Network Analysis

POST /stcf/ HTTP/1.1 Host: www.houtaijiaju.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en Content-Type: application/x-www-form-urlencoded Connection: close Content-Length: 171 Cache-Control: max-age=0 Origin: http://www.houtaijiaju.com Referer: http://www.houtaijiaju.com/stcf/ User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

GET /stcf/?el=1dqEu7FqG0Fk44M2SsORztBhqeVPz5dcffezXnqN6lUv5lMi6TOQp3fd1b+R5p9IBvl5i/IMrCH65j4DnfcQMtwjHinribTwYdLVWxQ=&isnBX=nywdxOY_N7CAIHs HTTP/1.1 Host: www.houtaijiaju.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

GET /2016/sqlite-dll-win32-x86-3140000.zip HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3; MARKANYEPS#25118) Host: www.sqlite.org Connection: Keep-Alive

HTTP/1.1 200 OK Connection: keep-alive Date: Mon, 18 Sep 2023 04:37:16 GMT Last-Modified: Wed, 10 Aug 2016 15:04:37 GMT Cache-Control: max-age=120 ETag: "m57ab4285s69f89" Content-type: application/zip; charset=utf-8 Content-length: 434057

POST /stcf/ HTTP/1.1 Host: www.saintprojetdesalers.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en Content-Type: application/x-www-form-urlencoded Connection: close Content-Length: 2075 Cache-Control: max-age=0 Origin: http://www.saintprojetdesalers.com Referer: http://www.saintprojetdesalers.com/stcf/ User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 302 Found date: Mon, 18 Sep 2023 04:37:24 GMT server: Apache set-cookie: __tad=1695011844.7903371; expires=Thu, 15-Sep-2033 04:37:24 GMT; Max-Age=315360000 location: http://ww25.saintprojetdesalers.com/stcf/?subid1=20230918-1437-24d0-8734-5bf7f96c6cbf content-length: 2 content-type: text/html; charset=UTF-8 connection: close

POST /stcf/ HTTP/1.1 Host: www.saintprojetdesalers.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en Content-Type: application/x-www-form-urlencoded Connection: close Content-Length: 183 Cache-Control: max-age=0 Origin: http://www.saintprojetdesalers.com Referer: http://www.saintprojetdesalers.com/stcf/ User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 302 Found date: Mon, 18 Sep 2023 04:37:27 GMT server: Apache set-cookie: __tad=1695011847.7393172; expires=Thu, 15-Sep-2033 04:37:27 GMT; Max-Age=315360000 location: http://ww25.saintprojetdesalers.com/stcf/?subid1=20230918-1437-2725-bff8-86fc1e753c50 content-length: 2 content-type: text/html; charset=UTF-8 connection: close

GET /stcf/?el=+e/LxL8BCb5JT2mwgKzbp1bNGh3lgePyU3D6l90SLvlYtUAerZBoaAu+StBCYI+EmdbaVLlpQ9qQs+tY0i0hLe/6ntyVXpS6CIyxXlk=&isnBX=nywdxOY_N7CAIHs HTTP/1.1 Host: www.saintprojetdesalers.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 302 Found date: Mon, 18 Sep 2023 04:37:30 GMT server: Apache set-cookie: __tad=1695011850.6150011; expires=Thu, 15-Sep-2033 04:37:30 GMT; Max-Age=315360000 location: http://ww25.saintprojetdesalers.com/stcf/?el=+e/LxL8BCb5JT2mwgKzbp1bNGh3lgePyU3D6l90SLvlYtUAerZBoaAu+StBCYI+EmdbaVLlpQ9qQs+tY0i0hLe/6ntyVXpS6CIyxXlk=&isnBX=nywdxOY_N7CAIHs&subid1=20230918-1437-30bf-930b-b16cf2c67786 content-length: 2 content-type: text/html; charset=UTF-8 connection: close

POST /stcf/ HTTP/1.1 Host: www.ronikonmet.online Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en Content-Type: application/x-www-form-urlencoded Connection: close Content-Length: 2075 Cache-Control: max-age=0 Origin: http://www.ronikonmet.online Referer: http://www.ronikonmet.online/stcf/ User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 404 Not Found Server: nginx Date: Mon, 18 Sep 2023 04:37:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip

POST /stcf/ HTTP/1.1 Host: www.ronikonmet.online Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en Content-Type: application/x-www-form-urlencoded Connection: close Content-Length: 183 Cache-Control: max-age=0 Origin: http://www.ronikonmet.online Referer: http://www.ronikonmet.online/stcf/ User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 404 Not Found Server: nginx Date: Mon, 18 Sep 2023 04:37:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip

GET /stcf/?el=uecC1YIjKds5pfO1EToES15TCdBTvi7vIYoUJgTFy6qDYT2nEUgo5MyoghBmj6FTuqUN6uVJE1bE0H4aXubCPUG1zI5pjeamkbBuCmA=&isnBX=nywdxOY_N7CAIHs HTTP/1.1 Host: www.ronikonmet.online Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 404 Not Found Server: nginx Date: Mon, 18 Sep 2023 04:37:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close

POST /stcf/ HTTP/1.1 Host: www.hummall.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en Content-Type: application/x-www-form-urlencoded Connection: close Content-Length: 2075 Cache-Control: max-age=0 Origin: http://www.hummall.com Referer: http://www.hummall.com/stcf/ User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 404 Not Found Date: Mon, 18 Sep 2023 04:37:47 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://hummall.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

POST /stcf/ HTTP/1.1 Host: www.hummall.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en Content-Type: application/x-www-form-urlencoded Connection: close Content-Length: 183 Cache-Control: max-age=0 Origin: http://www.hummall.com Referer: http://www.hummall.com/stcf/ User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 404 Not Found Date: Mon, 18 Sep 2023 04:37:50 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://hummall.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

GET /stcf/?el=Nk5K1Xbn5LNktyygdQF3BnmJ+burJ+ny2OkZcNPXdwEtJdOtq79vPWmp/B6BaLcWj3tVzmTo+5PqGZIC/UTM1vSFnsb91g1hVUGRl4c=&isnBX=nywdxOY_N7CAIHs HTTP/1.1 Host: www.hummall.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 301 Moved Permanently Date: Mon, 18 Sep 2023 04:37:52 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Upgrade: h2,h2c Connection: Upgrade, close Location: http://hummall.com/stcf/?el=Nk5K1Xbn5LNktyygdQF3BnmJ+burJ+ny2OkZcNPXdwEtJdOtq79vPWmp/B6BaLcWj3tVzmTo+5PqGZIC/UTM1vSFnsb91g1hVUGRl4c=&isnBX=nywdxOY_N7CAIHs Content-Length: 0 Content-Type: text/html; charset=UTF-8

POST /stcf/ HTTP/1.1 Host: www.admiralx-qjff.buzz Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en Content-Type: application/x-www-form-urlencoded Connection: close Content-Length: 2075 Cache-Control: max-age=0 Origin: http://www.admiralx-qjff.buzz Referer: http://www.admiralx-qjff.buzz/stcf/ User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 301 Moved Permanently Date: Mon, 18 Sep 2023 04:37:58 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Set-Cookie: __ddg1_=3fmzWR2UmBhSogfXAZMg; Domain=.admiralx-qjff.buzz; HttpOnly; Path=/; Expires=Tue, 17-Sep-2024 04:37:58 GMT Location: https://admiralx-memr.buzz/stcf/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cJ8czj%2Fy29xfREq8WAQtu3jIphnQTsJ9aZ%2B4wIf5Gv9jQ%2FVFy8Nbm%2FKxCTk38hSYsBSo2ro59O%2Fh3tROib8Rf4QC0ZAUVnlbSJVcqXvguuDRN%2BqwUKCyF2scYt6LgHzEwqUEzCq5Kjzz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8086e58e4bb2837c-KIX alt-svc: h2=":443"; ma=60

POST /stcf/ HTTP/1.1 Host: www.admiralx-qjff.buzz Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en Content-Type: application/x-www-form-urlencoded Connection: close Content-Length: 183 Cache-Control: max-age=0 Origin: http://www.admiralx-qjff.buzz Referer: http://www.admiralx-qjff.buzz/stcf/ User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 301 Moved Permanently Date: Mon, 18 Sep 2023 04:38:01 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Set-Cookie: __ddg1_=rX2nPq4yxDqojH7Szl44; Domain=.admiralx-qjff.buzz; HttpOnly; Path=/; Expires=Tue, 17-Sep-2024 04:38:01 GMT Location: https://admiralx-memr.buzz/stcf/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A7CK4ICOhrtYM%2BeaerYHOsK4rVK62qXcrMLPkGn5O83KfRAPCE2zYuS3jWCpvovQRk%2B%2B0EdgHnNHi8%2FS3fz2fO11K0OtABGMDbhGHjHAC6AGtTEjpq0kh9VXbY6wy1tJd07BcKTZy1xL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8086e59e0d5c1a0d-KIX alt-svc: h2=":443"; ma=60

GET /stcf/?el=/cN5NAnYyQNGkv6VI4g5hCl6zLANo+Uxyk0R0Gf4W9JvbRZK1NaF3DJOi9LLfoZAma38Eec3ft5h7udphOb57G+0pUhbPZipWhAdHO0=&isnBX=nywdxOY_N7CAIHs HTTP/1.1 Host: www.admiralx-qjff.buzz Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 301 Moved Permanently Date: Mon, 18 Sep 2023 04:38:03 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Set-Cookie: __ddg1_=OnIVizQcnnrBa7mOVz3w; Domain=.admiralx-qjff.buzz; HttpOnly; Path=/; Expires=Tue, 17-Sep-2024 04:38:03 GMT Location: https://admiralx-memr.buzz/stcf/?el=/cN5NAnYyQNGkv6VI4g5hCl6zLANo+Uxyk0R0Gf4W9JvbRZK1NaF3DJOi9LLfoZAma38Eec3ft5h7udphOb57G+0pUhbPZipWhAdHO0=&isnBX=nywdxOY_N7CAIHs CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MMa6%2BkGbxcMZiJ1bUe4OJZG8oypk%2F1lYAnU4esRfjfaZaChKbG%2F42CG8y8rT12tKls2x7UJM4GJxKSsqZB87HQKptbKAKS%2FYEBNf9qLXCB4gTUtBmWKeezrG2srbL%2FSVOu6KkLK00vWg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8086e5add8821a18-KIX alt-svc: h2=":443"; ma=60

POST /stcf/ HTTP/1.1 Host: www.innovativefewsustra.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en Content-Type: application/x-www-form-urlencoded Connection: close Content-Length: 2075 Cache-Control: max-age=0 Origin: http://www.innovativefewsustra.com Referer: http://www.innovativefewsustra.com/stcf/ User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Sep 2023 04:38:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=; path=/; domain=.www.innovativefewsustra.com; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=; path=/; domain=www.innovativefewsustra.com; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=b81decb0413fe0d06d0e25c752f8d4e2|175.208.134.152|1695011891|1695011891|0|1|0; path=/; domain=.innovativefewsustra.com; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Set-Cookie: snkz=175.208.134.152; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT Content-Encoding: gzip

POST /stcf/ HTTP/1.1 Host: www.innovativefewsustra.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en Content-Type: application/x-www-form-urlencoded Connection: close Content-Length: 183 Cache-Control: max-age=0 Origin: http://www.innovativefewsustra.com Referer: http://www.innovativefewsustra.com/stcf/ User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Sep 2023 04:38:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=; path=/; domain=.www.innovativefewsustra.com; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=; path=/; domain=www.innovativefewsustra.com; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=dc098442b4abd0a47f5e710a562015d4|175.208.134.152|1695011893|1695011893|0|1|0; path=/; domain=.innovativefewsustra.com; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Set-Cookie: snkz=175.208.134.152; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT Content-Encoding: gzip

GET /stcf/?el=KMOD9sTNx2YSpovUrRJUEzn1Yx0Z43DK6JEh/zvUzYRR0vvq/o2vdjVBrU8HPW3QMgYOZkgxf1P3X+8HybL4wtlflHnPghnD15Ngsf8=&isnBX=nywdxOY_N7CAIHs HTTP/1.1 Host: www.innovativefewsustra.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Sep 2023 04:38:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=; path=/; domain=.www.innovativefewsustra.com; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=; path=/; domain=www.innovativefewsustra.com; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=c223b7963b4febbfd37a88f8ca3bb891|175.208.134.152|1695011896|1695011896|0|1|0; path=/; domain=.innovativefewsustra.com; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Set-Cookie: snkz=175.208.134.152; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT