Network Analysis

POST /f619/ HTTP/1.1 Host: www.smartinnoventions.com Connection: close Content-Length: 178 Cache-Control: no-cache Origin: http://www.smartinnoventions.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.smartinnoventions.com/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 24 May 2023 23:14:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.1.30 Content-Encoding: gzip

GET /f619/?gj9u2D2b=Ek2xhbXtY1qXzB2JvbkcFvKbSmJm4K+Uyb5xsLYZ3zgsIlX7EFjcw6TuiLcQZ5KUivhxYJn0P8EizsHxKHQ+wy4OSt0bovGghjBDZDE=&hTOD1=q06upvjv_ghP_ HTTP/1.1 Host: www.smartinnoventions.com Connection: close

HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 24 May 2023 23:14:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.1.30

GET /2019/sqlite-dll-win32-x86-3280000.zip HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E) Host: www.sqlite.org Connection: Keep-Alive

HTTP/1.1 200 OK Connection: keep-alive Date: Wed, 24 May 2023 23:15:03 GMT Last-Modified: Tue, 09 Jul 2019 09:49:15 GMT Cache-Control: max-age=120 ETag: "m5d24631bs762f9" Content-type: application/zip; charset=utf-8 Content-length: 484089

POST /f619/ HTTP/1.1 Host: www.intake-tree.com Connection: close Content-Length: 190 Cache-Control: no-cache Origin: http://www.intake-tree.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.intake-tree.com/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: Cowboy Connection: close X-Powered-By: Express Content-Security-Policy: default-src 'self' X-Content-Type-Options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 145 Date: Wed, 24 May 2023 23:15:15 GMT Via: 1.1 vegur

GET /f619/?gj9u2D2b=YCaZye8ndW5O5ejCJ7uN2558Y+97WERyr3klZ+XCKIlwv4gr+zruhmNXWBgIbED6mtP3DBYvR0gpojWOjcOh+ihVnCiMcphzPiGO29A=&hTOD1=q06upvjv_ghP_ HTTP/1.1 Host: www.intake-tree.com Connection: close

HTTP/1.1 200 OK Server: Cowboy Connection: close X-Powered-By: Express Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 13 Apr 2023 19:42:21 GMT Etag: W/"8de-1877c23e948" Content-Type: text/html; charset=UTF-8 Content-Length: 2270 Date: Wed, 24 May 2023 23:15:18 GMT Via: 1.1 vegur

POST /f619/ HTTP/1.1 Host: www.towfire.life Connection: close Content-Length: 190 Cache-Control: no-cache Origin: http://www.towfire.life User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.towfire.life/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Wed, 24 May 2023 23:15:24 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html

GET /f619/?gj9u2D2b=Ehbg4LlyVMHP0pAFmIQxhDDkp6Kxs477sF6nDv0EaT5K8/1GH5wf1bgzqSKTUaDZXTnW9d28cNYQDMZcc5x0F8aQqyCdRYlsL10lLoU=&hTOD1=q06upvjv_ghP_ HTTP/1.1 Host: www.towfire.life Connection: close

HTTP/1.1 404 Not Found Date: Wed, 24 May 2023 23:15:27 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html; charset=utf-8

POST /f619/ HTTP/1.1 Host: www.gospelfy.online Connection: close Content-Length: 190 Cache-Control: no-cache Origin: http://www.gospelfy.online User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.gospelfy.online/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Server: nginx Date: Wed, 24 May 2023 23:15:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache Content-Encoding: gzip

GET /f619/?gj9u2D2b=mqENKO6x6u0B1RhcdIeKlgDLrDi38FKwdcw4276gfXsD1t5r0KVruS6mnpdZvtzm+Q0xGOUHk2EA1TA3TL1CSm4H2R6TK8LtJrZ83YI=&hTOD1=q06upvjv_ghP_ HTTP/1.1 Host: www.gospelfy.online Connection: close

HTTP/1.1 200 OK Server: nginx Date: Wed, 24 May 2023 23:15:35 GMT Content-Type: text/html Content-Length: 969 Connection: close Vary: Accept-Encoding Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache

POST /f619/ HTTP/1.1 Host: www.queenkidul.com Connection: close Content-Length: 190 Cache-Control: no-cache Origin: http://www.queenkidul.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.queenkidul.com/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Wed, 24 May 2023 23:15:41 GMT server: LiteSpeed x-powered-by: Niagahoster strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent

GET /f619/?gj9u2D2b=flPn1CpczsmcmsloYAj+WZ9tyIXCLn2BUp15WA9gR+pRAl39PMpr22E4uA5K3fGksCy6GKGUT/KR36S7pADHdFopIcR3oqkCWwUH3Bw=&hTOD1=q06upvjv_ghP_ HTTP/1.1 Host: www.queenkidul.com Connection: close

HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Wed, 24 May 2023 23:15:44 GMT server: LiteSpeed x-powered-by: Niagahoster strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent

POST /f619/ HTTP/1.1 Host: www.sockmomma.com Connection: close Content-Length: 190 Cache-Control: no-cache Origin: http://www.sockmomma.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.sockmomma.com/f619/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 24 May 2023 23:15:49 GMT Connection: close Content-Length: 1163