Network Analysis

POST /im0n/ HTTP/1.1 Host: www.claycountycompass.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-us Origin: http://www.claycountycompass.com Referer: http://www.claycountycompass.com/im0n/ Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Content-Length: 176 Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 403 Forbidden Date: Wed, 19 Jul 2023 22:47:17 GMT Content-Type: text/html Content-Length: 146 X-Seen-By: GXNXSWFXisshliUcwO20NXdyD4zpCpFzpCPkLds0yMdRT/PBOXX4phc0O+jgx6BL,qquldgcFrj2n046g4RNSVIAgcgCEfo+CxkPwqc2yH31YgeUJqUXtid+86vZww+nL X-Wix-Request-Id: 1689806837.39113426031315153 X-Content-Type-Options: nosniff Server: Pepyaka/1.19.10 Via: 1.1 google Connection: close

GET /im0n/?hejeEiw=6nVoOeydDdvEQoPzwGPbqVgi08ClPM7fMf2WAdo25FxHApFMgRyGDr8Xy0pHB84PirmLfNDueGK1IwqBROdGhKr6EMwVGq4Q7vg2wcU=&D6hm=jOua5v HTTP/1.1 Host: www.claycountycompass.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-us Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 404 Not Found Date: Wed, 19 Jul 2023 22:47:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2963 x-wix-request-id: 1689806839.884406221098315279 Age: 0 X-Seen-By: GXNXSWFXisshliUcwO20NZL9Lwun+M+7c/tw2Pto8/Fg0V9xL+xheodD+fTv8+8Y,qquldgcFrj2n046g4RNSVJCtWuHmiU2MhHGbwSEZTfk=,2d58ifebGbosy5xc+FRalkJEBxPm2ppkanHGZaQQV3RWPb8HSxgg70z+bDzx66g8TaOzad26luC4Q5hIhRb9vxIXrDpuenLgeOkKFNlHgq8=,2UNV7KOq4oGjA5+PKsX47FffAZYOIR1v/pFPyNz0pPua46R9xNIlpQ4eUPYpBuqs,R8nVwPJv9QJL1m78OROO+NtvDqxI2BOPSjkEYecpYeU=,GiE5c8Q213kn1NHwElo57GSeoNNwOtpYb9I5h8zJc0MSO5XmrrCSQNDehIjmfew3nocgTMNukO75IrxMp4VrSg== Vary: Accept-Encoding server-timing: cache;desc=miss, varnish;desc=miss, dc;desc=ane1_g X-Content-Type-Options: nosniff Server: Pepyaka/1.19.10 Via: 1.1 google Connection: close

GET /2018/sqlite-dll-win32-x86-3240000.zip HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E) Host: www.sqlite.org Connection: Keep-Alive

HTTP/1.1 200 OK Connection: keep-alive Date: Wed, 19 Jul 2023 22:47:22 GMT Last-Modified: Mon, 10 Sep 2018 14:57:36 GMT Cache-Control: max-age=120 ETag: "m5b968660s6f0bb" Content-type: application/zip; charset=utf-8 Content-length: 454843

POST /im0n/ HTTP/1.1 Host: www.bvgroupcos.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-us Origin: http://www.bvgroupcos.com Referer: http://www.bvgroupcos.com/im0n/ Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Content-Length: 188 Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 403 Forbidden date: Wed, 19 Jul 2023 22:47:35 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close

GET /im0n/?hejeEiw=QLS70cqyyFTrHSP3+ZSMntARCP/tzE0lBA81dKJoiiN3wUIvdjfDKnc+qw6jKIOsjlxuk6bGrWGgdTY/PCm+3BJZYOiYOewPkXwe+Jk=&D6hm=jOua5v HTTP/1.1 Host: www.bvgroupcos.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-us Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 200 OK date: Wed, 19 Jul 2023 22:47:38 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding x-powered-by: PHP/8.1.17 expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_YTmHNRE9QkiWT/UIPrSqd0T7OuS02nuFFrihQCV8EPbA0Mr3OLncWOfzIKRrqniXTdvc6WkBVOy4ZO8wyROVqw== last-modified: Wed, 19 Jul 2023 22:47:38 GMT x-cache-miss-from: parking-7f6ff884d8-ltx8k server: NginX connection: close

POST /im0n/ HTTP/1.1 Host: www.rcosewe.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-us Origin: http://www.rcosewe.com Referer: http://www.rcosewe.com/im0n/ Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Content-Length: 188 Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 302 Server: nginx/1.20.1 Date: Wed, 19 Jul 2023 22:47:44 GMT Content-Length: 0 Connection: close Location: http://ww1.rcosewe.com

GET /im0n/?hejeEiw=KI+kJwpdsPvzoihrct6O+87Xk4PyfxIetYGKXAtKf4ZOaMK/E93JTX1mxFDgsPS99iov27I97GFTzVC2xNSHMx/bXfjZncuWa1wyyIs=&D6hm=jOua5v HTTP/1.1 Host: www.rcosewe.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-us Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 302 Server: nginx/1.20.1 Date: Wed, 19 Jul 2023 22:47:47 GMT Content-Length: 0 Connection: close Location: http://ww1.rcosewe.com

POST /im0n/ HTTP/1.1 Host: www.alannamershon.lol Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-us Origin: http://www.alannamershon.lol Referer: http://www.alannamershon.lol/im0n/ Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Content-Length: 188 Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 301 Moved Permanently Date: Wed, 19 Jul 2023 22:47:53 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: http://alannamershon.lol/im0n/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sEozl4I0Fc9Y5aHByIHqR8%2FmoWwKs5gkk9cgaUyry137L2IEmvtRNVPItH1gzTQE2CJV3Bf9MAruSm8WgOL6NyGfSyP18jkAv7jd6LyhR0kGdyl0OvHLOUXYF%2B%2FK6PK%2BGaDIPES5%2FRo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7e96823afcea8d1c-KIX alt-svc: h2=":443"; ma=60

GET /im0n/?hejeEiw=BtWsWYH8mR03jhsXlFBDofLGiJ0nWsYBlzTiwVSDx/H0EYvrQ8F2562MoCXeDPwHUyeNtzpJcr0VJBs2NlhuiMvceUnMecZSMshjYM4=&D6hm=jOua5v HTTP/1.1 Host: www.alannamershon.lol Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-us Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 301 Moved Permanently Date: Wed, 19 Jul 2023 22:47:55 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: http://alannamershon.lol/im0n/?hejeEiw=BtWsWYH8mR03jhsXlFBDofLGiJ0nWsYBlzTiwVSDx/H0EYvrQ8F2562MoCXeDPwHUyeNtzpJcr0VJBs2NlhuiMvceUnMecZSMshjYM4=&D6hm=jOua5v CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k1LSwv6Fl3%2Fr3w7EmIVmj3u5wzXZ0pZ63KqLTjeUjr0lHKOct%2B5cHLFEh%2FQ8vJM0rCYlzU%2BqBaZnP4qJyUYZLm73%2FSMBUPCpNrU7uyK2y0o%2BrPMDbkMFiv8e33%2BJvhJX3QNx9cCijjQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7e96824acafc836a-KIX alt-svc: h2=":443"; ma=60

POST /im0n/ HTTP/1.1 Host: www.adkoplan.net Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-us Origin: http://www.adkoplan.net Referer: http://www.adkoplan.net/im0n/ Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Content-Length: 188 Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 404 Not Found Date: Wed, 19 Jul 2023 22:48:01 GMT Server: Apache Content-Length: 196 Connection: close Content-Type: text/html; charset=iso-8859-1

GET /im0n/?hejeEiw=YDOXNTfxU0JD7txBac3A8smkukDsBR698QaZNoqaXIkGbzmD1XDmW+uDLr4tiPyK8a/F+aWo0zvpbVdCKu9S34oWienqtQquCK2q9as=&D6hm=jOua5v HTTP/1.1 Host: www.adkoplan.net Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-us Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 404 Not Found Date: Wed, 19 Jul 2023 22:48:04 GMT Server: Apache Content-Length: 196 Connection: close Content-Type: text/html; charset=iso-8859-1

POST /im0n/ HTTP/1.1 Host: www.globourd.life Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-us Origin: http://www.globourd.life Referer: http://www.globourd.life/im0n/ Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Content-Length: 188 Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 404 Not Found Date: Wed, 19 Jul 2023 22:48:10 GMT Server: Apache Content-Length: 18121 Connection: close Content-Type: text/html

GET /im0n/?hejeEiw=5tf/8dj/eN2+ceR3RgQ57gpqpXD7ZLeehNhmvk6YF2YhpYsb1jOJ09L0EvHjptkOpa7fFYEzay1EV6NPRS2gwPg5iNQOwT0+BeKgpWA=&D6hm=jOua5v HTTP/1.1 Host: www.globourd.life Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-us Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 404 Not Found Date: Wed, 19 Jul 2023 22:48:12 GMT Server: Apache Content-Length: 18121 Connection: close Content-Type: text/html; charset=utf-8

POST /im0n/ HTTP/1.1 Host: www.aquatic-organisms.info Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-us Origin: http://www.aquatic-organisms.info Referer: http://www.aquatic-organisms.info/im0n/ Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Content-Length: 188 Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 200 OK date: Wed, 19 Jul 2023 22:48:18 GMT content-type: text/html; charset=utf-8 content-length: 1142 x-request-id: 1f1ab2c3-770a-4957-95ee-4f591f12d894 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_mrKEH1lNXwJREiO9f8s2burWmhstbvTzjJR4x0MLo1V6MbGrF3aw+vdoqESFgraDCAEoX6hidPXT249Ox/KneQ== set-cookie: parking_session=1f1ab2c3-770a-4957-95ee-4f591f12d894; expires=Wed, 19 Jul 2023 23:03:18 GMT; path=/ connection: close

GET /im0n/?hejeEiw=TrW6pHqt1MKD12fzlTIVY/zAdF+2OR7UWbm4lQzyVasMFf6YImOjdlT2uIyIHS8WT1QpyWZSRhwQrnxPMdhDKMi9esOBqOXPb2vniSE=&D6hm=jOua5v HTTP/1.1 Host: www.aquatic-organisms.info Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-us Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 200 OK date: Wed, 19 Jul 2023 22:48:20 GMT content-type: text/html; charset=utf-8 content-length: 1434 x-request-id: 403a5c79-6483-489d-b874-616463c1db15 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_PWnV7TOAlYyJAplF7UCFtv6GNdMFZbhDF7jyIkkhD0EJtXh41uR2eNVU+NCVkYla+VVqreahuiyhYbAb8u6qmg== set-cookie: parking_session=403a5c79-6483-489d-b874-616463c1db15; expires=Wed, 19 Jul 2023 23:03:21 GMT; path=/ connection: close