Network Analysis

POST /mcon/ HTTP/1.1 Host: www.fagallery.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Origin: http://www.fagallery.com Content-Length: 171 Connection: close Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Referer: http://www.fagallery.com/mcon/ User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 25 Jul 2023 22:54:55 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close

GET /mcon/?gN=rJW8o27P/gqPRSI0wuqXCcBWV3MCPe3Qi8ROeqUr40lzOd+BRDuNmyU/daBjpYLNNDfdIaWQHB2/zU0cdz0dSZCY/Bbb6xMd8kQ8zBA=&i50Q=_ezxJv-JovO9 HTTP/1.1 Host: www.fagallery.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 25 Jul 2023 22:54:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding

GET /2019/sqlite-dll-win32-x86-3270000.zip HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Host: www.sqlite.org Connection: Keep-Alive

HTTP/1.1 200 OK Connection: keep-alive Date: Tue, 25 Jul 2023 22:55:00 GMT Last-Modified: Fri, 08 Feb 2019 13:45:40 GMT Cache-Control: max-age=120 ETag: "m5c5d8804s75419" Content-type: application/zip; charset=utf-8 Content-length: 480281

POST /mcon/ HTTP/1.1 Host: www.bc081.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Origin: http://www.bc081.com Content-Length: 3407 Connection: close Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Referer: http://www.bc081.com/mcon/ User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 25 Jul 2023 23:14:06 GMT Content-Type: text/html Content-Length: 548 Connection: close

POST /mcon/ HTTP/1.1 Host: www.bc081.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Origin: http://www.bc081.com Content-Length: 183 Connection: close Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Referer: http://www.bc081.com/mcon/ User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 25 Jul 2023 23:14:08 GMT Content-Type: text/html Content-Length: 548 Connection: close

GET /mcon/?gN=pskxmoRFchsAbXFIn6Ds6WJWm93GPZXrd/fIfWEPkz26aGEkZ87oGPy24JF+yxwF1h0P/zwK8gLwn+yMtUteEtVFAkBJqDM7Jup+RKc=&i50Q=_ezxJv-JovO9 HTTP/1.1 Host: www.bc081.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 25 Jul 2023 23:14:11 GMT Content-Type: text/html Content-Length: 548 Connection: close

POST /mcon/ HTTP/1.1 Host: www.purelyunorthodox.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Origin: http://www.purelyunorthodox.com Content-Length: 3407 Connection: close Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Referer: http://www.purelyunorthodox.com/mcon/ User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 200 OK Server: nginx Date: Wed, 26 Jul 2023 06:39:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Content-Encoding: gzip

POST /mcon/ HTTP/1.1 Host: www.purelyunorthodox.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Origin: http://www.purelyunorthodox.com Content-Length: 183 Connection: close Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Referer: http://www.purelyunorthodox.com/mcon/ User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 200 OK Server: nginx Date: Wed, 26 Jul 2023 06:39:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Content-Encoding: gzip

GET /mcon/?gN=JxkY46YC9LBm3OkL8orXF7D68oVhabe0uO4APku638FfxldkBjOvcbwo9sb38aK0GSbzu/P0eNN4w2ybAPlnTHOTDB1A0VrJVW01pJA=&i50Q=_ezxJv-JovO9 HTTP/1.1 Host: www.purelyunorthodox.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 200 OK Server: nginx Date: Wed, 26 Jul 2023 06:39:51 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000

POST /mcon/ HTTP/1.1 Host: www.paybillnow.info Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Origin: http://www.paybillnow.info Content-Length: 3407 Connection: close Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Referer: http://www.paybillnow.info/mcon/ User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 404 Not Found Date: Tue, 25 Jul 2023 22:55:30 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html

POST /mcon/ HTTP/1.1 Host: www.paybillnow.info Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Origin: http://www.paybillnow.info Content-Length: 183 Connection: close Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Referer: http://www.paybillnow.info/mcon/ User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 404 Not Found Date: Tue, 25 Jul 2023 22:55:32 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html

GET /mcon/?gN=6l2bJH3lYuggsJGye7Ek7Djc2AhxQovbvd2YkjgUuVZ2vqa0aW8Pwj2WXOk/QoHCXwbnfhEZTCtL08rWUqnG/IhfnQVtlui9LEQGFPc=&i50Q=_ezxJv-JovO9 HTTP/1.1 Host: www.paybillnow.info Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 404 Not Found Date: Tue, 25 Jul 2023 22:55:35 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html; charset=utf-8

POST /mcon/ HTTP/1.1 Host: www.superxwin.app Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Origin: http://www.superxwin.app Content-Length: 3407 Connection: close Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Referer: http://www.superxwin.app/mcon/ User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

POST /mcon/ HTTP/1.1 Host: www.superxwin.app Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Origin: http://www.superxwin.app Content-Length: 183 Connection: close Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Referer: http://www.superxwin.app/mcon/ User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 403 Forbidden date: Tue, 25 Jul 2023 22:55:43 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close

GET /mcon/?gN=zXOJUe1DiQqRpKX/iPrmQy7/Wg64w+pTL1bjt+yOL2NGV+wW4eH3xNfsFSFyKke75OeaWtpTehrF3ed1/bJdwY3kBcAY+jnnbA/ldzE=&i50Q=_ezxJv-JovO9 HTTP/1.1 Host: www.superxwin.app Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 403 Forbidden date: Tue, 25 Jul 2023 22:55:46 GMT content-type: text/html content-length: 552 vary: Accept-Encoding server: NginX connection: close

POST /mcon/ HTTP/1.1 Host: www.triplemshipssupplies.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Origin: http://www.triplemshipssupplies.com Content-Length: 3407 Connection: close Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Referer: http://www.triplemshipssupplies.com/mcon/ User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240

HTTP/1.1 404 Not Found Date: Tue, 25 Jul 2023 22:55:52 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 Content-Length: 1054 Content-Type: text/html; charset=UTF-8