Network Analysis

POST /hjdr/ HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Host: www.redhelpers.com Cache-Control: no-cache Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 176 Origin: http://www.redhelpers.com Referer: http://www.redhelpers.com/hjdr/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 200 OK Server: nginx Date: Tue, 18 Jul 2023 09:23:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Buckets: bucket011 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_czNlkfX5l2z0pYzMz242w1HpXvfnjsKZGyIMaZm9cZBNpbvoNoDLmwUUiDVbnbvpVV3yPJHkZeICvpM+P/QEDA== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: redhelpers.com X-Subdomain: www Content-Encoding: gzip

GET /hjdr/?JoeyZNb=YpqjTLELgUY/d4HafFE0oWZw/2NHDnY7eLtpu3Vtdcx4Jmz4rSZ5sKv2kTetxC3MAYUYmW4b6AXmlFI5jsCc5u3R6xF6PL4DkSBTPts=&kiz0=gXOMyhyi HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Host: www.redhelpers.com Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 200 OK Server: nginx Date: Tue, 18 Jul 2023 09:23:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Buckets: bucket011 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Wd5I1sg8yZc8Fy/tAeNB/kdjyMWHV9l1ixyTD3bEbrAZjNSP3wGKxqPije5YsKrZ01EF9bB9jf8VTqF0Y4Xzrg== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: redhelpers.com X-Subdomain: www

GET /2019/sqlite-dll-win32-x86-3290000.zip HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E) Host: www.sqlite.org Connection: Keep-Alive

HTTP/1.1 200 OK Connection: keep-alive Date: Tue, 18 Jul 2023 09:23:57 GMT Last-Modified: Thu, 03 Oct 2019 16:46:08 GMT Cache-Control: max-age=120 ETag: "m5d9625d0s76a84" Content-type: application/zip; charset=utf-8 Content-length: 486020

POST /hjdr/ HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Host: www.kbtcoin.store Cache-Control: no-cache Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 188 Origin: http://www.kbtcoin.store Referer: http://www.kbtcoin.store/hjdr/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Frame-Options: SAMEORIGIN Date: Tue, 18 Jul 2023 09:24:06 GMT Connection: close Content-Length: 1245

GET /hjdr/?JoeyZNb=OwT5fv3sMTyOF+WfoJr7V4VQqd+KzZL/KnHGdxnHtEh6vKw2S4OQP3sFw22/E53lopKvyHA6/BpX1iqNoYoz3wrhxCmlsV1/FTq7bdo=&kiz0=gXOMyhyi HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Host: www.kbtcoin.store Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Frame-Options: SAMEORIGIN Date: Tue, 18 Jul 2023 09:24:08 GMT Connection: close Content-Length: 1245

POST /hjdr/ HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Host: www.grandiosoyacht.com Cache-Control: no-cache Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 188 Origin: http://www.grandiosoyacht.com Referer: http://www.grandiosoyacht.com/hjdr/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Not Found Date: Tue, 18 Jul 2023 09:24:14 GMT Server: Apache Content-Length: 203 Connection: close Content-Type: text/html; charset=iso-8859-1

GET /hjdr/?JoeyZNb=ZIVepfGD+AffZCHV3Ol2oKUOXbfpNq4HeENG2f+1jk6NDjMSW9zSeGZmFetCeOX/fHb8BZzbaKu2Gddb3M9ccYXeJy9E2DDJWKKyeEo=&kiz0=gXOMyhyi HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Host: www.grandiosoyacht.com Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Not Found Date: Tue, 18 Jul 2023 09:24:17 GMT Server: Apache Content-Length: 203 Connection: close Content-Type: text/html; charset=iso-8859-1

POST /hjdr/ HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Host: www.my-bbs.com Cache-Control: no-cache Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 188 Origin: http://www.my-bbs.com Referer: http://www.my-bbs.com/hjdr/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Server: ZGS Date: Tue, 18 Jul 2023 09:24:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: 8ae64e9492=a150874439e1189f3c77bc52f348ab3f; Path=/ X-XSS-Protection: 1 Set-Cookie: csrfc=4d9269cd-0d6f-4b87-a34d-5fc7146047c2;path=/;priority=high Set-Cookie: _zcsr_tmp=4d9269cd-0d6f-4b87-a34d-5fc7146047c2;path=/;SameSite=Strict;priority=high Cache-Control: private,no-cache,no-store,max-age=0,must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT vary: accept-encoding Content-Encoding: gzip

GET /hjdr/?JoeyZNb=gZwhwv+rj0JfbTlqQcvCJrahgucLKkM9Bn0g5rP7m3ePlM4d2wH7QHnXu7wnbI4S+7v4pDbRSdO7OKXzsqAdXWWFdviCngERcentyWw=&kiz0=gXOMyhyi HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Host: www.my-bbs.com Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Server: ZGS Date: Tue, 18 Jul 2023 09:24:25 GMT Content-Type: text/html Content-Length: 4635 Connection: close Set-Cookie: 8ae64e9492=0f71d2b25c73f2883ce01c2fd3c97eb8; Path=/ X-XSS-Protection: 1 Set-Cookie: csrfc=7b31edf2-284a-482b-8d0e-56410487c799;path=/;priority=high Set-Cookie: _zcsr_tmp=7b31edf2-284a-482b-8d0e-56410487c799;path=/;SameSite=Strict;priority=high Cache-Control: private,no-cache,no-store,max-age=0,must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT vary: accept-encoding

POST /hjdr/ HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Host: www.ketotop5reviews.com Cache-Control: no-cache Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 188 Origin: http://www.ketotop5reviews.com Referer: http://www.ketotop5reviews.com/hjdr/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Not Found Date: Tue, 18 Jul 2023 09:24:31 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://ketotop5reviews.com/index.php/wp-json/>; rel="https://api.w.org/" Content-Encoding: gzip Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

GET /hjdr/?JoeyZNb=Yijs5dzIRgyLtiEm8YVKzxzJARaaz1ygyQUAo47Y9YLXxcdZabP3kXt0loAI/PeeKKlEWCnqNGNFZU2DmCnSgcsd1psmTY3qHW8m6k0=&kiz0=gXOMyhyi HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Host: www.ketotop5reviews.com Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 301 Moved Permanently Date: Tue, 18 Jul 2023 09:24:34 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://ketotop5reviews.com/hjdr/?JoeyZNb=Yijs5dzIRgyLtiEm8YVKzxzJARaaz1ygyQUAo47Y9YLXxcdZabP3kXt0loAI/PeeKKlEWCnqNGNFZU2DmCnSgcsd1psmTY3qHW8m6k0=&kiz0=gXOMyhyi Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

POST /hjdr/ HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Host: www.morubixaba.com Cache-Control: no-cache Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 188 Origin: http://www.morubixaba.com Referer: http://www.morubixaba.com/hjdr/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

GET /hjdr/?JoeyZNb=64l4nBwickRj5+B55yI4aT/AdbB/zOm/2hMG5E84rPCqZYVtS3+3gGKYYg0k5NU9ycD4+LRnqZYt8h6mEz9Kk96FRyUaLOgeH1rhAn8=&kiz0=gXOMyhyi HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Host: www.morubixaba.com Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 200 OK Server: hcdn Date: Tue, 18 Jul 2023 09:24:42 GMT Content-Type: text/html Content-Length: 10066 Connection: close Vary: Accept-Encoding x-hcdn-request-id: 58d052c5b39f690004f4a4911da94a9b-srv-edge1 Expires: Tue, 18 Jul 2023 09:24:41 GMT Cache-Control: no-cache Accept-Ranges: bytes

POST /hjdr/ HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Host: www.tugrow.top Cache-Control: no-cache Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 188 Origin: http://www.tugrow.top Referer: http://www.tugrow.top/hjdr/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Not Found Date: Tue, 18 Jul 2023 09:24:48 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html

GET /hjdr/?JoeyZNb=2Lz3cRNcgovZAvoxkyTJJkVbnS/f0a6U88mjUIjg2Los90+Pf0cBdPH279Q+Q6Q5Wf8ziDEK77rXCjEWctJre0mQm9v094R3uDXqBk4=&kiz0=gXOMyhyi HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Host: www.tugrow.top Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Not Found Date: Tue, 18 Jul 2023 09:24:50 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html; charset=utf-8

POST /hjdr/ HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Host: www.fatimaest.com Cache-Control: no-cache Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 188 Origin: http://www.fatimaest.com Referer: http://www.fatimaest.com/hjdr/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Not Found Date: Tue, 18 Jul 2023 09:24:56 GMT Server: Apache X-Powered-By: PHP/8.1.18 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://fatimaest.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 13716 Content-Type: text/html; charset=UTF-8

GET /hjdr/?JoeyZNb=n5l8tCTW94Gw/giJefkHUbcRETzENs4hM9d2TK2mvTwTwL/1t4K1O3bDrGWsk3Qh+CJ6/CMThOr1qV0fFyX4yPVWltqTiQZmXL1as4k=&kiz0=gXOMyhyi HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Host: www.fatimaest.com Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 301 Moved Permanently Date: Tue, 18 Jul 2023 09:24:58 GMT Server: Apache X-Powered-By: PHP/8.1.18 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Upgrade: h2,h2c Connection: Upgrade, close Location: http://fatimaest.com/hjdr/?JoeyZNb=n5l8tCTW94Gw/giJefkHUbcRETzENs4hM9d2TK2mvTwTwL/1t4K1O3bDrGWsk3Qh+CJ6/CMThOr1qV0fFyX4yPVWltqTiQZmXL1as4k=&kiz0=gXOMyhyi Vary: User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8

POST /hjdr/ HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Host: www.amateurshow.online Cache-Control: no-cache Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 188 Origin: http://www.amateurshow.online Referer: http://www.amateurshow.online/hjdr/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 18 Jul 2023 09:25:04 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 244 Connection: close Location: https://www.amateurshow.online/hjdr/

GET /hjdr/?JoeyZNb=xX5SVKkWhoDut3GzBaDmppnEHsg/q+4SKSfyO6xSWbIBYORImKJaBpt9iPBmVz2FT2wLfcB9Y2Q6assiK3BzS8oN8k0Uh6RuPdoxrUM=&kiz0=gXOMyhyi HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Host: www.amateurshow.online Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 18 Jul 2023 09:25:07 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 375 Connection: close Location: https://www.amateurshow.online/hjdr/?JoeyZNb=xX5SVKkWhoDut3GzBaDmppnEHsg/q+4SKSfyO6xSWbIBYORImKJaBpt9iPBmVz2FT2wLfcB9Y2Q6assiK3BzS8oN8k0Uh6RuPdoxrUM=&kiz0=gXOMyhyi

POST /hjdr/ HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Host: www.selectenoil.ru Cache-Control: no-cache Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 188 Origin: http://www.selectenoil.ru Referer: http://www.selectenoil.ru/hjdr/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 18 Jul 2023 09:25:13 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 196 Connection: close

GET /hjdr/?JoeyZNb=sypAAqbL6Kbr584vXjavsMmnNbwkS+CAk00myYDn5pA6KuObmwsMPbuKx5sNOB5qiBdVaRcAgh8i/dcpaiFWtM7VI0mAReEdx1J8t80=&kiz0=gXOMyhyi HTTP/1.1 Accept: */* Accept-Language: en-US,en;q=0.9 Host: www.selectenoil.ru Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 18 Jul 2023 09:25:15 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 196 Connection: close