{"report_id":"bb6d51be-cd99-4aa1-a130-4967954dd928","version":6,"status":"done","tags":[],"date":"2025-01-16T14:43:07Z","url":{"schema":"http","addr":"xtube.chat/0ZM38F.exe","fqdn":"xtube.chat","domain":"xtube.chat","tld":"chat"},"ip":{"addr":"52.173.151.229","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","fqdn":"open.spotify.com","domain":"spotify.com","tld":"com"},"title":"Unsupported browser"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-03-27T14:43:07Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"grabify.world","ip":{"addr":"104.21.80.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-04-10","domain_rank":0,"first_seen":"2020-03-11T00:22:23Z","last_seen":"2025-01-11T23:22:27.626794Z","alert_count":0,"request_count":1,"received_data":1088,"sent_data":478,"comment":"","tags":null,"fingerprints":null},{"fqdn":"grabify.link","ip":{"addr":"104.26.9.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-05","domain_rank":181878,"first_seen":"2015-07-08T09:57:23Z","last_seen":"2025-01-10T21:33:09.019224Z","alert_count":1,"request_count":6,"received_data":445619,"sent_data":6253,"comment":"","tags":null,"fingerprints":null},{"fqdn":"open.spotifycdn.com","ip":{"addr":"199.232.210.251","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2019-09-11","domain_rank":0,"first_seen":"2022-06-13T14:04:22Z","last_seen":"2025-01-13T06:05:50.875606Z","alert_count":0,"request_count":6,"received_data":10658,"sent_data":2672,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googleoptimize.com","ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2019-04-06","domain_rank":1604,"first_seen":"2019-07-16T10:17:19Z","last_seen":"2025-01-15T13:12:10.977781Z","alert_count":0,"request_count":1,"received_data":72709,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"encore.scdn.co","ip":{"addr":"104.123.68.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2010-08-20","domain_rank":25928,"first_seen":"2020-07-15T14:12:23Z","last_seen":"2025-01-14T05:56:33.881766Z","alert_count":0,"request_count":3,"received_data":461865,"sent_data":1645,"comment":"","tags":null,"fingerprints":null},{"fqdn":"open.spotify.com","ip":{"addr":"151.101.67.42","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2006-04-23","domain_rank":3062,"first_seen":"2012-06-04T12:41:14Z","last_seen":"2025-01-13T21:29:58.443625Z","alert_count":0,"request_count":1,"received_data":29126,"sent_data":530,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xtube.chat","ip":{"addr":"52.173.151.229","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2024-04-05","domain_rank":0,"first_seen":"2021-01-07T01:59:55Z","last_seen":"2025-01-06T03:34:41.886146Z","alert_count":0,"request_count":2,"received_data":1826,"sent_data":736,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-01-16T14:42:42Z","timestamp":1737038562,"ip_dst":{"addr":"104.26.8.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.9","port":47570,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed IP Tracking Domain (grabify .link in TLS SNI)","source":"{\"timestamp\":\"2025-01-16T14:42:42.223212+0000\",\"flow_id\":1364679064701901,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":47570,\"dest_ip\":\"104.26.8.202\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035419,\"rev\":1,\"signature\":\"ET INFO Observed IP Tracking Domain (grabify .link in TLS SNI)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2022_03_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2022_03_07\"]}},\"tls\":{\"sni\":\"grabify.link\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3518,\"start\":\"2025-01-16T14:42:42.216013+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-01-16T14:42:45Z","timestamp":1737038565,"ip_dst":{"addr":"104.26.9.202","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.9","port":46146,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"high","alert":"ET HUNTING SUSPICIOUS Firesale gTLD EXE DL with no Referer June 13 2016","source":"{\"timestamp\":\"2025-01-16T14:42:45.215130+0000\",\"flow_id\":1438453718187742,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":46146,\"dest_ip\":\"104.26.9.202\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"exe.no.referer\",\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2022896,\"rev\":7,\"signature\":\"ET HUNTING SUSPICIOUS Firesale gTLD EXE DL with no Referer June 13 2016\",\"category\":\"A Network Trojan was detected\",\"severity\":1,\"metadata\":{\"created_at\":[\"2016_06_14\"],\"performance_impact\":[\"Moderate\"],\"reviewed_at\":[\"2024_04_11\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2024_04_22\"]}},\"http\":{\"hostname\":\"grabify.link\",\"url\":\"/0ZM38F.exe\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://grabify.link/0ZM38F.exe\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":667,\"bytes_toclient\":1249,\"start\":\"2025-01-16T14:42:45.196318+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"open.spotifycdn.com/cdn/js/gtm.ea4c34bc.js","fqdn":"open.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"199.232.210.251","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18a9b45e607ff7c8cac78a03f28f1fd2","sha1":"0e3c55cb449fa520c9effb86c70cce3ee7181636","sha256":"ea4c34bcfa873512770373e95c276f45a17f67b97cefcf23eb5cd6fee4e44056","sha512":"8d07e8e3c2f9aa650bcb9737733b1bc781aa0d9c8f90db25dd4e464bdeb31664be95a35135577ddb5e8157cb35ebaa6613bb9c7cf12030a891d442769a1fc40c","ssdeep":"","tlshash":"2a81fc07755868b21d92eec66fefaa40f1103b9100719131fe5ebbca570b01295f5afa","size":3765,"data":"","first_seen":"2024-02-20T16:30:07Z","last_seen":"2025-03-27T01:39:44.461233Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleoptimize.com/optimize.js?id=GTM-W53X654","fqdn":"www.googleoptimize.com","domain":"googleoptimize.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08dc6f3ddc943422372f9270bd270cc4","sha1":"fff8ca98f7a57e2fdee2b2073a7edd828d3db0f7","sha256":"64d69a4c707458329f34b182014523277e6e7db26debad0c2a17e412ab8358ef","sha512":"3bd12c1dfb3dfeb21cbe2294d1f7e5ae89b3395b4cd6a3b2444ed31655e32257b32a8a28df3c315b5fcc875c44f7e6170528ac5c78ea2de3e99b42d9e206fc9c","ssdeep":"3072:LW3a4IwyIJ/rYaGI0gBCsQ23rrWXf8vL07jOKwKKkNIUg:S9yIJDYapWEvL07jOKwKq","tlshash":"8f14f6c8b3d6b46683a26478507f011bb23a6dd2f80cd894f186d4d87d74aa9427bf7c","size":199803,"data":"","first_seen":"2025-01-16T14:43:08.267691Z","last_seen":"2025-01-16T14:43:08.267691Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.spotifycdn.com/cdn/build/error-page/error-page.31d6cfe0.js","fqdn":"open.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"199.232.210.251","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"c710000000000000000000000000000030000000000000000000000000000000000000","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T09:48:45.844278Z","times_seen":16351727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.spotifycdn.com/cdn/js/retargeting-pixels.5ab9cdc0.js","fqdn":"open.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"199.232.210.251","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff5311cf5cad9014ae98233eb3a42d0f","sha1":"91c5256bb38ee1e77f444ad515db40de1e940159","sha256":"5ab9cdc0840de7312331d8638aa44b8db99092a05b7cff5f720de97c8f21f6c3","sha512":"04ebd2e5697c63236dbad3b869bc40a42824e5786152f3999a7efac9a9e7acf0fd40cb2004ef0f06b237731d07f46da443455a344914f991080ef627f4ce3ddb","ssdeep":"","tlshash":"c5018eaaf4647c7318219d939fff79647b00357644e580217c4d93417f42013f4398e9","size":796,"data":"","first_seen":"2024-02-20T16:30:07Z","last_seen":"2025-03-27T01:39:44.435666Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"xtube.chat/0ZM38F.exe","fqdn":"xtube.chat","domain":"xtube.chat","tld":"chat"},"ip":{"addr":"52.173.151.229","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-01-16T14:42:42.119041059Z","timestamp":1737038562119,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /0ZM38F.exe HTTP/1.1\r\nHost: xtube.chat\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 302 Found\r\nContent-Length: 0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Thu, 16 Jan 2025 14:42:42 GMT\r\nServer: Apache\r\nLocation: https://grabify.world/0ZM38F.exe\r\nStatus: 301 Moved Permanently\r\ncf-cache-status: DYNAMIC\r\nExpect-CT: max-age=604800, report-uri=\"https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct\"\r\ncf-ray: 56137e603e72eeba\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T09:48:45.844278Z","times_seen":16351727,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"grabify.world/0ZM38F.exe","fqdn":"grabify.world","domain":"grabify.world","tld":"world"},"ip":{"addr":"104.21.80.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-01-16T14:42:42.177769917Z","timestamp":1737038562177,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /0ZM38F.exe HTTP/1.1\r\nHost: grabify.world\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 16 Jan 2025 14:42:42 GMT\r\ncontent-type: text/html\r\ncontent-length: 143\r\nlocation: https://grabify.link/0ZM38F.exe\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S0mRTRlcnfDKUlfBo94knAddcvQ%2FNl8vqT%2BvkdKypJOxHXMMbQxFQfUiUkdSkpLboNV%2FqcbMWU%2BQA%2BtGJsPUU%2FbOAlN0cF3c5ra7pOFfRcchh%2FqnqevrzVdiTenB1PEV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 902edfa58d38569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=610\u0026min_rtt=558\u0026rtt_var=170\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3280\u0026recv_bytes=1250\u0026delivery_rate=6724458\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=af9d0479f8671d9e\u0026ts=26\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":143,"size_decoded":143,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"cb7b8f439b04c00f4a2d78160ddfee8d","sha1":"9aa44b5d68f6359f10de0dcd24ea3e12548d9bd4","sha256":"12755429beb15d5eb57eafa45b8dba326343dd099bf0552038694c3856e8860e","sha512":"2af55b8d378b68ae5653eec6c1bab8d4c6c5ce7fdfcbb27a5803fde6f0e2e9a51444b6624cb01bcc0638c8f1c44233b9b568a69bc2e1e9c8ef4eda4e3fc96814","ssdeep":"","tlshash":"2cc022bf38a33c8c88f3383a00c3a2a0e0cc823233a800008300800330c32a2cac33a3","first_seen":"0001-01-01T00:00:00Z","last_seen":"2025-03-02T05:38:48.222529Z","times_seen":9611,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"xtube.chat/","fqdn":"xtube.chat","domain":"xtube.chat","tld":"chat"},"ip":{"addr":"52.173.151.229","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-01-16T14:42:44.961873704Z","timestamp":1737038564961,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: xtube.chat\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1136\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Thu, 16 Jan 2025 14:42:44 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nExpect-CT: max-age=604800, report-uri=\"https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct\"\r\ncf-ray: 56137e603e72eeba\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1136,"size_decoded":2577,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1104), with CRLF line terminators","md5":"613f70461832fdb0f92ebaa227cff15a","sha1":"9621cbaca77a2ef31f15d5dc6343210195325524","sha256":"3607a1cddddf93bb5829ee44bb40a611b4ff5024d3959f06e44b7d2164cfa4b0","sha512":"a35d184ebb048cf6b511a89a862834f8ff64dfdc586a1dbc28e4ae658bd6ed980dca87a7645281ddf47c9719763f508b68498e3b1ca247cdc10a5080bf307a97","ssdeep":"","tlshash":"b5514f3380c0244ba133c1327192b1d9f952c45bdebb1a50f10ea2939fe68e69ef321c","first_seen":"2024-04-15T06:26:55Z","last_seen":"2026-05-26T02:14:07.156406Z","times_seen":49,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grabify.link/0ZM38F.exe","fqdn":"grabify.link","domain":"grabify.link","tld":"link"},"ip":{"addr":"104.26.9.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-01-16T14:42:45.216962449Z","timestamp":1737038565216,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /0ZM38F.exe HTTP/1.1\r\nHost: grabify.link\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Thu, 16 Jan 2025 14:42:45 GMT\r\nContent-Type: text/html\r\nContent-Length: 167\r\nConnection: keep-alive\r\nCache-Control: max-age=3600\r\nExpires: Thu, 16 Jan 2025 15:42:45 GMT\r\nLocation: https://grabify.link/0ZM38F.exe\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=I7NK2arHtb2ejo%2FJcT30vh2iJNMMVRCq%2F96ivQA6FTfT49nMS9GPCq5Lb95z3AsuWzVUQtZH3tOpISZWs6MOORiwbuCzqmKI8FIxgkuOuV0RdaJsvOig2Byi5%2F0VHg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 902edfb87d03b4fd-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=451\u0026min_rtt=451\u0026rtt_var=225\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=395\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":167,"size_decoded":167,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0104c301c5e02bd6148b8703d19b3a73","sha1":"7436e0b4b1f8c222c38069890b75fa2baf9ca620","sha256":"446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f","sha512":"84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf","ssdeep":"","tlshash":"c4c08cad6b523c98b8a73b3960c3a1a0e2ec803022d9042202b04a07f0cb1e78ec23d1","first_seen":"2023-04-05T06:32:17Z","last_seen":"2025-09-21T18:05:05.674757Z","times_seen":190494,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-01-16T14:42:45Z","timestamp":1737038565,"ip_dst":{"addr":"104.26.9.202","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.9","port":46146,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"high","alert":"ET HUNTING SUSPICIOUS Firesale gTLD EXE DL with no Referer June 13 2016","source":"{\"timestamp\":\"2025-01-16T14:42:45.215130+0000\",\"flow_id\":1438453718187742,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":46146,\"dest_ip\":\"104.26.9.202\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"exe.no.referer\",\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2022896,\"rev\":7,\"signature\":\"ET HUNTING SUSPICIOUS Firesale gTLD EXE DL with no Referer June 13 2016\",\"category\":\"A Network Trojan was detected\",\"severity\":1,\"metadata\":{\"created_at\":[\"2016_06_14\"],\"performance_impact\":[\"Moderate\"],\"reviewed_at\":[\"2024_04_11\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2024_04_22\"]}},\"http\":{\"hostname\":\"grabify.link\",\"url\":\"/0ZM38F.exe\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://grabify.link/0ZM38F.exe\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":667,\"bytes_toclient\":1249,\"start\":\"2025-01-16T14:42:45.196318+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grabify.link/js/ads.js","fqdn":"grabify.link","domain":"grabify.link","tld":"link"},"ip":{"addr":"104.26.8.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-01-16T14:42:46.094283451Z","timestamp":1737038566094,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /js/ads.js HTTP/1.1\r\nHost: grabify.link\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkF1QjFad3BlWE9nV09UbUh3d1MrcVE9PSIsInZhbHVlIjoia3VFeG92VXh6VXpOZko5elBQdHY2akNEam9TQ3FseEFjOEpDcGtIekVaL3Vrd1pXWUVwWnpqSWJqOXhqUElCK0VFbGo5cFI4RGYxWk9CWC9BY3FvNEM1NmRmSjBUdHp2ZVhLNVB1eU51SS9Oai9rOFhhemx6SXdnTzdWQ3JxZ1oiLCJtYWMiOiIxZDAyMzlhMDAxYjZiOWMwYWIxMzhlYWRkYTZkYTYwYTY5MGU2ZjNlNmYyYTU0MzQyNjQ2NTgxZTUxNzM2ODExIiwidGFnIjoiIn0%3D; g_session=eyJpdiI6Ii8wZVNrVVQvcXh0NXJlcysxM0syclE9PSIsInZhbHVlIjoiU3pzR2FDeGkvelNLeUhPUkZHMElHNjdCZDF3QnVwalhyRjlJMmN6anVpZTdaaWh5YlJKaHhBdVN5N1lTVVhEd3MwUnU2b3p0RnBMb2FvajZTRTRUN3hiaU5HR3YyQTNXMUprZS9nMVFvQTR0VkVRSEdTc09aSXVGd3BtM3ppd3MiLCJtYWMiOiJiOTAzNzkzYzA5MjdkYjhlZDJkNzFmMzUwOTZjNzkwNTBhMjBlMmM1MTM4YmZiYjYxMDM1NThmZmRlOTVlYWIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Jan 2025 14:42:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 19\r\ncf-bgj: minify\r\ncf-polished: origSize=22\r\netag: \"16-60f850cd8071e\"\r\nlast-modified: Mon, 22 Jan 2024 08:59:40 GMT\r\ncf-cache-status: HIT\r\nage: 3514\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=r6fNZ3hSmS9pRFij%2Fecwoie2wO5m%2FOIRayky95nrLDvH7gJAF73YegIhalWLTCgKuulq8PghcwG6MfNLItEG6YY5ghDZvW3PGB2gZbAwnppJm%2BLWJjUpkC%2F7NoUaMw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 902edfbdaed8b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3322\u0026min_rtt=3208\u0026rtt_var=1431\u0026sent=13\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=4169\u0026recv_bytes=2554\u0026delivery_rate=154790\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=67108c6d34740c51\u0026ts=164\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19,"size_decoded":19,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"14380b81da6c1f82d54ddad07bdca87c","sha1":"a72b216e23ce2fd0c275f0c66381255e2b34c1be","sha256":"6a0f6cf6b4648c192d81b5fc7b70cb2f6819ef4a799e421e8626cae9697aa85a","sha512":"c4b09dc22db659b51e025eb25b267460b99e4d933a502addabb44e8959bbd7872ed1f59afe404c5308fe16a5ad8c9a2a0a455d016fa47d0ba4b96f8a2f2deb34","ssdeep":"","tlshash":"ef7000c00a8000a88c2082002088280000802000c000008208200302000b82aa0c2c03","first_seen":"2023-03-07T12:24:03Z","last_seen":"2026-06-05T03:13:03.011292Z","times_seen":2393,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grabify.link/js/jquery-2.5.1.min.js?id=becdb2801a6652a4af84f6a2d3f8a4f2","fqdn":"grabify.link","domain":"grabify.link","tld":"link"},"ip":{"addr":"104.26.8.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-01-16T14:42:48.103803995Z","timestamp":1737038568103,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /js/jquery-2.5.1.min.js?id=becdb2801a6652a4af84f6a2d3f8a4f2 HTTP/1.1\r\nHost: grabify.link\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkF1QjFad3BlWE9nV09UbUh3d1MrcVE9PSIsInZhbHVlIjoia3VFeG92VXh6VXpOZko5elBQdHY2akNEam9TQ3FseEFjOEpDcGtIekVaL3Vrd1pXWUVwWnpqSWJqOXhqUElCK0VFbGo5cFI4RGYxWk9CWC9BY3FvNEM1NmRmSjBUdHp2ZVhLNVB1eU51SS9Oai9rOFhhemx6SXdnTzdWQ3JxZ1oiLCJtYWMiOiIxZDAyMzlhMDAxYjZiOWMwYWIxMzhlYWRkYTZkYTYwYTY5MGU2ZjNlNmYyYTU0MzQyNjQ2NTgxZTUxNzM2ODExIiwidGFnIjoiIn0%3D; g_session=eyJpdiI6Ii8wZVNrVVQvcXh0NXJlcysxM0syclE9PSIsInZhbHVlIjoiU3pzR2FDeGkvelNLeUhPUkZHMElHNjdCZDF3QnVwalhyRjlJMmN6anVpZTdaaWh5YlJKaHhBdVN5N1lTVVhEd3MwUnU2b3p0RnBMb2FvajZTRTRUN3hiaU5HR3YyQTNXMUprZS9nMVFvQTR0VkVRSEdTc09aSXVGd3BtM3ppd3MiLCJtYWMiOiJiOTAzNzkzYzA5MjdkYjhlZDJkNzFmMzUwOTZjNzkwNTBhMjBlMmM1MTM4YmZiYjYxMDM1NThmZmRlOTVlYWIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Jan 2025 14:42:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jan 2025 03:49:49 GMT\r\netag: \"2ab39-62b29c0db0a93-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=x5nG7aaJcl6uKe3I1wHneLZikMURF6GvN%2FcvypX0MWyBML3gdneP%2FVSlAScpP7fw0tLWxwvozH86aymMphCk1kobQCO27ez2KTwNHESyqRBTBiOlICuIbkAlxTXBFw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 902edfbdaee1b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5537\u0026min_rtt=3208\u0026rtt_var=5503\u0026sent=14\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=4941\u0026recv_bytes=2598\u0026delivery_rate=4676\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=67108c6d34740c51\u0026ts=1089\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58268,"size_decoded":187080,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"47a42dfe94175dbeaad5832fa98cfdb4","sha1":"7d20fb855faa779e7379e02e7b7581c22d558370","sha256":"8377483db7faa21c1bcafb7e1ae51cee687fb696beff0a056e9935f159ef2014","sha512":"7816b131dfbd9174099a3d2eaa391b899a510b091bbd941e65e4b5e39b957139b809863123ed4e2affd5200353eb3eb247ad2b4d9ac74c30700e354d5c029d64","ssdeep":"3072:1KIu87y0G3HaFPDb8/E164n+RIH7PIuF8yj8+JU+5Anb92oui6Y:KHaFPDb8so8+RIP828MU+5An52c","tlshash":"4b04704137d0685953975fbb772bb4eaf45e0a6f3d804c8be250bda02299227fbe1431","first_seen":"2025-01-10T01:43:52.752582Z","last_seen":"2025-03-02T00:08:01.945829Z","times_seen":54,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grabify.link/cdn-cgi/rum?","fqdn":"grabify.link","domain":"grabify.link","tld":"link"},"ip":{"addr":"104.26.8.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://grabify.link/0ZM38F.exe","date":"2025-01-16T14:42:49.455Z","timestamp":1737038569455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grabify.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Dec 2024 02:34:42 GMT","end":"Sun, 30 Mar 2025 03:34:34 GMT"},"fingerprint":{"sha1":"85:BB:F3:9D:C8:DF:36:D2:77:CA:F3:5E:5F:EE:8B:67:A2:86:62:91","sha256":"02:EF:91:B6:1E:6C:AF:35:FB:84:0B:8D:DD:CE:0F:5F:32:1A:8F:A5:17:9D:96:BD:AC:FA:3A:2F:79:E7:3F:2F"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: grabify.link\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1325\r\nOrigin: https://grabify.link\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkF1QjFad3BlWE9nV09UbUh3d1MrcVE9PSIsInZhbHVlIjoia3VFeG92VXh6VXpOZko5elBQdHY2akNEam9TQ3FseEFjOEpDcGtIekVaL3Vrd1pXWUVwWnpqSWJqOXhqUElCK0VFbGo5cFI4RGYxWk9CWC9BY3FvNEM1NmRmSjBUdHp2ZVhLNVB1eU51SS9Oai9rOFhhemx6SXdnTzdWQ3JxZ1oiLCJtYWMiOiIxZDAyMzlhMDAxYjZiOWMwYWIxMzhlYWRkYTZkYTYwYTY5MGU2ZjNlNmYyYTU0MzQyNjQ2NTgxZTUxNzM2ODExIiwidGFnIjoiIn0%3D; g_session=eyJpdiI6Ii8wZVNrVVQvcXh0NXJlcysxM0syclE9PSIsInZhbHVlIjoiU3pzR2FDeGkvelNLeUhPUkZHMElHNjdCZDF3QnVwalhyRjlJMmN6anVpZTdaaWh5YlJKaHhBdVN5N1lTVVhEd3MwUnU2b3p0RnBMb2FvajZTRTRUN3hiaU5HR3YyQTNXMUprZS9nMVFvQTR0VkVRSEdTc09aSXVGd3BtM3ppd3MiLCJtYWMiOiJiOTAzNzkzYzA5MjdkYjhlZDJkNzFmMzUwOTZjNzkwNTBhMjBlMmM1MTM4YmZiYjYxMDM1NThmZmRlOTVlYWIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 16 Jan 2025 14:42:48 GMT\r\naccess-control-allow-origin: https://grabify.link\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 902edfcbda02b4ff-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T09:48:45.844278Z","times_seen":16351727,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grabify.link/cdn-cgi/rum?","fqdn":"grabify.link","domain":"grabify.link","tld":"link"},"ip":{"addr":"104.26.8.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://grabify.link/0ZM38F.exe","date":"2025-01-16T14:42:49.455Z","timestamp":1737038569455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grabify.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Dec 2024 02:34:42 GMT","end":"Sun, 30 Mar 2025 03:34:34 GMT"},"fingerprint":{"sha1":"85:BB:F3:9D:C8:DF:36:D2:77:CA:F3:5E:5F:EE:8B:67:A2:86:62:91","sha256":"02:EF:91:B6:1E:6C:AF:35:FB:84:0B:8D:DD:CE:0F:5F:32:1A:8F:A5:17:9D:96:BD:AC:FA:3A:2F:79:E7:3F:2F"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: grabify.link\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 824\r\nOrigin: https://grabify.link\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IitkMm1TYkpsYWc4cnpNMkhTVDV4MlE9PSIsInZhbHVlIjoiUFJPSStWQVNuTTcySEdiWE5vMGs4R0M0SW9nWlBFbVFjN3FvR3d1VzJNUnNQM1lnUFFLeFpYejlFVk1zSmtjVFRFSDRkZVJSaitHSmxwSWVJR3RjNjFSL2xmcWg2N2lrejdIZDR1WjBCK0dqVXFhKzFhaTl6Q2NGT0Q3M1ZqSmwiLCJtYWMiOiI4M2UyNGY5ZWQ5M2JmZDIzYzg1ZGVjNjZmNDE5NWY1OTAyNmY5NGQzMmNiODM1MWU2MzNiYzY1NWY0ZTg2ZGRmIiwidGFnIjoiIn0%3D; g_session=eyJpdiI6IjNjd1l2bzFNdS85VHNjVnROSzFWSVE9PSIsInZhbHVlIjoiMXEwVyszY3M0NTFkZnpDeit4YWVOY21OTDVVZ21CM1NJaEQ4TVNpLzRTTzRuQVJBM3VJSFZudjJFVW0veVFzbDU5eDczOUptYmdxeXBEdC9aQWNrTnREajJjMFJYSWpSWjF5Q0VDUmFkWW44aWRrMlVJTnJaWldFT0xCanBidWYiLCJtYWMiOiI1MGI4NzQyMWU2ZjBhNmYzZWFhZTY5NzhlNTliYWZjZmU3NTFhNTg2OTJlOTlkMWQwYTlhYzg4YjI0N2FmYmIzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 16 Jan 2025 14:42:49 GMT\r\naccess-control-allow-origin: https://grabify.link\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 902edfd31b19b4ff-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T09:48:45.844278Z","times_seen":16351727,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.spotifycdn.com/cdn/js/gtm.ea4c34bc.js","fqdn":"open.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"199.232.210.251","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","date":"2025-01-16T14:42:49.532Z","timestamp":1737038569532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Apr 2024 11:45:12 GMT","end":"Sun, 11 May 2025 11:45:11 GMT"},"fingerprint":{"sha1":"02:B7:8E:36:03:0C:9A:1F:12:D1:68:DA:06:9F:FB:F0:B7:78:BB:9F","sha256":"3A:9A:21:0B:83:BC:2C:CF:85:82:65:6F:90:0D:AA:0E:40:8A:2C:27:01:4A:64:5D:CD:3D:CF:3D:0F:71:6E:EB"}}},"request":{"raw":"GET /cdn/js/gtm.ea4c34bc.js HTTP/1.1\r\nHost: open.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 06 Jan 2025 13:08:49 GMT\r\netag: \"c4b461cd5fe5981b51f03de3309dea61\"\r\nx-goog-generation: 1736168928972761\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 1256\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nx-amz-checksum-crc32c: JZbxRQ==\r\naccept-ranges: bytes\r\ndate: Thu, 16 Jan 2025 14:42:49 GMT\r\nage: 221037\r\ntiming-allow-origin: *\r\nx-served-by: cache-chi-kigq8000131-CHI, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 9697, 8095\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1256\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1256,"size_decoded":3765,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"18a9b45e607ff7c8cac78a03f28f1fd2","sha1":"0e3c55cb449fa520c9effb86c70cce3ee7181636","sha256":"ea4c34bcfa873512770373e95c276f45a17f67b97cefcf23eb5cd6fee4e44056","sha512":"8d07e8e3c2f9aa650bcb9737733b1bc781aa0d9c8f90db25dd4e464bdeb31664be95a35135577ddb5e8157cb35ebaa6613bb9c7cf12030a891d442769a1fc40c","ssdeep":"","tlshash":"e7716302b4f968a11ca3e58a7b8fbe40f50029931435e831fbadbbc45f1e01a45f5bd5","first_seen":"2024-02-20T16:30:07Z","last_seen":"2025-03-27T01:39:44.461233Z","times_seen":128,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":79,"dns":49,"connect":13,"send":0,"wait":14,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.spotifycdn.com/cdn/images/error-page-logo.24aca703.svg","fqdn":"open.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"199.232.210.251","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","date":"2025-01-16T14:42:49.535Z","timestamp":1737038569535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Apr 2024 11:45:12 GMT","end":"Sun, 11 May 2025 11:45:11 GMT"},"fingerprint":{"sha1":"02:B7:8E:36:03:0C:9A:1F:12:D1:68:DA:06:9F:FB:F0:B7:78:BB:9F","sha256":"3A:9A:21:0B:83:BC:2C:CF:85:82:65:6F:90:0D:AA:0E:40:8A:2C:27:01:4A:64:5D:CD:3D:CF:3D:0F:71:6E:EB"}}},"request":{"raw":"GET /cdn/images/error-page-logo.24aca703.svg HTTP/1.1\r\nHost: open.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 30 Dec 2024 14:53:55 GMT\r\netag: \"76a20f6902fcfd8eef9fcf2615c9b79d\"\r\nx-goog-generation: 1735570434952060\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 1219\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nx-amz-checksum-crc32c: a3XHZg==\r\naccept-ranges: bytes\r\ndate: Thu, 16 Jan 2025 14:42:49 GMT\r\nage: 220570\r\ntiming-allow-origin: *\r\nx-served-by: cache-chi-klot8100106-CHI, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 33649, 230\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1219\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1219,"size_decoded":2355,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fda23a7fe7b78e2fed7ddbc78a8a9667","sha1":"e2a94f52df100a6f73c6311bedbdd7c5795b7a7b","sha256":"24aca703e057fb6e607c57258fd5a2bbe16119dff22f06e1aa7cb53d2e7db63c","sha512":"3aaad92bf4fae2574d0a4b775392ea261688c89c19ecdb7ec937945e1ad8b0a1e1dbb8159153700ec8003a4144988eb0a5b8d4e6dc008156168c4f73ff839c6a","ssdeep":"","tlshash":"994174ddf3a593bcf505fbf4062710347e462ad6792384e783961a197f0204c0aa6dd7","first_seen":"2023-05-08T19:36:10Z","last_seen":"2026-06-08T09:55:35.505504Z","times_seen":323,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.spotifycdn.com/cdn/build/error-page/error-page.31d6cfe0.js","fqdn":"open.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"199.232.210.251","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","date":"2025-01-16T14:42:49.537Z","timestamp":1737038569537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Apr 2024 11:45:12 GMT","end":"Sun, 11 May 2025 11:45:11 GMT"},"fingerprint":{"sha1":"02:B7:8E:36:03:0C:9A:1F:12:D1:68:DA:06:9F:FB:F0:B7:78:BB:9F","sha256":"3A:9A:21:0B:83:BC:2C:CF:85:82:65:6F:90:0D:AA:0E:40:8A:2C:27:01:4A:64:5D:CD:3D:CF:3D:0F:71:6E:EB"}}},"request":{"raw":"GET /cdn/build/error-page/error-page.31d6cfe0.js HTTP/1.1\r\nHost: open.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Dec 2024 04:36:57 GMT\r\netag: \"bec09ccc8f810bd1e2d1cec060ea18b1\"\r\nx-goog-generation: 1735015017560622\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 32\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nx-amz-checksum-crc32c: leofwA==\r\naccept-ranges: bytes\r\ndate: Thu, 16 Jan 2025 14:42:49 GMT\r\nage: 822398\r\ntiming-allow-origin: *\r\nx-served-by: cache-chi-kigq8000053-CHI, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 24093, 207\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 32\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32,"size_decoded":32,"mime_type":"text/javascript","magic":"gzip compressed data, was \"tmpdjhghnob\", last modified: Tue Dec 24 04:36:56 2024, max compression","md5":"bec09ccc8f810bd1e2d1cec060ea18b1","sha1":"ca6a333193f8153beb644a45aa2bc571ff93eac6","sha256":"8958632f1306d107d5e86e67bf414ce52449279854f716302a05442cd4baa521","sha512":"f16b821aa0714e6b08768c971a8979853f5a2235d5c9945afcc9ef3d61c0012db0c6e5087d2dc1053bde7e3544515016010cab22fdaf7d805d823fc02460350d","ssdeep":"","tlshash":"ce8000030830200ec82c003320800838008082e2a8c02a0a0a2bc33000023c00000020","first_seen":"2025-01-16T14:43:08.263992Z","last_seen":"2025-01-27T12:45:08.354083Z","times_seen":12,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":41,"connect":17,"send":0,"wait":14,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.spotifycdn.com/cdn/build/error-page/error-page.167c5854.css","fqdn":"open.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"199.232.210.251","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","date":"2025-01-16T14:42:49.529Z","timestamp":1737038569529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Apr 2024 11:45:12 GMT","end":"Sun, 11 May 2025 11:45:11 GMT"},"fingerprint":{"sha1":"02:B7:8E:36:03:0C:9A:1F:12:D1:68:DA:06:9F:FB:F0:B7:78:BB:9F","sha256":"3A:9A:21:0B:83:BC:2C:CF:85:82:65:6F:90:0D:AA:0E:40:8A:2C:27:01:4A:64:5D:CD:3D:CF:3D:0F:71:6E:EB"}}},"request":{"raw":"GET /cdn/build/error-page/error-page.167c5854.css HTTP/1.1\r\nHost: open.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Dec 2024 19:37:40 GMT\r\netag: \"719fcafbb803f249d9cbd4cbffbf9ea9\"\r\nx-goog-generation: 1734982660421220\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 3042\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nx-amz-checksum-crc32c: qxJ+2Q==\r\naccept-ranges: bytes\r\ndate: Thu, 16 Jan 2025 14:42:49 GMT\r\nage: 819064\r\ntiming-allow-origin: *\r\nx-served-by: cache-chi-klot8100037-CHI, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 25188, 200\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3042\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3042,"size_decoded":15975,"mime_type":"text/css","magic":"ASCII text, with very long lines (15975), with no line terminators","md5":"d12957aa59fef8bae54c02d73773c087","sha1":"a0ebe744cf68bb8635afc64fe4f2d5b549a3f04e","sha256":"6eb4052ed58ed9c8a634193ea25d20f84d06bfa9de3d2f2f10cf84b222279559","sha512":"fdc1c095ef037ba8f09045048f1c485dced6158f9c1e05e6b69db18be1786ec5479c49d4057f6e3db76a417ca168362ed5c39512cc9708b0ac2ae0ed509f7a73","ssdeep":"384:ftIzhnUsasRs1OEcOk1SOJOjswvYEWkPws+:6Tbe1OEcOESOJOZ8HR","tlshash":"a17263394509524ddea77d8223d9ba2aad7d10152ec4180b9e7845f44ffbca3b110fea","first_seen":"2024-07-31T19:18:17Z","last_seen":"2025-01-21T17:00:33.679107Z","times_seen":69,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":106,"dns":52,"connect":26,"send":0,"wait":14,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.spotifycdn.com/cdn/js/retargeting-pixels.5ab9cdc0.js","fqdn":"open.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"199.232.210.251","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","date":"2025-01-16T14:42:49.534Z","timestamp":1737038569534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Apr 2024 11:45:12 GMT","end":"Sun, 11 May 2025 11:45:11 GMT"},"fingerprint":{"sha1":"02:B7:8E:36:03:0C:9A:1F:12:D1:68:DA:06:9F:FB:F0:B7:78:BB:9F","sha256":"3A:9A:21:0B:83:BC:2C:CF:85:82:65:6F:90:0D:AA:0E:40:8A:2C:27:01:4A:64:5D:CD:3D:CF:3D:0F:71:6E:EB"}}},"request":{"raw":"GET /cdn/js/retargeting-pixels.5ab9cdc0.js HTTP/1.1\r\nHost: open.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 30 Dec 2024 15:58:10 GMT\r\netag: \"88a36d0f7f76476ecd31d27ab93c7c65\"\r\nx-goog-generation: 1735574290184008\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 364\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nx-amz-checksum-crc32c: vx5VLA==\r\naccept-ranges: bytes\r\ndate: Thu, 16 Jan 2025 14:42:49 GMT\r\nage: 1425532\r\ntiming-allow-origin: *\r\nx-served-by: cache-chi-kigq8000062-CHI, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 501, 7258\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 364\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":364,"size_decoded":796,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ff5311cf5cad9014ae98233eb3a42d0f","sha1":"91c5256bb38ee1e77f444ad515db40de1e940159","sha256":"5ab9cdc0840de7312331d8638aa44b8db99092a05b7cff5f720de97c8f21f6c3","sha512":"04ebd2e5697c63236dbad3b869bc40a42824e5786152f3999a7efac9a9e7acf0fd40cb2004ef0f06b237731d07f46da443455a344914f991080ef627f4ce3ddb","ssdeep":"","tlshash":"450189baa8a57c522823a89797bf6e046b0009b7048ac4727c9de341ff52043b03add0","first_seen":"2024-02-20T16:30:07Z","last_seen":"2025-03-27T01:39:44.435666Z","times_seen":129,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":47,"connect":29,"send":0,"wait":14,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleoptimize.com/optimize.js?id=GTM-W53X654","fqdn":"www.googleoptimize.com","domain":"googleoptimize.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","date":"2025-01-16T14:42:49.531Z","timestamp":1737038569531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /optimize.js?id=GTM-W53X654 HTTP/1.1\r\nHost: www.googleoptimize.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 16 Jan 2025 14:42:49 GMT\r\nexpires: Thu, 16 Jan 2025 14:42:49 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 16 Jan 2025 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1169:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1169:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 71667\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71667,"size_decoded":199803,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2319)","md5":"08dc6f3ddc943422372f9270bd270cc4","sha1":"fff8ca98f7a57e2fdee2b2073a7edd828d3db0f7","sha256":"64d69a4c707458329f34b182014523277e6e7db26debad0c2a17e412ab8358ef","sha512":"3bd12c1dfb3dfeb21cbe2294d1f7e5ae89b3395b4cd6a3b2444ed31655e32257b32a8a28df3c315b5fcc875c44f7e6170528ac5c78ea2de3e99b42d9e206fc9c","ssdeep":"3072:LW3a4IwyIJ/rYaGI0gBCsQ23rrWXf8vL07jOKwKKkNIUg:S9yIJDYapWEvL07jOKwKq","tlshash":"8f14f6c8b3d6b46683a26478507f011bb23a6dd2f80cd894f186d4d87d74aa9427bf7c","first_seen":"2025-01-16T14:43:08.267691Z","last_seen":"2025-01-16T14:43:08.267691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":193,"dns":39,"connect":21,"send":0,"wait":33,"receive":38,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encore.scdn.co/fonts/SpotifyMixUI-Bold-4264b799009b1db5c491778b1bc8e5b7.woff2","fqdn":"encore.scdn.co","domain":"scdn.co","tld":"co"},"ip":{"addr":"104.123.68.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","date":"2025-01-16T14:42:49.527Z","timestamp":1737038569527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.scdn.co","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Jul 2024 00:00:00 GMT","end":"Sat, 09 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"59:68:CA:B5:E4:00:55:D3:00:E5:D0:2D:F4:47:DA:17:11:E4:E4:B3","sha256":"FB:D3:6F:D7:2E:65:0A:9D:2F:D1:33:1A:FC:B2:61:39:EA:19:41:AB:D5:8C:06:AD:2B:63:ED:0E:9D:D7:26:C9"}}},"request":{"raw":"GET /fonts/SpotifyMixUI-Bold-4264b799009b1db5c491778b1bc8e5b7.woff2 HTTP/1.1\r\nHost: encore.scdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://open.spotify.com/\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 20 May 2024 10:12:25 GMT\r\netag: \"61b62cce587e38f4dee4c6c17bcd5a0e\"\r\ncontent-type: font/woff\r\ncontent-encoding: gzip\r\nx-amz-checksum-crc32c: yXssgQ==\r\naccept-ranges: bytes\r\ncontent-length: 41320\r\nexpires: Thu, 16 Jan 2025 14:42:50 GMT\r\ndate: Thu, 16 Jan 2025 14:42:50 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41320,"size_decoded":41412,"mime_type":"font/woff","magic":"Web Open Font Format (Version 2), TrueType, length 41412, version 1.6553","md5":"4264b799009b1db5c491778b1bc8e5b7","sha1":"7baaf2a83c8fd71eaff63f5c075d56cb7c6b1e53","sha256":"4252606cf3c6b177ae87bf37e83c73db1895a99d44b9c6965309cd343124c9ba","sha512":"407470a9526e4f96ff33da7a4531134885b5021010ad067bb042691e95ade2b33bb48180b2abd3984021d05978aa85d5b7ef9c1463cfee04b96a18686c9c4e01","ssdeep":"768:wBiq8iQy84nMQNsAnUZaLzLSIHBUSRahdj9oGX3de3TGMf:wo6WlSe6BUCa3BXs3qq","tlshash":"7e03f29ed8283d68c0d6560f905a6b52610d6b78faf22bb207c8ffc0a56570b18c9b5d","first_seen":"2024-07-31T19:18:17Z","last_seen":"2026-06-12T04:04:50.68004Z","times_seen":4356,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":469,"dns":444,"connect":7,"send":0,"wait":13,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encore.scdn.co/fonts/SpotifyMixUI-Regular-cc3b1de388efa4cbca6c75cebc24585e.woff2","fqdn":"encore.scdn.co","domain":"scdn.co","tld":"co"},"ip":{"addr":"104.123.68.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","date":"2025-01-16T14:42:49.521Z","timestamp":1737038569521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.scdn.co","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Jul 2024 00:00:00 GMT","end":"Sat, 09 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"59:68:CA:B5:E4:00:55:D3:00:E5:D0:2D:F4:47:DA:17:11:E4:E4:B3","sha256":"FB:D3:6F:D7:2E:65:0A:9D:2F:D1:33:1A:FC:B2:61:39:EA:19:41:AB:D5:8C:06:AD:2B:63:ED:0E:9D:D7:26:C9"}}},"request":{"raw":"GET /fonts/SpotifyMixUI-Regular-cc3b1de388efa4cbca6c75cebc24585e.woff2 HTTP/1.1\r\nHost: encore.scdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://open.spotify.com/\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 20 May 2024 10:12:27 GMT\r\netag: \"b7f76367a4827918777a80c836e579c6\"\r\ncontent-type: font/woff\r\ncontent-encoding: gzip\r\nx-amz-checksum-crc32c: lJoHOA==\r\naccept-ranges: bytes\r\ncontent-length: 35561\r\nexpires: Thu, 16 Jan 2025 14:42:50 GMT\r\ndate: Thu, 16 Jan 2025 14:42:50 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35561,"size_decoded":35596,"mime_type":"font/woff","magic":"Web Open Font Format (Version 2), TrueType, length 35596, version 1.6553","md5":"cc3b1de388efa4cbca6c75cebc24585e","sha1":"12745b74ea5ebee6e7ad5803110e688076c91f99","sha256":"91623228bbcef3805f91d3df656132fcf95b5572bf345039eedc91a136b7ed09","sha512":"afa0790944f54e088355fc88de30573735e8569e2a1e8db68f50da613d6e6484fe304c92cd56595624a4e059852e58cce7751632429ce4dae6451f17460121c3","ssdeep":"768:9bUVl8GV39sjLgAbPcHEkPfhxBJJMLdkTpEj4dk+CVGS6mB3uMAOvHvE6:aloLlbeXJ20pm2kNN3uMbvv","tlshash":"f4f2e1bb41b03f0bdc5c8b5bca8cda13b691a9bddf52d5111ef9f52c2499489103079d","first_seen":"2024-07-31T19:18:17Z","last_seen":"2026-06-12T04:04:50.663907Z","times_seen":4358,"resource_available":false,"data":null}},"time_used":979,"timings":{"blocked":476,"dns":445,"connect":7,"send":0,"wait":15,"receive":7,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grabify.link/api/js","fqdn":"grabify.link","domain":"grabify.link","tld":"link"},"ip":{"addr":"104.26.8.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-01-16T14:42:50.108909331Z","timestamp":1737038570108,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"POST /api/js HTTP/1.1\r\nHost: grabify.link\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nUser-Agents: MUg2SklRbDBhVkVaanVjeHM5V2pweHVhMXpIeGlqR0g3ekxKa3A0dQ==\r\nX-CSRF-TOKEN: 1H6JIQl0aVEZjucxs9Wjpxua1zHxijGH7zLJkp4u\r\nContent-Length: 3369\r\nOrigin: https://grabify.link\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkF1QjFad3BlWE9nV09UbUh3d1MrcVE9PSIsInZhbHVlIjoia3VFeG92VXh6VXpOZko5elBQdHY2akNEam9TQ3FseEFjOEpDcGtIekVaL3Vrd1pXWUVwWnpqSWJqOXhqUElCK0VFbGo5cFI4RGYxWk9CWC9BY3FvNEM1NmRmSjBUdHp2ZVhLNVB1eU51SS9Oai9rOFhhemx6SXdnTzdWQ3JxZ1oiLCJtYWMiOiIxZDAyMzlhMDAxYjZiOWMwYWIxMzhlYWRkYTZkYTYwYTY5MGU2ZjNlNmYyYTU0MzQyNjQ2NTgxZTUxNzM2ODExIiwidGFnIjoiIn0%3D; g_session=eyJpdiI6Ii8wZVNrVVQvcXh0NXJlcysxM0syclE9PSIsInZhbHVlIjoiU3pzR2FDeGkvelNLeUhPUkZHMElHNjdCZDF3QnVwalhyRjlJMmN6anVpZTdaaWh5YlJKaHhBdVN5N1lTVVhEd3MwUnU2b3p0RnBMb2FvajZTRTRUN3hiaU5HR3YyQTNXMUprZS9nMVFvQTR0VkVRSEdTc09aSXVGd3BtM3ppd3MiLCJtYWMiOiJiOTAzNzkzYzA5MjdkYjhlZDJkNzFmMzUwOTZjNzkwNTBhMjBlMmM1MTM4YmZiYjYxMDM1NThmZmRlOTVlYWIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Jan 2025 14:42:48 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 10\r\nx-ratelimit-remaining: 7\r\naccess-control-allow-origin: *\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IitkMm1TYkpsYWc4cnpNMkhTVDV4MlE9PSIsInZhbHVlIjoiUFJPSStWQVNuTTcySEdiWE5vMGs4R0M0SW9nWlBFbVFjN3FvR3d1VzJNUnNQM1lnUFFLeFpYejlFVk1zSmtjVFRFSDRkZVJSaitHSmxwSWVJR3RjNjFSL2xmcWg2N2lrejdIZDR1WjBCK0dqVXFhKzFhaTl6Q2NGT0Q3M1ZqSmwiLCJtYWMiOiI4M2UyNGY5ZWQ5M2JmZDIzYzg1ZGVjNjZmNDE5NWY1OTAyNmY5NGQzMmNiODM1MWU2MzNiYzY1NWY0ZTg2ZGRmIiwidGFnIjoiIn0%3D; expires=Thu, 16 Jan 2025 19:42:48 GMT; Max-Age=18000; path=/; secure\ng_session=eyJpdiI6IjNjd1l2bzFNdS85VHNjVnROSzFWSVE9PSIsInZhbHVlIjoiMXEwVyszY3M0NTFkZnpDeit4YWVOY21OTDVVZ21CM1NJaEQ4TVNpLzRTTzRuQVJBM3VJSFZudjJFVW0veVFzbDU5eDczOUptYmdxeXBEdC9aQWNrTnREajJjMFJYSWpSWjF5Q0VDUmFkWW44aWRrMlVJTnJaWldFT0xCanBidWYiLCJtYWMiOiI1MGI4NzQyMWU2ZjBhNmYzZWFhZTY5NzhlNTliYWZjZmU3NTFhNTg2OTJlOTlkMWQwYTlhYzg4YjI0N2FmYmIzIiwidGFnIjoiIn0%3D; expires=Thu, 16 Jan 2025 19:42:48 GMT; Max-Age=18000; path=/; secure; httponly\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ePtqjF%2Bh%2FGL1p6dIwMfPkcoCr%2Bl8i3scMq3vtefxTvFBOtPlapnCs%2BArHk91fK9D791TJTPTRM0q94lQeG2fjm%2B2YumkXL9MP4fWONQDAwBxIIN8sByVwHHW20orqA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 902edfcd1b74b4ff-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2698\u0026min_rtt=1086\u0026rtt_var=1934\u0026sent=79\u0026recv=28\u0026lost=0\u0026retrans=0\u0026sent_bytes=72147\u0026recv_bytes=11277\u0026delivery_rate=5924\u0026cwnd=16800\u0026unsent_bytes=0\u0026cid=67108c6d34740c51\u0026ts=2937\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":381902,"size_decoded":16,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"b36bd517e6bd757dea0fe824a0b11d31","sha1":"7e86838ac0103a610de5fddb426c2f1ebeb01e42","sha256":"25b030b2192bba7f61f1707c44f5cb875a6cd5bfb4867e548757392c30d693b3","sha512":"4bab82a4bd0a7c38ba19e13d943dc35cb285884f817a2d1cea9eec1e06c062590cc09819e11abd557f4904e801ea136648693597a5ede2805f67c396d9103f23","ssdeep":"","tlshash":"f0600003000000f3c0003300033c3f3030c0003300000c0cc00c300c033000330c300f","first_seen":"2023-04-05T14:34:24Z","last_seen":"2026-06-11T19:36:11.461244Z","times_seen":1119,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.spotifycdn.com/cdn/images/favicon16.1c487bff.png","fqdn":"open.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"199.232.210.251","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","date":"2025-01-16T14:42:50.196Z","timestamp":1737038570196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Apr 2024 11:45:12 GMT","end":"Sun, 11 May 2025 11:45:11 GMT"},"fingerprint":{"sha1":"02:B7:8E:36:03:0C:9A:1F:12:D1:68:DA:06:9F:FB:F0:B7:78:BB:9F","sha256":"3A:9A:21:0B:83:BC:2C:CF:85:82:65:6F:90:0D:AA:0E:40:8A:2C:27:01:4A:64:5D:CD:3D:CF:3D:0F:71:6E:EB"}}},"request":{"raw":"GET /cdn/images/favicon16.1c487bff.png HTTP/1.1\r\nHost: open.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 491\r\nlast-modified: Wed, 20 Nov 2024 18:10:03 GMT\r\netag: \"47309f383eb16b0647712ee1500f2741\"\r\nx-goog-generation: 1732126203520411\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 491\r\ncontent-type: image/png\r\nx-amz-checksum-crc32c: mZG5kQ==\r\naccept-ranges: bytes\r\ndate: Thu, 16 Jan 2025 14:42:50 GMT\r\nage: 4910732\r\ntiming-allow-origin: *\r\nx-served-by: cache-chi-kigq8000027-CHI, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14495, 25343\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":491,"size_decoded":491,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"47309f383eb16b0647712ee1500f2741","sha1":"7b5e622dc000eed9cf1c8e31cb9b5343b428161c","sha256":"1c487bff77b3d19fd37544c1e65ee9ffba08bd3030a1ac0586d9c51d5186937e","sha512":"ff2e5f2e07803ac58c5dde6fae28cd565c23e6e5774dc3a8ddbc2bf6294187e12f24df12500eb1b45b1982a49702719b2afc3ccb59e83ed59255a83a6e713ed6","ssdeep":"","tlshash":"eef054d45b29376d84b8c54a02fe8c2b89730c85511604004af063aca9ea01e15efaff","first_seen":"2023-04-09T03:33:28Z","last_seen":"2026-06-10T06:31:50.876008Z","times_seen":1524,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","fqdn":"open.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"151.101.67.42","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-16T14:42:48.873Z","timestamp":1737038568873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"open.spotify.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Fri, 27 Dec 2024 23:22:43 GMT","end":"Sun, 26 Jan 2025 23:22:42 GMT"},"fingerprint":{"sha1":"D6:A2:A1:9D:CF:E1:0D:AF:35:27:F3:E1:F8:D6:C4:84:DC:56:89:3F","sha256":"0C:F2:A7:0D:C5:75:2F:A4:DB:B5:F5:94:5E:F3:D7:A1:24:69:BA:C3:99:5F:84:26:B1:F0:86:D2:FA:4D:F0:E0"}}},"request":{"raw":"GET /playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA HTTP/1.1\r\nHost: open.spotify.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: envoy\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 383\r\ncontent-security-policy: script-src 'self' 'unsafe-eval' blob: open.spotifycdn.com open-exp.spotifycdn.com open-review.spotifycdn.com open-exp-review.spotifycdn.com quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com cdn.cookielaw.org geolocation.onetrust.com www.googleoptimize.com www.fastly-insights.com static.hotjar.com script.hotjar.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://analytics.tiktok.com/i18n/pixel/sdk.js https://analytics.tiktok.com/i18n/pixel/identify.js https://analytics.tiktok.com/i18n/pixel/config.js https://www.redditstatic.com/ads/pixel.js https://t.contentsquare.net/uxa/22f14577e19f3.js https://get.microsoft.com/badge/ms-store-badge.bundled.js 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=' 'sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s='; frame-ancestors 'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/*;\r\nvia: HTTP/1.1 fringe, HTTP/2 edgeproxy, 1.1 google, 1.1 varnish, 1.1 varnish\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: sp_t=8f964205d6902c1ae4dfb19c8aedbe9e; path=/; expires=Fri, 16 Jan 2026 14:42:48 GMT; domain=.spotify.com; samesite=none; secure\nsp_landing=https%3A%2F%2Fopen.spotify.com%2Fplaylist%2F6IOzadVFC9bNCaFjpVGFNv%3Fsp_cid%3D8f964205d6902c1ae4dfb19c8aedbe9e%26device%3Ddesktop%26si%3DrC5by6fBRYSQRhBfqPcLcA; path=/; expires=Fri, 17 Jan 2025 14:42:48 GMT; domain=.spotify.com; samesite=none; secure; httponly\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ndate: Thu, 16 Jan 2025 14:42:49 GMT\r\nx-served-by: cache-hel1410022-HEL, cache-hel1410022-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-timer: S1737038569.944256,VS0,VE447\r\nvary: Accept-Encoding,Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":26816,"size_decoded":26816,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T09:48:45.844278Z","times_seen":16351727,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":65,"dns":28,"connect":13,"send":0,"wait":461,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encore.scdn.co/fonts/SpotifyMixUITitleVariable-8769ccfde3379b7ebcadd9529b49d0cc.woff2","fqdn":"encore.scdn.co","domain":"scdn.co","tld":"co"},"ip":{"addr":"104.123.68.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://open.spotify.com/playlist/6IOzadVFC9bNCaFjpVGFNv?si=rC5by6fBRYSQRhBfqPcLcA","date":"2025-01-16T14:42:49.523Z","timestamp":1737038569523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.scdn.co","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Jul 2024 00:00:00 GMT","end":"Sat, 09 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"59:68:CA:B5:E4:00:55:D3:00:E5:D0:2D:F4:47:DA:17:11:E4:E4:B3","sha256":"FB:D3:6F:D7:2E:65:0A:9D:2F:D1:33:1A:FC:B2:61:39:EA:19:41:AB:D5:8C:06:AD:2B:63:ED:0E:9D:D7:26:C9"}}},"request":{"raw":"GET /fonts/SpotifyMixUITitleVariable-8769ccfde3379b7ebcadd9529b49d0cc.woff2 HTTP/1.1\r\nHost: encore.scdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://open.spotify.com/\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 20 May 2024 10:12:30 GMT\r\netag: \"8c2f2b5166c31039f2bc1c69a40e99ac\"\r\ncontent-type: font/woff\r\ncontent-encoding: gzip\r\nx-amz-checksum-crc32c: oB8zEA==\r\naccept-ranges: bytes\r\ncontent-length: 381882\r\nexpires: Thu, 16 Jan 2025 14:42:50 GMT\r\ndate: Thu, 16 Jan 2025 14:42:50 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":383268,"size_decoded":383268,"mime_type":"font/woff","magic":"Web Open Font Format (Version 2), TrueType, length 383268, version 1.6553","md5":"8769ccfde3379b7ebcadd9529b49d0cc","sha1":"f0ccc08ceaab40e27a9200ab755beff24b9d5810","sha256":"406312aa9e36de68c1c1975221e22ccd619a390f5fe9665ce64eff29ae32ba4c","sha512":"45f0774300a5584201acca6bf75933c67af1a9f677b378feb13253dd98d978f47ba933b617d6689ae4abe269a1052aa1f88252e23f6a3bfb61fcec6fe3412e95","ssdeep":"6144:Fjc/+tW6WCBcZZ3qR2Ayeo7Gu/8OJYHzeMPSyofJ4f29cLs2dFYYMYvYNw8qyc9o:F6+Q6WCK3LsoyNOtMKyUJsPdFbt9Fk44","tlshash":"fc842320f84074eecb60db74b8486e4b15570e6171fee28ce342d75a0eaf05796b6b1b","first_seen":"2024-07-31T19:18:17Z","last_seen":"2026-06-12T04:04:50.666277Z","times_seen":3046,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":492,"dns":444,"connect":20,"send":0,"wait":10,"receive":26,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
