Network Analysis

POST /qcy4/ HTTP/1.1 Host: www.pedrovmota.xyz Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Origin: http://www.pedrovmota.xyz Connection: close Cache-Control: no-cache Content-Length: 195 Content-Type: application/x-www-form-urlencoded Referer: http://www.pedrovmota.xyz/qcy4/ User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 301 Moved Permanently Server: nginx/1.22.1 Date: Tue, 06 May 2025 13:19:25 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://www.pedrovmota.xyz/qcy4/

GET /qcy4/?auHpWf=nHTBc6ayBGRa/pSlbJfiStgmNyV4ae+77TdnGfYfjuOx5fWXKIRsjpkSmGzptaNx+NKwzgmPki0Hn64WoqcL/pwtW1C3EOemFtColwV6Yii9unD3A8G5DXjWm1p/eh0ZlJ8Ouic=&Cr=Yo0-9nrCWd5nl1X4 HTTP/1.1 Host: www.pedrovmota.xyz Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 301 Moved Permanently Server: nginx/1.22.1 Date: Tue, 06 May 2025 13:19:28 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://www.pedrovmota.xyz/qcy4/?auHpWf=nHTBc6ayBGRa/pSlbJfiStgmNyV4ae+77TdnGfYfjuOx5fWXKIRsjpkSmGzptaNx+NKwzgmPki0Hn64WoqcL/pwtW1C3EOemFtColwV6Yii9unD3A8G5DXjWm1p/eh0ZlJ8Ouic=&Cr=Yo0-9nrCWd5nl1X4

GET /2017/sqlite-dll-win32-x86-3190000.zip HTTP/1.1 User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16 Host: www.sqlite.org Connection: Keep-Alive Cache-Control: no-cache

HTTP/1.1 200 OK Connection: keep-alive Date: Tue, 06 May 2025 13:19:30 GMT Last-Modified: Mon, 07 Apr 2025 18:53:54 GMT Cache-Control: max-age=120 ETag: "m67f41f42s6cb3a" Content-type: application/zip; charset=utf-8 Content-length: 445242

POST /wgkn/ HTTP/1.1 Host: www.gsis.gr Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Origin: http://www.gsis.gr Connection: close Cache-Control: no-cache Content-Length: 207 Content-Type: application/x-www-form-urlencoded Referer: http://www.gsis.gr/wgkn/ User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 302 Moved Temporarily Location: https://www.gsis.gr/wgkn/ Content-Length: 0 Expires: Tue, 06 May 2025 13:19:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 06 May 2025 13:19:45 GMT Connection: close

GET /wgkn/?auHpWf=v1GdubO9X83ubizjJpCNXnnHyUiQhxD2jiPDG0Mmg+AfFRK/UpwKxCggA2hYlULaMXFx9fXWCoS2KatWsMNfsbQkSTg6Pkt6H6S7ia00CANLat5cq8SJ975/gCf/o+8nV+/EztI=&Cr=Yo0-9nrCWd5nl1X4 HTTP/1.1 Host: www.gsis.gr Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 302 Moved Temporarily Location: https://www.gsis.gr/wgkn/?auHpWf=v1GdubO9X83ubizjJpCNXnnHyUiQhxD2jiPDG0Mmg+AfFRK/UpwKxCggA2hYlULaMXFx9fXWCoS2KatWsMNfsbQkSTg6Pkt6H6S7ia00CANLat5cq8SJ975/gCf/o+8nV+/EztI=&Cr=Yo0-9nrCWd5nl1X4 Content-Length: 0 Expires: Tue, 06 May 2025 13:19:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 06 May 2025 13:19:46 GMT Connection: close

POST /31k4/ HTTP/1.1 Host: www.e45ht1.top Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Origin: http://www.e45ht1.top Connection: close Cache-Control: no-cache Content-Length: 207 Content-Type: application/x-www-form-urlencoded Referer: http://www.e45ht1.top/31k4/ User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

GET /31k4/?auHpWf=80MgHWxeVF8HIrHhvCCYnMkubkULOSoow26TNM3qtNk5aY0HYt1Oy94lFKaQRy42FpPj9q0CL7EGfsHd+WNYCk86cephpFrDovVlaWnhxdzCLgCgJMqwjItboIE/dAG0HqAx+E0=&Cr=Yo0-9nrCWd5nl1X4 HTTP/1.1 Host: www.e45ht1.top Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 200 OK Server: nginx Date: Tue, 06 May 2025 13:19:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding

POST /gcrj/ HTTP/1.1 Host: www.textureassets.xyz Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Origin: http://www.textureassets.xyz Connection: close Cache-Control: no-cache Content-Length: 207 Content-Type: application/x-www-form-urlencoded Referer: http://www.textureassets.xyz/gcrj/ User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 405 Method Not Allowed content-length: 0 connection: close

GET /gcrj/?auHpWf=sFP9+QQiYUIOuyYKeY78vDn1tr00fI7Ic5d9cydMX6PvAHJLaZK/JsnsBueybDdvyoBijYPP7+dwJVVaiyNhHv8qouU8cJ1e8ULhTo780jTMr40EFEipUkde7AcyII4g/IwEaRE=&Cr=Yo0-9nrCWd5nl1X4 HTTP/1.1 Host: www.textureassets.xyz Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 200 OK content-type: text/html date: Tue, 06 May 2025 13:20:04 GMT content-length: 278 connection: close

POST /j7zr/ HTTP/1.1 Host: www.well-prophesied.sbs Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Origin: http://www.well-prophesied.sbs Connection: close Cache-Control: no-cache Content-Length: 207 Content-Type: application/x-www-form-urlencoded Referer: http://www.well-prophesied.sbs/j7zr/ User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 200 OK date: Tue, 06 May 2025 13:20:09 GMT server: Apache set-cookie: __tad=1746537609.8834132; expires=Fri, 04-May-2035 13:20:09 GMT; Max-Age=315360000 vary: Accept-Encoding content-encoding: gzip content-length: 584 content-type: text/html; charset=UTF-8 connection: close

GET /j7zr/?auHpWf=s+Y3o0QG/6ffKR/H1fTjdmpUOuqDUsjlXSrH09/qbbK34YCOQ8q9lyGlSxMFCRX+rM7IAf0iFQSeE9i9EvmB6308h+X+YZ5or9YoEwF+QNbdU7vus/Ihx8CPxTjKhLyTXVgBb3I=&Cr=Yo0-9nrCWd5nl1X4 HTTP/1.1 Host: www.well-prophesied.sbs Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 302 Found date: Tue, 06 May 2025 13:20:12 GMT server: Apache set-cookie: __tad=1746537612.3913298; expires=Fri, 04-May-2035 13:20:12 GMT; Max-Age=315360000 location: https://www.well-prophesied.sbs/j7zr/?auHpWf=s+Y3o0QG/6ffKR/H1fTjdmpUOuqDUsjlXSrH09/qbbK34YCOQ8q9lyGlSxMFCRX+rM7IAf0iFQSeE9i9EvmB6308h+X+YZ5or9YoEwF+QNbdU7vus/Ihx8CPxTjKhLyTXVgBb3I=&Cr=Yo0-9nrCWd5nl1X4 content-length: 0 content-type: text/html; charset=UTF-8 connection: close

POST /72gy/ HTTP/1.1 Host: www.1177win.org Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Origin: http://www.1177win.org Connection: close Cache-Control: no-cache Content-Length: 207 Content-Type: application/x-www-form-urlencoded Referer: http://www.1177win.org/72gy/ User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 404 Not Found Date: Tue, 06 May 2025 13:20:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rbV0dmY3E8mGRXG101Jdn6vJYgk3aoW0pGH25T4Xf50o%2BW3BFxzDJx4Dhkn9JmmJMq%2BfRbUoZjuX1yuMm0gkx82%2F%2BL3yiY5qLMflQtNgHF7rwAnLvXMbG%2FrzjR2FJlUBOQw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 93b8c62da915d9df-LAX Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=161743&min_rtt=161743&rtt_var=80871&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=745&delivery_rate=0&cwnd=30&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

GET /72gy/?auHpWf=ARCeZtY+PpH/SEUCFIj9GZI2i0SuDNBggbqf1cbMXgQY3cKsTREOem5vl9chh1WJruFjqR5QC2JROGkuWrM2lMwz6ySDbliGcQR7Tp2/0OXbDnko+Zju50B5OnmggEWhsZ+FCyw=&Cr=Yo0-9nrCWd5nl1X4 HTTP/1.1 Host: www.1177win.org Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 404 Not Found Date: Tue, 06 May 2025 13:20:20 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rEFlCWHmpy7e%2FmFG%2BJ0chrPVn47WxPlr0kRnNrgRoi55uX4c6yBuTmNQdGRXuQsE9C1AbhBUDdILB0yiucyot1lDqzN6i%2FG1J0bBZ00Zg6k3Sq6v6bv5Uth%2B651Et5HfRTY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 93b8c63e0b931510-LAX alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=128305&min_rtt=128305&rtt_var=64152&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=499&delivery_rate=0&cwnd=30&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

POST /oy21/ HTTP/1.1 Host: www.stakeprompts.xyz Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Origin: http://www.stakeprompts.xyz Connection: close Cache-Control: no-cache Content-Length: 207 Content-Type: application/x-www-form-urlencoded Referer: http://www.stakeprompts.xyz/oy21/ User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 405 Method Not Allowed content-length: 0 connection: close

GET /oy21/?auHpWf=gwR9yty+A46bHvq9JzSBFuR+4WL6L06z0teJDsITz7d3spxd03Ajj14kBkGs8uMGNvPomsgZH6cY0v+w6n2dSZkJE5ffC7S3Q2C3WvYKZU0JkwG8GAkT+z0W9WQx4blhM3Ts8Zg=&Cr=Yo0-9nrCWd5nl1X4 HTTP/1.1 Host: www.stakeprompts.xyz Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 200 OK content-type: text/html date: Tue, 06 May 2025 13:20:29 GMT content-length: 278 connection: close

POST /s9jd/ HTTP/1.1 Host: www.noe300.top Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Origin: http://www.noe300.top Connection: close Cache-Control: no-cache Content-Length: 207 Content-Type: application/x-www-form-urlencoded Referer: http://www.noe300.top/s9jd/ User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 06 May 2025 13:20:36 GMT Content-Type: text/html Content-Length: 146 Connection: close

GET /s9jd/?auHpWf=hUSot/YmX3sUrJDF6EXQjhBYB+iNgVNkaMukcuJuwiXfrokiWIfZO7TIQLoGj2j/nsjQxxsop9g7du/hVG1yLZZce6v/7dUM130v6gm2o1CHK93NWhCKbvA9dmlbv7djNwHiqZI=&Cr=Yo0-9nrCWd5nl1X4 HTTP/1.1 Host: www.noe300.top Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 06 May 2025 13:20:38 GMT Content-Type: text/html Content-Length: 146 Connection: close

POST /ruia/ HTTP/1.1 Host: www.nukbo.top Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Origin: http://www.nukbo.top Connection: close Cache-Control: no-cache Content-Length: 207 Content-Type: application/x-www-form-urlencoded Referer: http://www.nukbo.top/ruia/ User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 404 Not Found Date: Tue, 06 May 2025 13:20:44 GMT Server: Apache Content-Length: 815 Connection: close Content-Type: text/html

GET /ruia/?auHpWf=Lk759KA42nR/k+pD5iBHCIezdbZeGevhvUidM7gi5JNP2WPPPryEh9yNMwh0Q8q0rsLIR7380zjjE/VjjrpCHCBmBg3BRoXKI7f914WdRgRYYUHvwHBxMPdkdjzmgC9/8ZGODyQ=&Cr=Yo0-9nrCWd5nl1X4 HTTP/1.1 Host: www.nukbo.top Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 404 Not Found Date: Tue, 06 May 2025 13:20:46 GMT Server: Apache Content-Length: 815 Connection: close Content-Type: text/html; charset=utf-8

POST /q621/ HTTP/1.1 Host: www.agshealthcare.net Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Origin: http://www.agshealthcare.net Connection: close Cache-Control: no-cache Content-Length: 207 Content-Type: application/x-www-form-urlencoded Referer: http://www.agshealthcare.net/q621/ User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

GET /q621/?auHpWf=oAs22CAZsdEeo6CdaM1Tgljb68ACYtIaJcLru51nbcrIEtmrpZ1DIq4JGHQTv/EU43fNIkAdexZsm4V8VBtfU53jdDCbrbxWSFShq67gqH7LLxhcHoLPDv/5nKSMeZhOfXAQUnw=&Cr=Yo0-9nrCWd5nl1X4 HTTP/1.1 Host: www.agshealthcare.net Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Connection: close User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 200 OK Date: Tue, 06 May 2025 13:20:54 GMT Content-Type: text/html Content-Length: 9973 Connection: close Vary: Accept-Encoding Server: hcdn alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: c590e7a7a4de59b30f2f514c1243f093-nme-edge8 Expires: Tue, 06 May 2025 13:20:53 GMT Cache-Control: no-cache Accept-Ranges: bytes

POST /4a3n/ HTTP/1.1 Host: www.fixitdrawer.info Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br Origin: http://www.fixitdrawer.info Connection: close Cache-Control: no-cache Content-Length: 207 Content-Type: application/x-www-form-urlencoded Referer: http://www.fixitdrawer.info/4a3n/ User-Agent: Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.17443/37.6334; U; en) Presto/2.12.423 Version/12.16

HTTP/1.1 405 Method Not Allowed content-length: 0 connection: close