.com Connection: close

HTTP/1.1 308 Permanent Redirect Connection: close Location: https://www.canopuslector.com/o2go/?Dxlpd=ZAUpSgkpEDg8niFzuNKe6gEWnHhBWtidA2LwxNth08Qz4PbCXRD40C59E3bfaaHzXCIDtzc4&mnSh=TxlhkdU Server: Caddy Date: Fri, 29 Oct 2021 00:41:26 GMT Content-Length: 0

POST /o2go/ HTTP/1.1 Host: www.expatriatecafe.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.expatriatecafe.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.expatriatecafe.com/o2go/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /o2go/?Dxlpd=+cW4o3L1nfvEkkPOkZGTjQfjWekF/hM2MaTEXDdcC09Onuz+XEMDyox0luu0PClFcWinXzsf&mnSh=TxlhkdU HTTP/1.1 Host: www.expatriatecafe.com Connection: close

HTTP/1.1 404 Not Found Server: nginx Date: Fri, 29 Oct 2021 00:41:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://www.expatriatecafe.com/wp-json/>; rel="https://api.w.org/"

POST /o2go/ HTTP/1.1 Host: www.daybydayneeds.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.daybydayneeds.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.daybydayneeds.com/o2go/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /o2go/?Dxlpd=/FrPOgiDhDip/ySNZI8OLKS5OxIhXPdMrfM/1s/okw0wECr+nAKcZ38irIHgJAMCO3WjHnMc&mnSh=TxlhkdU HTTP/1.1 Host: www.daybydayneeds.com Connection: close

HTTP/1.1 403 Forbidden Date: Fri, 29 Oct 2021 00:41:56 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Sorting-Hat-PodId: 151 X-Sorting-Hat-ShopId: 59293171864 X-Request-ID: a8c4a4f5-fe3d-46a2-ac2f-8257efee1a16 X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block X-Download-Options: noopen X-Content-Type-Options: nosniff X-Dc: gcp-asia-northeast2 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 6a585c6e2a01fcdd-KIX alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

POST /o2go/ HTTP/1.1 Host: www.fanaticscardgroup.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.fanaticscardgroup.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.fanaticscardgroup.com/o2go/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Date: Fri, 29 Oct 2021 00:42:06 GMT Content-Type: text/html Content-Length: 556 Connection: close Server: namecheap-nginx Allow: GET, HEAD

GET /o2go/?Dxlpd=8H0rDLcccfrSnzJo6xqaIh8cFRP5shFVfEo30ND+W3j0LJ9pYzmIPxBjjF03wuELOtv43EjU&mnSh=TxlhkdU HTTP/1.1 Host: www.fanaticscardgroup.com Connection: close

POST /o2go/ HTTP/1.1 Host: www.koltemp.com Connection: close Content-Length: 283 Cache-Control: no-cache Origin: http://www.koltemp.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.koltemp.com/o2go/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /o2go/?Dxlpd=d/I/y4E919y90/NgD6lGRdsG+efKLObNvHJeST29zYsXDGROtBHMrcb1ki8bN5CEtxKsUn6o&mnSh=TxlhkdU HTTP/1.1 Host: www.koltemp.com Connection: close

HTTP/1.1 200 OK Server: openresty Date: Fri, 29 Oct 2021 00:42:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: parking_session=999fea48-b128-3a31-4fb9-79a41ab375ef; expires=Fri, 29-Oct-2021 00:57:22 GMT; Max-Age=900; path=/; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_GfxpNwzCe91lrmnlJedq0BD99Qk67V8432E7rRgYdLtGn8orehHREq8TEUUnl7Xk09YIEOatyHgEORVl8bcqLA== Cache-Control: no-cache Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-store, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache