{"report_id":"82f8d9f0-c68a-4bdb-a0d1-bcf6ebcc4736","version":6,"status":"done","tags":[],"date":"2025-08-17T20:06:16Z","url":{"schema":"http","addr":"v3.mp3juice.za.com/convert","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"104.21.38.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"v3.mp3juice.za.com/convert","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"title":"MP3Juice - MP3 Juice Downloader | Free MP3 Music Download"},"submit":{"url":{"schema":"http","addr":"v3.mp3juice.za.com/convert","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"104.21.38.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-21T20:06:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"upskittyan.com","ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-08-31","domain_rank":93889,"first_seen":"2021-09-01T09:02:19Z","last_seen":"2025-08-09T20:21:10.863834Z","alert_count":0,"request_count":13,"received_data":57678,"sent_data":6575,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"v3.mp3juice.za.com","ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-22","domain_rank":0,"first_seen":"2025-08-17T20:06:16.786585Z","last_seen":"2025-08-17T20:06:16.786585Z","alert_count":16,"request_count":16,"received_data":197592,"sent_data":7321,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-13T15:12:46.750635Z","alert_count":0,"request_count":1,"received_data":344348,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LQMW6829ZT","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2c941bdbbe0b8f98bf80f763487ceac","sha1":"3dfa21edbffd12d0a32fa95b91c60c7e9157dfa4","sha256":"8f03ff0f53dfdfdf0a56fe9856da261fe25bade9da3ce148635f22500f6feedc","sha512":"2232ffbd3e7a1dc55e3353b3c72f81263bd11193b90113c99c69328e839ef7e7e6762559186c3805a24bb10f650a8f475075f857eba91079b33c0acc91a78ce3","ssdeep":"3072:hvjpg61JLwDPLFAddzT0SE5DHSb5qlUmxxgJgJ471MSXw1PMqaW/uSoTQtF021a/:PmLLFAdd3tIxgwhqW/uSoTuFHaKPDDI","tlshash":"177429cd73d670629392b478503f008bb17b28a2f44cc899f186d9e52e74aaa5177f7c","size":343347,"data":"","first_seen":"2025-08-17T20:06:19.201055Z","last_seen":"2025-08-17T20:06:19.201055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-13T00:46:31.224117Z","times_seen":113716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/act/files/micro.tag.min.js?z=8811823\u0026sw=/sw-check-permissions.js","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"db71d84f87c7e00f06d20bf568ecfce8","sha1":"4c76872b638bac29f93a3416b2bdc388306e5d43","sha256":"a09aee48a80ae2746298de748facafd7b9b10d9a41518ce9a9e2ad659c28dfb6","sha512":"e4f36f8d2865f8ac49bff4fba98b2e02ee372acaf47d3d540e4185a88f3e5a10fa4a484ea0a0c62c29da035f93401af854b3daa45c5bdade84375ad611383184","ssdeep":"1536:PAzcHpjuM/kot1+QPzyoBvtGaFW8T3mgEeQQW9SPJ:NJ9/xmWtxLEnSR","tlshash":"c733e943bc7eb9aa07e264c1883f8d4497abdd50b82fd9d5e40c59a22427005a3b7ff5","size":50709,"data":"","first_seen":"2025-08-11T23:05:10.658264Z","last_seen":"2025-08-20T17:32:53.827438Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/js/custom.js","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcbf723b15160d8a057a9181d00cac99","sha1":"6d0101d99e0fef1b6f2674ceb3207547b1ef2a66","sha256":"fd87a5ea66ed5df3bed447e9e4df7e57db2a783c7c578ada6170549449ee27c5","sha512":"4c5ff6b45c4600e1e6410150f3c7cc54b522fe120a6dc8196d8ff026996fe40acf8634b75698899a5c245857f37f0a5ab71c7d78dee8297f476609c4e57db2fd","ssdeep":"","tlshash":"4351af04f5a286b08077306e4f7fc1845dad5c177206ed84396f69884fa4ba8a49f2a7","size":2652,"data":"","first_seen":"2025-08-17T20:06:19.202269Z","last_seen":"2025-08-17T20:06:19.202269Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/convert","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65d51756f8b63301c83e895ac10abb99","sha1":"e52a08fd760c169958cd0f8c2f5f2987b90f791b","sha256":"c8a7bb72fe69210dc73fea5d7d5a05fe25ad3b1c1289eaa384b356fe39f5c728","sha512":"4513b375bd807b618bb465e60960ced7ba277ebcdb7a1fc2bcc44d4aef10b949c899f9bdf54dfee61218d1a4c292a549826e4f1d66f0364bb78427e343beed88","ssdeep":"","tlshash":"e3c08c88210b0c7144e72a4a4f3f7905b006621350905d32290a63088f30d1bd748d48","size":164,"data":"","first_seen":"2025-08-17T20:06:19.223932Z","last_seen":"2025-08-17T20:06:19.223932Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/js/jquery.min.js","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baa2ebc4024ea8253200d2a9ec8ab7f","sha1":"5b80f75e1c29bddf5c1e5b93537fd8fb5a8e2e47","sha256":"c4a9d8cb902fe26a4566e861d0df12cbe2fec3c7c8fe6583d2a71f25bb3b9856","sha512":"7ab6866cce6601ec5bfd03471aa0692b9ba76b90813208f9422ab5dbc7032a0f8b3b3e464fa29854499480006ad8ad7a933b9b781d27f4bc957ed9a96e1ed90b","ssdeep":"1536:Hi/oGaLzMxuvh4g088wTWsgpL75FjO8uErMUxB5GsXONmK7hoCqLY2:Z/iwTTgpp2kGs+pqLY2","tlshash":"aa8319ddb2c6b06257a771bd00bf510bf236194d280d8440f129e8e9bc79a4a927bf7d","size":86677,"data":"","first_seen":"2024-07-11T16:27:34Z","last_seen":"2026-05-17T03:09:16.297372Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/convert","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fb2f114b682c24b2659d049f0e5215c","sha1":"09558358a54740db12cbc96af463f5e63a31b940","sha256":"950ba8c0bf0d6c320be43f5e68238be223b0c8bca767433f275961efeaf7aa2b","sha512":"6400637f81a7783e4ed91687e6be27317e6ea2bb7582d0112b36ad30cbd4059ba32aa929e98ae9ef51eebaf30c555cbf70c78e3f576732b018695ac0ec340887","ssdeep":"192:UMrbQocEKOw/Y4z414EtrU4ViH/E3krb+bCwDNUqPdg9Fi39uwSuGIKGpwK:UMrb4YWGfrEE0rbhcP","tlshash":"1682820e78aa84b3097724ab1b7f65053157641bc30ade00f46ea3f06f8d839b5766db","size":17705,"data":"","first_seen":"2025-08-17T20:06:19.225342Z","last_seen":"2025-08-17T20:06:19.225342Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"upskittyan.com/event","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"OPTIONS /event HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://v3.mp3juice.za.com/\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid\r\naccess-control-max-age: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/event","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"OPTIONS /event HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://v3.mp3juice.za.com/\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid\r\naccess-control-max-age: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/image/favicon.ico","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /image/favicon.ico HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 05 Feb 2024 04:23:18 GMT\r\netag: \"1536-6109ad23f75c1-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2039\r\ncontent-type: image/x-icon\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jmSn6gzhrMlCb1uPntWDGMlfsnNOUfK%2BqQ3M1EujjQZo0Q1HIweLm0Y69GlcPi2JLIKetJPOSTblUPjaR9gr3xP2kl5oXPX50lcDccWZNCiHOA%3D%3D\"}]}\r\ncf-ray: 970bc9f88b09370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"2105fcc5b355d3ae5b8b1a9df0f1317b","sha1":"55cc174311ee1eb5c38a56fab53b5f15fbdeef8e","sha256":"93e7f9defa9e1c86e3dd546a478cea412e0743502802270277033a1fe470d84e","sha512":"28f3dd32780fb6bea768ef91c78116fa29d203832b732eaf8fd53e922e05fdc9392aab887ad204419f35efc51d1a1d7ca4fd8992b02dc48a1f1982107352bfb4","ssdeep":"48:nxxxxxxxxxx50h+51e0/uHWDN0cBFyQyriuSXPEysz4sFGgOxQ0f0nnnnnnnNp+P:ao51ei5Ny9wsz4pbf0nnnnnnnWUQqHw","tlshash":"32b1f2e34f68e47ace185734e636623140b63cbae5f1a17cb9fd30081ab1641181af37","first_seen":"2023-05-07T19:05:52Z","last_seen":"2026-05-23T18:47:37.389596Z","times_seen":170,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/convert","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-17T20:05:53.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /convert HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZTuehfOm18kitoNU5BE4XqvS3P9DjUO4192E2Af69pKRYjjFk%2F86foMLLni4rUsbgHvWXhybwdLFhEVGaWbcmWFI8OrO4jRXIvq1%2FJETd7pMA%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 4684\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 17 Aug 2025 18:47:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 970bc9f3ae2549cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33965,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1340), with CRLF line terminators","md5":"9655b337830c5fd84d32780245b9ca34","sha1":"367656e5721f8ea7350a5dd1fa3fbafd59fa2d31","sha256":"a37b82cd959f74275486dfcf3cbf16338a60e6a787baec2b6850f3c41cc05da2","sha512":"e263817fb75b4c9f815a0be525652d2738dc22842af95d73c758280c5030890f5db784222b4cac74cb488a2ed02abdb3da408d680a99d9fe456ba5a4ee19e25b","ssdeep":"384:JdEZ8kDegUtX01G9Wl0mMlzrkXrbNYWGXrbEYrbVXiA9:QOkDKtX01G9EklzQXrRYWGXrbEYrBSg","tlshash":"d0e2c46f64888563017352e6ab3b7754fa97501b8304ca01f8be53a67fb5e20d5339cb","first_seen":"2025-08-17T20:06:19.197649Z","last_seen":"2025-08-17T20:06:19.197649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":47,"dns":9,"connect":8,"send":0,"wait":34,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/css/style.css","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 3529\r\nlast-modified: Mon, 25 Nov 2024 11:07:01 GMT\r\netag: \"3d4c-627babb5f0aba-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 6311\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8qJ7GuikFtAjMhFHSsZePFGO1CJWYXIDA6FHWXtMmSWjFi%2BAStf69v7Do%2FIN%2BGJQX2WO136AHr%2FxS3NQmyNdrD82%2FIilfxjdmdpc2l8%2BgJ6Fg%3D%3D\"}]}\r\ncf-ray: 970bc9f58c4649cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15692,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (1305)","md5":"8f94d0d49c7e44a209767deeae8d4f99","sha1":"dd06f5b7ba0cc5da64a133b4bfdf9bed325573ac","sha256":"e7274777ab800b77e39910f09e799e7375cffd44d24491469877b17a558ca0eb","sha512":"b41f71c3632edf3691eefec95b7d791dbf60c7c2c2e059dbd292e2218fb0ba31a93e330543d1b5fd27b55f2eb2a29a18038338863172a42d920f90c18e8ff8b9","ssdeep":"192:mHpwruC4mu2aFp915bK9k0jqhNNccFGM4spNGMA13dJOnk0Q2/wrRoUq4POdCbNN:ruC1+FplIkfhhFRdpodebwlq4cCp4W5","tlshash":"e46275c777b55408741bd4b1bd539b8a632cd013a50fddb8aaf020acde981fa26b274d","first_seen":"2025-08-17T20:06:19.199109Z","last_seen":"2025-08-17T20:06:19.199109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/image/telegram.svg","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /image/telegram.svg HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 524\r\nlast-modified: Fri, 08 Mar 2024 05:21:13 GMT\r\netag: \"35a-6131f5c4d1881-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 6318\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61M5HLL3KJRrcxdjesIKIKNMoRcAy5HmoNmaKTsK%2BV5ykyoW1N3y7z1eBXZjK6LREU8MizlT%2BADdKqv%2BJnhwL4JJABk6GdMGLU55NeRHtXz%2Bdg%3D%3D\"}]}\r\ncf-ray: 970bc9f59c7a49cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":858,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3f5e90fa57764cd951db1b1bc688edd","sha1":"b620a8a9cbbdf976ae6a605ebac91107e7adc178","sha256":"03e42b95e9049816d901eabbe2a2247deda61a85972e3a50e3c8274e6c5fe39b","sha512":"394a233b18e93d298807e54b137355f9c6f68a89287ad75cb0d331592dbc9b8c529fa0ecd370ff6f30c2efa34af77eeee88b62a2a7005ebf8fa9bf12f703a30f","ssdeep":"","tlshash":"e411c20d4303c8799a5d431193b4955533f0edc7e5b454d4bbb718aae15d4ca230d6ec","first_seen":"2023-04-07T04:21:35Z","last_seen":"2026-06-12T21:49:43.712133Z","times_seen":159,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LQMW6829ZT","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-LQMW6829ZT HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\nexpires: Sun, 17 Aug 2025 20:05:54 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 120080\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343347,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"f2c941bdbbe0b8f98bf80f763487ceac","sha1":"3dfa21edbffd12d0a32fa95b91c60c7e9157dfa4","sha256":"8f03ff0f53dfdfdf0a56fe9856da261fe25bade9da3ce148635f22500f6feedc","sha512":"2232ffbd3e7a1dc55e3353b3c72f81263bd11193b90113c99c69328e839ef7e7e6762559186c3805a24bb10f650a8f475075f857eba91079b33c0acc91a78ce3","ssdeep":"3072:hvjpg61JLwDPLFAddzT0SE5DHSb5qlUmxxgJgJ471MSXw1PMqaW/uSoTQtF021a/:PmLLFAdd3tIxgwhqW/uSoTuFHaKPDDI","tlshash":"177429cd73d670629392b478503f008bb17b28a2f44cc899f186d9e52e74aaa5177f7c","first_seen":"2025-08-17T20:06:19.201055Z","last_seen":"2025-08-17T20:06:19.201055Z","times_seen":1,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":106,"dns":1,"connect":8,"send":0,"wait":25,"receive":27,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/event","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 366\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 81\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/js/custom.js","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 05 Feb 2024 04:23:22 GMT\r\netag: \"a5c-6109ad274af0f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 808\r\ncontent-type: application/javascript\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\nserver: cloudflare\r\nage: 5499\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzYQZGc6T1KJSms%2FravkPLwF%2Br1vX9Ft48%2BqgsSTHU7Tk1GlS%2F%2FICPjr%2FrwXiLzPhbe9gtbDl%2F5ESlg9fOuzWuZijgxNo0N0Eb%2Fc3eS94virsA%3D%3D\"}]}\r\ncf-ray: 970bc9f66a0b370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2652,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bcbf723b15160d8a057a9181d00cac99","sha1":"6d0101d99e0fef1b6f2674ceb3207547b1ef2a66","sha256":"fd87a5ea66ed5df3bed447e9e4df7e57db2a783c7c578ada6170549449ee27c5","sha512":"4c5ff6b45c4600e1e6410150f3c7cc54b522fe120a6dc8196d8ff026996fe40acf8634b75698899a5c245857f37f0a5ab71c7d78dee8297f476609c4e57db2fd","ssdeep":"","tlshash":"4351af04f5a286b08077306e4f7fc1845dad5c177206ed84396f69884fa4ba8a49f2a7","first_seen":"2025-08-17T20:06:19.202269Z","last_seen":"2025-08-17T20:06:19.202269Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/event","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"OPTIONS /event HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://v3.mp3juice.za.com/\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid\r\naccess-control-max-age: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/event","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v3.mp3juice.za.com/\r\nContent-Type: application/json\r\nContent-Length: 364\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 81\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f771e9d01fdfc28299ee060c034b22ab","sha1":"b1953ea771c413e8f4d349c12bef319e92550215","sha256":"7a8030573ccf2361866f43330d4ef6dd21891c0ce190a5d2a797b767d4980ce7","sha512":"53c133a94cc3fb2605f275311ea3cdb063d406b0ecd406f5e5478d12e715f647727a82420e04ec81765093fa830572727e4746aa1da03fe5e7d6f743ea507ae6","ssdeep":"","tlshash":"27a022a0200c3c2000c3ce0b00bcef002efc08fb0a282020e8be3eb000280c2c38220f","first_seen":"2025-08-17T20:06:19.203407Z","last_seen":"2025-08-17T20:06:19.203407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/event","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 446\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 81\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/image/twitter.svg","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /image/twitter.svg HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 259\r\nlast-modified: Fri, 08 Mar 2024 05:21:14 GMT\r\netag: \"170-6131f5c5a2854-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 6318\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJVF6dexnAl1f%2FC0w%2Bj8Qq9h29cZmox9zKWV4TmWtzX05Eu2xnG7SzjLv%2FQS%2Bc8AvqS4ZvdnBmmAn9VEEkZCRlEHUB4kC7pGr%2BQvzjRC2CyqgA%3D%3D\"}]}\r\ncf-ray: 970bc9f59c6b49cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2deb3d5121d475d195577a70b0a91a0c","sha1":"a9464c6b41f55697d7aad35c2555a95c476d5fd2","sha256":"76ffdc5337cd5a509f15d70767b85a793aead82975d0d86912e1607e963c9aed","sha512":"38671a7f4465b093d5e98675671b132b41f623b552edec29477a69f2b552ce6dc6dca81c85faea57e0657657e2c0d67e46fce6f158a57e8b320e806c78ced448","ssdeep":"","tlshash":"58e068eec28cc1c0850566622638647b8b3a31e1b5a6c9a9d6d2331ca9858d7692d9c8","first_seen":"2024-08-20T09:58:31.763225Z","last_seen":"2026-06-12T21:49:43.664168Z","times_seen":341,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/image/logo.png","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /image/logo.png HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 22906\r\nlast-modified: Thu, 21 Mar 2024 09:30:00 GMT\r\netag: \"597a-6142859ef25df\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 6318\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6deH1xSDpp3YDiD9tYbXwkCJvTAY8%2FPPfz71PCvrFIYy8TMPX9guTIz3WAmD36pbX6ItkBP35fgqjPttIYLpro7QxhR5XFqWy14OOvKbajRILA%3D%3D\"}]}\r\ncf-ray: 970bc9f58c4f49cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 221 x 125, 8-bit/color RGBA, non-interlaced","md5":"46ea648f1090e05250f4a23de6ad77ca","sha1":"257273c0aaeaaf21583a0884cbccea55916ec51c","sha256":"a5f039e17770752870f82c3e5ed91494ed7675723706a9ba8379efdf0131f501","sha512":"37ffc358708a00d02f3ded13abc8d8843d2fea2b236d21322a8c113a6c3b01b8ee32742280d55bffeecd53502b2364cc99cb03b8f114d3e150cf77934e8d66d7","ssdeep":"192:IIIHUCD4wamk6e0izAL5P/fotc4ucn8qytP1rTAXyF8k:W0wO6H53foyc8LXAiak","tlshash":"15a28d78f9f4f1061144a93928d691055e73438be2c09dc6faec8d5b5f10faa9c2f392","first_seen":"2024-02-12T00:34:12Z","last_seen":"2026-03-02T12:38:42.988158Z","times_seen":20,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/event","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v3.mp3juice.za.com/\r\nContent-Type: application/json\r\nContent-Length: 361\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 81\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7cef486d9e199492304d64d2acf44649","sha1":"d2e4eb554994cab3d31bbcc457efc648eb017e18","sha256":"c988f583d156318327e1a3e0aadbc71f932d4a668cbc45577765ef5ddeb4d2b9","sha512":"73d291f25b793895ca42c2a14001558719500af0aad25ced763b1f27ff6a9af682bb64cd553920b6d7166a255ed85bdd6a73d57bc16acdfad5979dae2fc496dd","ssdeep":"","tlshash":"5ea012ac41044e0811840a4251665600183c1733c5162094962e2e101414440811b30a","first_seen":"2025-08-17T20:06:19.208487Z","last_seen":"2025-08-17T20:06:19.208487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/image/line.svg","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /image/line.svg HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 915\r\nlast-modified: Fri, 08 Mar 2024 05:21:15 GMT\r\netag: \"931-6131f5c691c89-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 6318\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SndJZg0hQDdEe0KAtpbuZqADDdzcOIUSRe1M1YxJHlBc5zrAYNdrEs5PpufStVPZyHSFrUFbqlTEzzPBLbEa9oMH59sz0FEFFOqJ399Pljk7Vw%3D%3D\"}]}\r\ncf-ray: 970bc9f59c8049cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2353,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f114f68f5dbd70bc6843bb7944370956","sha1":"ef7a879fe6db21b9e5ba449e25308b67704e5e04","sha256":"f274414cc53c1d106e07254c41d6c097df20199bc761e6c5c210a768e389958e","sha512":"070e62d4ce8929c7c28833aa369038157f9ca1a2abc10d3febdd679df68b09dbc7f36f4140d43c460f06a1cd44cae208fdc5c346a78940a101173762d2430034","ssdeep":"","tlshash":"f441ce35b7004668f8bf03e4dff9252716294d5d20391b60d5b727a0f4f9ae21096c7e","first_seen":"2024-08-19T23:59:23.211088Z","last_seen":"2026-05-09T10:38:35.300782Z","times_seen":11,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: application/javascript\r\nexpires: Sun, 17 Aug 2025 20:53:54 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8%2Bi%2FtLu4Kbrh3rQWI0ucwAERtJXEVolO1owdrplXAz0J%2BPKLy6HFlAHK50M5lox2yNlwkiMyHiXSl7cZXqwE7Un%2FrHOBpKj%2B4NmD8Dh9M1%2Fng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 970bc9f59c8a49cd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-13T00:46:31.224117Z","times_seen":113716,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/event","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v3.mp3juice.za.com/\r\nContent-Type: application/json\r\nContent-Length: 368\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 81\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e32cad54b4f670551babc602f799d47","sha1":"ab65916ad3c41fc2d5270245fe14dc48bf0a70d1","sha256":"9bf9fca6f2e807c3cd28c8ca7bb9e1fb4dbc288d7109b59de68fb68f0c6bf10b","sha512":"4a02898430a83271cac6a64be829a0ff68065dee96778dc4e557bc3146bffc52bee8dc5dacc8e7a1dae190f6fb96b94604a047470f49ad5f70dfa813cc672cde","ssdeep":"","tlshash":"1ca012905809444444430e000090583c043c57720786512c6a58fa2480407012105003","first_seen":"2025-08-17T20:06:19.212591Z","last_seen":"2025-08-17T20:06:19.212591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/image/facebook.svg","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /image/facebook.svg HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 235\r\nlast-modified: Fri, 08 Mar 2024 05:21:15 GMT\r\netag: \"12d-6131f5c6747c7-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 6318\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tmzSr4Qd%2B5TWRexwRbBK%2FgQlxc%2B12fm7Qh1NbRTz1BqNXwX3si6Hd195Synwdiexj8WKlqxfcRZFug719BJXVsfjH3Jy%2Bw6ErN%2F%2BLU8yLT5xQ%3D%3D\"}]}\r\ncf-ray: 970bc9f59c6549cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6e9be45643e197ce1db1d7e24a99adc","sha1":"d7338e398bb0f7a9082d24f121140d2cf9e88859","sha256":"768d97ec0916217ae82c70aeda3a61b9b0dab344edc4a3240a4f7cd94af00307","sha512":"8033a55b544066aceb01404f0102d7651e9d731ebc04a164a831fc32006f826f4169929da42363d818b93cfa3a04b3568e26621b26b73d1cdf00faae23887345","ssdeep":"","tlshash":"22e0eb35d28ac59be01c0a462b78d114733790ee42d8811b79650301afa96cc5d1f1ef","first_seen":"2023-04-07T04:21:35Z","last_seen":"2026-06-12T21:49:43.694126Z","times_seen":404,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/image/messenger.svg","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /image/messenger.svg HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 283\r\nlast-modified: Fri, 08 Mar 2024 05:21:16 GMT\r\netag: \"174-6131f5c73da99-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 6318\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B49RfQwXhu1RjkFvly9MfNpPsYuUp%2FsjfuiqNWeDfMM2%2FbRcrgSjKaoKOtqKn18pjz6B%2F9oeqhwH8tCncQsmmy5tfkL82QHEaHEcQJlBKPWXmw%3D%3D\"}]}\r\ncf-ray: 970bc9f59c7549cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5aa43fa302867d3e888ac2f69b7b288","sha1":"952b104251965ac706baca3a022c103104e8fabe","sha256":"2986551fd9e82929eabb8cba7c44f74a28d8496c744893432f067b320dff55da","sha512":"c32af9ecf054f30fe9ebf1362385ba8e11106169251d433beacec02f3e0d7c078e35c109167b1360707bc5f1b0718b00e9044e2c75633f6d263f2c8b87274e2b","ssdeep":"","tlshash":"35e0c06ad04d3b2ad50c4e4a1b38b94195a7dcc5c32461a17fdb280bd80c0c978fe6cb","first_seen":"2023-05-01T17:30:13Z","last_seen":"2026-06-12T21:49:43.698979Z","times_seen":88,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/event","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 266\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 81\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/event","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v3.mp3juice.za.com/\r\nContent-Type: application/json\r\nContent-Length: 744\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 81\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5a6968fc511c18da37d28854feb05934","sha1":"374c3ded542b5899e3471dc4b64021b48c884889","sha256":"678541cf528ccd6025f04ac0e61fa88e5ca5dee81b6e37b28ae5c822a1838571","sha512":"94ed8cdc05ff8f91944e3e5954866c3c8c74dc13681423563cf4c095f01523d71e4d811fc496dde8a952ac54a408c4bd05c6525a734becba6237386e7e43d75b","ssdeep":"","tlshash":"53a022200008ce2e8cba0b0080f2fc000c3cc03b8f28b0acfe2c3e2280b0300828c023","first_seen":"2025-08-17T20:06:19.215527Z","last_seen":"2025-08-17T20:06:19.215527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/image/pinterest.svg","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /image/pinterest.svg HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 452\r\nlast-modified: Fri, 08 Mar 2024 05:21:13 GMT\r\netag: \"303-6131f5c4f5aa4-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 6318\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EwRCXHCbW1OOvN8MetQerjS9c7tx9goraXDjsxzsES1PkCO1C8hjdbofYC0ln%2FIdR0PyiWHGeMbTDmkIM3%2Ft5fIE9si4JFsw7eE%2B6DgqrOWuQ%3D%3D\"}]}\r\ncf-ray: 970bc9f59c8849cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":771,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b10a062e719c64b686e2e8fcdc216dc","sha1":"38bd37fa3975f4d5b849763359481d8b31bb80ba","sha256":"efc737b4f58cfe73a9bd0e57d7570365701381da31e628b269e7217a0ce3359d","sha512":"051c60863a4d101a5c081abaff67f1874e3714da62e2daa3bf24c08da49225fe9906a95b33957b9f91186ed23de539ec494a1c96ed6cf55709a8845eae858af1","ssdeep":"","tlshash":"320170684344d689e9241d9cef79a970a12de1ef40c5d2532b1ac030f2844cefb1fd8d","first_seen":"2023-05-01T17:30:13Z","last_seen":"2026-06-12T21:49:43.682973Z","times_seen":114,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/act/files/micro.tag.min.js?z=8811823\u0026sw=/sw-check-permissions.js","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"GET /act/files/micro.tag.min.js?z=8811823\u0026sw=/sw-check-permissions.js HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 Aug 2025 15:57:48 GMT\r\netag: W/\"689a12fc-c615\"\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50709,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50709), with no line terminators","md5":"db71d84f87c7e00f06d20bf568ecfce8","sha1":"4c76872b638bac29f93a3416b2bdc388306e5d43","sha256":"a09aee48a80ae2746298de748facafd7b9b10d9a41518ce9a9e2ad659c28dfb6","sha512":"e4f36f8d2865f8ac49bff4fba98b2e02ee372acaf47d3d540e4185a88f3e5a10fa4a484ea0a0c62c29da035f93401af854b3daa45c5bdade84375ad611383184","ssdeep":"1536:PAzcHpjuM/kot1+QPzyoBvtGaFW8T3mgEeQQW9SPJ:NJ9/xmWtxLEnSR","tlshash":"c733e943bc7eb9aa07e264c1883f8d4497abdd50b82fd9d5e40c59a22427005a3b7ff5","first_seen":"2025-08-11T23:05:10.658264Z","last_seen":"2025-08-20T17:32:53.827438Z","times_seen":51,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":102,"dns":28,"connect":26,"send":0,"wait":27,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/js/jquery.min.js","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 05 Feb 2024 04:23:22 GMT\r\netag: \"15295-6109ad279b056-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 30328\r\ncontent-type: application/javascript\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7au5FCBSD8MZsIt7II3kanFvpDRYi%2B0ddkQgyC0Y4urqkp6wULOxh7M8S0REn8F6cfSa1jWZQhcljC7173kRifd7VxJIK1eXsZaDwzNBEeqMQ%3D%3D\"}]}\r\ncf-ray: 970bc9f66a0d370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86677,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"6baa2ebc4024ea8253200d2a9ec8ab7f","sha1":"5b80f75e1c29bddf5c1e5b93537fd8fb5a8e2e47","sha256":"c4a9d8cb902fe26a4566e861d0df12cbe2fec3c7c8fe6583d2a71f25bb3b9856","sha512":"7ab6866cce6601ec5bfd03471aa0692b9ba76b90813208f9422ab5dbc7032a0f8b3b3e464fa29854499480006ad8ad7a933b9b781d27f4bc957ed9a96e1ed90b","ssdeep":"1536:Hi/oGaLzMxuvh4g088wTWsgpL75FjO8uErMUxB5GsXONmK7hoCqLY2:Z/iwTTgpp2kGs+pqLY2","tlshash":"aa8319ddb2c6b06257a771bd00bf510bf236194d280d8440f129e8e9bc79a4a927bf7d","first_seen":"2024-07-11T16:27:34Z","last_seen":"2026-05-17T03:09:16.297372Z","times_seen":31,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/event","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"OPTIONS /event HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://v3.mp3juice.za.com/\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid\r\naccess-control-max-age: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/image/search.svg","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /image/search.svg HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 191\r\nlast-modified: Mon, 05 Feb 2024 04:23:19 GMT\r\netag: \"fa-6109ad24baad3-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 6318\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ffs6Ob2udDVjtK6h0r4hGyFPeo9JpopXk5EKFcFqWYgqF3YOf%2Foy6iYaC1VVSLeonWj%2Fyj9pphlep%2BmUdEnXZ8maLz2yGgpe3P%2BFu8Foz9MXlg%3D%3D\"}]}\r\ncf-ray: 970bc9f58c5249cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6402df07bfe667a581ce12a95adcdc6a","sha1":"fafa9ebab07cd914d319d0ab7864031f1dc8800a","sha256":"c6cc0250d7575ced0464c883773afb1d60c1adb902f603d7fdbc7fb975e2d7ba","sha512":"1c45194e0a238a36bebccc67ddb0f8a2f55ce06e4b12a4b3e807585ea739eb88d546d1283d9ee7debcfd7a18872730032509e754b5170233b8b5edd74e06db79","ssdeep":"","tlshash":"65d02e2ea0988907f9eb2c080573a00e803f62a920d482d8d2b95ef01211fd6a40b804","first_seen":"2025-08-17T20:06:19.220366Z","last_seen":"2026-02-19T21:18:46.776676Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/image/whatsapp.svg","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /image/whatsapp.svg HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 469\r\nlast-modified: Fri, 08 Mar 2024 05:21:14 GMT\r\netag: \"340-6131f5c5c3b97-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 6318\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dAXHysNRADplpB9lqJdzChPDGtJ30MFdY8GqcG3kgMrSOTeLVh2eSL0MLOyUZ8vhGpy8uuDu%2FTp8CYnXWNEan3Js2tyKk67EL6fDY7LYFJ7IrA%3D%3D\"}]}\r\ncf-ray: 970bc9f59c6e49cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":832,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afe7fc60ed757db39a88d2950fce69c9","sha1":"e120b53e856848419275723e24a539359cf41b4a","sha256":"847eb36b4dc4b05f94052dcd98077319e74d882334a106bb9ca451ba211c9c2c","sha512":"0a529a65c5bbeb88aec8927c3faa86118f3406c3450ebe9903bae8c3e985a8926ab3688e75098aac7b23db76a280e55ac95675400d11d0d253341665a9b2ea98","ssdeep":"","tlshash":"0401453c83c48488ee681c8cea2a90f5e20e96ff90c0d2917324c87095911d9f91e6c4","first_seen":"2023-04-07T04:21:35Z","last_seen":"2026-06-12T21:49:43.6774Z","times_seen":219,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.mp3juice.za.com/sw-check-permissions.js?zoneId=8811823\u0026tg=1","fqdn":"v3.mp3juice.za.com","domain":"mp3juice.za.com","tld":"za.com"},"ip":{"addr":"172.67.137.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp3juice.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 16:07:54 GMT","end":"Wed, 22 Oct 2025 17:04:05 GMT"},"fingerprint":{"sha1":"D8:82:7A:21:DE:3F:77:2F:BA:9C:B8:19:2C:76:E7:0B:D0:86:5C:A8","sha256":"D5:4F:5B:92:BC:DB:7D:CE:0E:F7:75:AB:98:2E:21:AF:29:9E:D6:9D:C0:35:0C:68:F4:F7:78:B3:4F:62:36:66"}}},"request":{"raw":"GET /sw-check-permissions.js?zoneId=8811823\u0026tg=1 HTTP/1.1\r\nHost: v3.mp3juice.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/convert\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 24 Mar 2025 11:52:52 GMT\r\netag: \"238-631153e767128-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 295\r\ncontent-type: application/javascript\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\nserver: cloudflare\r\nage: 851\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RU76xNBRfyNxcb5p29PZDQe%2FRAIp5ZO4lNjto3cotwqYDJlKJmyAlBRNyB6sTQuWOqlsWxVIBYFq3MUg%2FoBtywbiWuvOyeL53znLfi%2B1CzarAQ%3D%3D\"}]}\r\ncf-ray: 970bc9f75a72370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":568,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"dcbdbb104b647cef1d7f3245e5cb09af","sha1":"24fa3bad81797e64ae35b81aaa62e7cd0d6f0262","sha256":"c748a29c70a4e1282d2f84b33c2aa1ff8ffcfea69d4ff0472a81609bf94d7282","sha512":"1bd4a1f23d8a6f6c03fee9596c2b78e08658c656039a70585ddfcdf10d67d3ddc1d23a514131dd9e9f5b30bae14421d64e6fb7d300076e2b1a7478239343ebf9","ssdeep":"","tlshash":"a3f08bda8ce56a2802e33118081f6501743b93072f0db99479fc83349f1cf3d96d3688","first_seen":"2025-08-17T20:06:19.222674Z","last_seen":"2025-08-17T20:06:19.222674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"v3.mp3juice.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upskittyan.com/zone?pub=0\u0026zone_id=8811823\u0026is_mobile=false\u0026domain=v3.mp3juice.za.com\u0026var=\u0026ymid=\u0026var_3=\u0026var_4=\u0026dsig=\u0026tg=1\u0026sw=3.1.627\u0026trace_id=7ef5eb2f-4671-429a-9412-108757aa0292\u0026action=prerequest\u0026drf=","fqdn":"upskittyan.com","domain":"upskittyan.com","tld":"com"},"ip":{"addr":"139.45.197.122","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://v3.mp3juice.za.com/convert","date":"2025-08-17T20:05:54.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upskittyan.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 05:06:55 GMT","end":"Sat, 08 Nov 2025 05:06:54 GMT"},"fingerprint":{"sha1":"71:9E:22:14:35:EB:24:81:BE:0C:05:0B:FD:C2:7A:9F:A7:8B:26:F6","sha256":"99:30:F9:EF:E3:4D:B8:63:AA:27:86:DE:90:0A:D2:4B:51:BC:4D:A9:4B:FF:06:08:6F:77:76:C7:D2:EF:DA:5B"}}},"request":{"raw":"POST /zone?pub=0\u0026zone_id=8811823\u0026is_mobile=false\u0026domain=v3.mp3juice.za.com\u0026var=\u0026ymid=\u0026var_3=\u0026var_4=\u0026dsig=\u0026tg=1\u0026sw=3.1.627\u0026trace_id=7ef5eb2f-4671-429a-9412-108757aa0292\u0026action=prerequest\u0026drf= HTTP/1.1\r\nHost: upskittyan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://v3.mp3juice.za.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.mp3juice.za.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 20:05:54 GMT\r\ncontent-length: 0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://v3.mp3juice.za.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}