Network Analysis

GET /lf80/?1nk=U1AfX2eZFZv2hBCTqgPkcuANZ20kgeq2vS8gtcHKe8ZJSs3Oy12xCliJ0zonbRqHTLXay59VdXyZMRRK+Tu2D9w7yrgJnaEu4iBoGU0=&2R8Y=VADnZM1Y HTTP/1.1 Host: www.carcosainvest.com Connection: close

HTTP/1.1 301 Moved Permanently Connection: close expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 content-type: text/html; charset=UTF-8 x-redirect-by: WordPress location: http://carcosainvest.com/lf80/?1nk=U1AfX2eZFZv2hBCTqgPkcuANZ20kgeq2vS8gtcHKe8ZJSs3Oy12xCliJ0zonbRqHTLXay59VdXyZMRRK+Tu2D9w7yrgJnaEu4iBoGU0=&2R8Y=VADnZM1Y content-length: 0 date: Thu, 30 Mar 2023 07:28:21 GMT server: LiteSpeed

GET /2020/sqlite-dll-win32-x86-3320000.zip HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Host: www.sqlite.org Connection: Keep-Alive

HTTP/1.1 200 OK Connection: keep-alive Date: Thu, 30 Mar 2023 07:28:26 GMT Last-Modified: Mon, 25 May 2020 16:29:38 GMT Cache-Control: max-age=120 ETag: "m5ecbf272s799b7" Content-type: application/zip; charset=utf-8 Content-length: 498103

POST /lf80/ HTTP/1.1 Host: www.fantasticserver.yachts Connection: close Content-Length: 3413 Cache-Control: no-cache Origin: http://www.fantasticserver.yachts User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.fantasticserver.yachts/lf80/ Accept-Language: en-US Accept-Encoding: gzip, deflate

POST /lf80/ HTTP/1.1 Host: www.fantasticserver.yachts Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.fantasticserver.yachts User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.fantasticserver.yachts/lf80/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Date: Thu, 30 Mar 2023 07:28:39 GMT Content-Type: text/html Content-Length: 166 Connection: close Location: https://www.fantasticserver.yachts:443/lf80/

GET /lf80/?1nk=C+NRImNoToCD7C+RudibhX2FyNhV6QDK3DTVu5TP5j9xeLMXsFNWcyV4ZKkL/2WNJNyMWiJ/EMH3DJK+HE42s4WyueexzCKRcbRLZww=&2R8Y=VADnZM1Y HTTP/1.1 Host: www.fantasticserver.yachts Connection: close

HTTP/1.1 301 Moved Permanently Date: Thu, 30 Mar 2023 07:28:42 GMT Content-Type: text/html Content-Length: 166 Connection: close Location: https://www.fantasticserver.yachts:443/lf80/?1nk=C+NRImNoToCD7C+RudibhX2FyNhV6QDK3DTVu5TP5j9xeLMXsFNWcyV4ZKkL/2WNJNyMWiJ/EMH3DJK+HE42s4WyueexzCKRcbRLZww=&2R8Y=VADnZM1Y

POST /lf80/ HTTP/1.1 Host: www.toplegalserves.com Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.toplegalserves.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.toplegalserves.com/lf80/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /lf80/?1nk=iIHSWm9EKbE4LjX243veP2lmBJalZgZwOGqRYCYa0bxTcNU/qsqdO599/0gGzMbmPKZM4KeyGlGsFSkFvsSSZkNMG60YCeVz3NJjEjs=&2R8Y=VADnZM1Y HTTP/1.1 Host: www.toplegalserves.com Connection: close

HTTP/1.1 200 OK Date: Thu, 30 Mar 2023 07:28:53 GMT Server: Apache Set-Cookie: vsid=929vr42770693354905268; expires=Tue, 28-Mar-2028 07:28:53 GMT; Max-Age=157680000; path=/; domain=www.toplegalserves.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_RF+2fX7KMvBCSACkmptnNsYZQAK5+ekOYtlPdykFhvHjdYn3YH9RXHSzxepcIYUFN0KXw6KyYpk5Agz4GdKPHQ== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Connection: close

POST /lf80/ HTTP/1.1 Host: www.88vqq.com Connection: close Content-Length: 3413 Cache-Control: no-cache Origin: http://www.88vqq.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.88vqq.com/lf80/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Server: nginx Date: Thu, 30 Mar 2023 15:28:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Encoding: gzip X-Powered-By: Nginx

POST /lf80/ HTTP/1.1 Host: www.88vqq.com Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.88vqq.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.88vqq.com/lf80/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Server: nginx Date: Thu, 30 Mar 2023 15:28:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Encoding: gzip X-Powered-By: Nginx

GET /lf80/?1nk=MSiiOWab7QGE4OsGqNUf0CjYIOhimWiHfwxthaTSJ8ZN7v6H0tr9Kvwqa+LjvVHLJHijakkDSyn+6AhO4AX19nbBqGYAyzw2LVFYqB4=&2R8Y=VADnZM1Y HTTP/1.1 Host: www.88vqq.com Connection: close

HTTP/1.1 200 OK Server: nginx Date: Thu, 30 Mar 2023 15:28:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: Nginx

POST /lf80/ HTTP/1.1 Host: www.fluttering.info Connection: close Content-Length: 3413 Cache-Control: no-cache Origin: http://www.fluttering.info User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.fluttering.info/lf80/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Thu, 30 Mar 2023 07:29:10 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html

POST /lf80/ HTTP/1.1 Host: www.fluttering.info Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.fluttering.info User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.fluttering.info/lf80/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Thu, 30 Mar 2023 07:29:12 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html

GET /lf80/?1nk=vdUvd4KMcs02oJHOqazuyWeULNYj9ziXLbdaBklN4QZLswKe18yc7gBmli0SaeLYRqNWchuZuJZKel0zJd0sN+qba2pORzREmC/Malw=&2R8Y=VADnZM1Y HTTP/1.1 Host: www.fluttering.info Connection: close

HTTP/1.1 404 Not Found Date: Thu, 30 Mar 2023 07:29:15 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html; charset=utf-8