r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7236
Expires: Sun, 27 Nov 2022 16:41:18 GMT
Date: Sun, 27 Nov 2022 14:40:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4477
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:40:42 GMT
Last-Modified: Sun, 27 Nov 2022 13:26:05 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7110
Expires: Sun, 27 Nov 2022 16:39:12 GMT
Date: Sun, 27 Nov 2022 14:40:42 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 14:19:23 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1279
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LKf4KrRXeu0cYFHLxgXVgnqbESDUkjvhe/zwNNVuLOm/XMWcDjMyuKGPUsYZCqlTJ+EqDsfhwyI=
x-amz-request-id: FHW7A2QG03TX9FYG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 13:41:39 GMT
age: 3543
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
200 OK 4.9 kB URL HTTP/1.1 mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6441), with CRLF, LF line terminators
Hash b1dfb7e2bde4c1924ee38e94d621b568
4608abec677ce7a04d9a5cce7734751c4b054484
0ea9eeb8d06f8272bf1671f80e634c9a8323c44006785785e2a0b46d8f770b37
GET /singer/Sunidhi+Chauhan/new2old/1 HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Cache-Control:
Expires:
Pragma:
Etag: W/"98f9ef13432998cae1479109e7b9471a"
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 14:40:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
mail.mymp3song.guru/css/mymp3song.css
200 OK 1.9 kB URL HTTP/1.1 mail.mymp3song.guru/css/mymp3song.css
IP
File type assembler source text\012- assembler source, ASCII text, with CRLF line terminators
Hash e7b95525f991d8211b9c897eaa95a397
2a0a3c17aad10110d1b4ccf0a5f864f541f54d6b
efcd27be7a8bb96b305d6b69d77f8d773e2508ad4e20e5de4ecc380ae900ad3d
GET /css/mymp3song.css HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Aug 2022 23:19:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"63001a89-1dfa"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
mail.mymp3song.guru/siteuploads/thumb/sft83/41409_2.jpg
200 OK 6.9 kB URL HTTP/1.1 mail.mymp3song.guru/siteuploads/thumb/sft83/41409_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 90x100, components 3\012- data
Hash 8982f88ddb0a87d7d6634a136ead9cde
9a0e3eb29b66ee923ff03b8c34409bffe35e5a0e
7b1b815cd882cd19a0f7315aad9ffa5e33ffa2053def70147d412330162909e5
GET /siteuploads/thumb/sft83/41409_2.jpg HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: image/jpeg
Last-Modified: Thu, 07 Apr 2022 00:13:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"624e2cc6-1b77"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mail.mymp3song.guru/siteuploads/thumb/sft85/42026_2.jpg
200 OK 5.2 kB URL HTTP/1.1 mail.mymp3song.guru/siteuploads/thumb/sft85/42026_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 90x100, components 3\012- data
Hash b89f58d74e6fee6e8079e665509abfbb
28ed392a75935938be2b7e34032b2b6b6aee2e9c
314e7e84031f0bcb5be63354585abb48de449669a640a3cd737d792b263adcf3
GET /siteuploads/thumb/sft85/42026_2.jpg HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: image/jpeg
Last-Modified: Mon, 23 May 2022 11:50:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"628b750c-14e5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
mail.mymp3song.guru/siteuploads/thumb/sft86/42561_2.jpg
200 OK 7.1 kB URL HTTP/1.1 mail.mymp3song.guru/siteuploads/thumb/sft86/42561_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 90x100, components 3\012- data
Hash e39a91092523f5d36dc7d43a05b912a4
92c9578fd18b28e1975a26b61d081062d2fdb4b0
2890b2f93dada21b22c0b211d52ed74549c35bfab6ce2267a3255c1f92a2d6c2
GET /siteuploads/thumb/sft86/42561_2.jpg HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: image/jpeg
Last-Modified: Tue, 13 Sep 2022 20:42:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6320eb18-1c2d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
mail.mymp3song.guru/siteuploads/thumb/sft85/42029_2.jpg
200 OK 6.7 kB URL HTTP/1.1 mail.mymp3song.guru/siteuploads/thumb/sft85/42029_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 90x100, components 3\012- data
Hash d55000312c460dfddf553763555f19cb
03d598a053d5414efcecafe1694ed759a4411687
5f57bd50f00f6bdc96bc6fd89b3ca594704f6eb4c7dc6c2854e838b3d328d43e
GET /siteuploads/thumb/sft85/42029_2.jpg HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: image/jpeg
Last-Modified: Wed, 25 May 2022 10:01:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"628dfe78-1adb"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
mail.mymp3song.guru/siteuploads/thumb/c/5403_2.jpg
200 OK 6.6 kB URL HTTP/1.1 mail.mymp3song.guru/siteuploads/thumb/c/5403_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 90x101, components 3\012- data
Hash 1e86a9dbe96c322dbe4485aa5fc36971
b790cbba8268bd5d21195282481e37b369800e0e
01b1fa0ac8d52e1c5da44abfcfa2e611f83e5824d06651f50173b48c68bc0e64
GET /siteuploads/thumb/c/5403_2.jpg HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: image/jpeg
Last-Modified: Thu, 05 May 2022 23:28:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"62745db7-1a48"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
mail.mymp3song.guru/siteuploads/thumb/c/5272_2.jpg
200 OK 6.7 kB URL HTTP/1.1 mail.mymp3song.guru/siteuploads/thumb/c/5272_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 90x100, components 3\012- data
Hash 524f45802f6642619ff8732dc6364142
9e536109e802674a76c95fbd8e84888fcf6a7497
36562a6dc84ea12b4e3e1addbcfb32589683e8bd1fc764a4c81b68767a0b47de
GET /siteuploads/thumb/c/5272_2.jpg HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 21 May 2022 12:42:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6288de3f-1aca"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
mail.mymp3song.guru/siteuploads/thumb/sft86/42707_2.jpg
200 OK 7.4 kB URL HTTP/1.1 mail.mymp3song.guru/siteuploads/thumb/sft86/42707_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 90x100, components 3\012- data
Hash 97e9f74f228fad29e5cca01b63d3a3a6
bc7dccade8122fd82cb793a137d8cd249ecd5df4
f3009a7c3fb73f53d8ad6b3e193f69652a920279a7b87cbbfd88a347dee71f04
GET /siteuploads/thumb/sft86/42707_2.jpg HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: image/jpeg
Last-Modified: Sat, 29 Oct 2022 11:28:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"635d0e60-1d65"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
mail.mymp3song.guru/images/MyMp3Song_p.png
200 OK 3.5 kB URL HTTP/1.1 mail.mymp3song.guru/images/MyMp3Song_p.png
IP
File type PNG image data, 166 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash c4620703bd723cd78a174a17d54da713
505d7c41fd0ac851702a0ab263b7a1c0c668dba0
23e7e5fa58fab969189da0455a3b256d3e5f14e75b079ff1cc3f0b1a9ef72121
GET /images/MyMp3Song_p.png HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: image/png
Last-Modified: Tue, 13 Nov 2018 20:00:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5beb2d4a-d68"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
mail.mymp3song.guru/siteuploads/thumb/sft82/40859_2.jpg
200 OK 7.2 kB URL HTTP/1.1 mail.mymp3song.guru/siteuploads/thumb/sft82/40859_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 90x100, components 3\012- data
Hash d93fe67e352b0a5738789ff4e2508cef
c909d7751ce2cff1c570bc9a771febe695d46b60
675df0596224774a46797f065a91a1ab4d055b81fcc57a4ea9b31a6e7a6e704f
GET /siteuploads/thumb/sft82/40859_2.jpg HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: image/jpeg
Last-Modified: Sun, 27 Feb 2022 01:58:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"621adacf-1c85"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
mail.mymp3song.guru/images/bg.png
200 OK 208 B URL HTTP/1.1 mail.mymp3song.guru/images/bg.png
IP
File type PNG image data, 1 x 80, 8-bit/color RGB, non-interlaced\012- data
Hash 0990d18d6b2add07289a41c6421c9cfe
1d88f5cf31eb261bf9d90389d0722bfa14df25ab
c0a35795cc7fd21120d4b99405ae169e53d0d549ed90026f372347638efa902d
GET /images/bg.png HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/css/mymp3song.css
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: image/png
Content-Length: 208
Last-Modified: Sun, 28 Oct 2018 17:16:46 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "5bd5eefe-d0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
www.googletagmanager.com/gtag/js?id=UA-143623007-1
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-143623007-1
IP
File type ASCII text, with very long lines (1921)
Hash 7fdc155645a532afb5ed21769a20ece7
b6a5873d159216410573dd60b8bfc9c47edba229
9031609aef4e28a628e088323367fb0e4a84c08399d78737ba9fffc1269a0081
GET /gtag/js?id=UA-143623007-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 27 Nov 2022 14:40:42 GMT
expires: Sun, 27 Nov 2022 14:40:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44712
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mail.mymp3song.guru/siteuploads/thumb/sft81/40403_2.jpg
200 OK 6.2 kB URL HTTP/1.1 mail.mymp3song.guru/siteuploads/thumb/sft81/40403_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 90x100, components 3\012- data
Hash dbfb61ad4110969853ff4c7ad2a92cc6
64e9e81c2c265e1267160da2f2c00269029d4633
bbdf756f4862a3f4a66a56eda497d3fe8ecae3ad2a1feded829656211304207b
GET /siteuploads/thumb/sft81/40403_2.jpg HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: image/jpeg
Last-Modified: Sun, 30 Jan 2022 21:51:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"61f7084b-18b4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.a-ads.com/2002764?size=320x100
200 OK 4.7 kB URL HTTP/1.1 ad.a-ads.com/2002764?size=320x100
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Hash 60b5a8f0c5083c00e34b8e3f307c6c5a
e43911718948564eec691230e404ee826e9d3ea0
74bd963facb8c925464a7973527094fbac27a1781da27b9ba60eed3733ed0542
GET /2002764?size=320x100 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 14:40:42 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Status: 200 OK
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger(R)
X-Original-Referer: http://mail.mymp3song.guru/
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 87ba15080000bdb5443986bcef01da4c
d9f7316e0860794a336f9321dbe1fa685d6d2fc7
c8db87e589044bb801dc6967e9142e02de8a2be3a4aca6d2ebf818482d6d5440
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8DB87E589044BB801DC6967E9142E02DE8A2BE3A4ACA6D2EBF818482D6D5440"
Last-Modified: Sat, 26 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2307
Expires: Sun, 27 Nov 2022 15:19:09 GMT
Date: Sun, 27 Nov 2022 14:40:42 GMT
Connection: keep-alive
ad.a-ads.com/2002764?size=320x100
200 OK 4.7 kB URL HTTP/1.1 ad.a-ads.com/2002764?size=320x100
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Hash e4850f6e03c180edd5d830d4b203690a
62df496cc4c9715ca1c0f1fea9cd4ef1502a196d
9b4965434c724ca62dd99274cb80b32332e4b18f4e5938cec67e0c39702decc5
GET /2002764?size=320x100 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 14:40:43 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Status: 200 OK
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger(R)
X-Original-Referer: http://mail.mymp3song.guru/
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive
Content-Encoding: gzip
mail.mymp3song.guru/images/favicon.ico
200 OK 906 B URL HTTP/1.1 mail.mymp3song.guru/images/favicon.ico
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 68e71418228b8bcd04a8051d38979205
14a92ceb8707544616f708a4754b809de24b7f20
7f34ac8d9bf08b3a1901973007e22176780ab16927ffd4a152277794090e30bd
GET /images/favicon.ico HTTP/1.1
Host: mail.mymp3song.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.mymp3song.guru/singer/Sunidhi+Chauhan/new2old/1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 27 Nov 2022 14:40:43 GMT
Content-Type: image/x-icon
Last-Modified: Thu, 03 Nov 2016 21:47:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"581bb068-373"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
static.a-ads.com/a-ads-banners/424823/320x100?region=eu-central-1
200 OK 38 kB URL HTTP/1.1 static.a-ads.com/a-ads-banners/424823/320x100?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 320 x 100\012- data
Hash d6c423c60f1adc659369bd814c69d300
49a8776fc501ad0526a2efa1d9360c1ce41ae4a4
26b90ba26845eec2e4f909687cd0713d5e7dc6a0730318f32593ee569aa0353e
GET /a-ads-banners/424823/320x100?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ad.a-ads.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 14:40:43 GMT
Content-Type: image/gif
Content-Length: 37813
Connection: keep-alive
x-amz-id-2: hfHS65Nj7yjedt3Hni2AhhfxbuYVcZUi9dd/+vP9mSXn/eW9ghtsjaTBnKOAhI03M9XTfcDOTt0=
x-amz-request-id: 39A0N4SHZ96YCRA0
x-amz-replication-status: COMPLETED
Last-Modified: Mon, 07 Nov 2022 15:06:11 GMT
ETag: "d6c423c60f1adc659369bd814c69d300"
Cache-Control: max-age=315360000
x-amz-version-id: VAfOGVwfNtdq6oZ9ENiSZ5qq4L9Ufu36
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Accept-Ranges: bytes
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 27 Nov 2022 12:41:08 GMT
expires: Sun, 27 Nov 2022 14:41:08 GMT
cache-control: public, max-age=7200
age: 7175
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4a65d58a18.7a07c25a29.com/1e9a067ab9421c931e092a37d792969d/17360?version_name=c
200 OK 888 B URL HTTP/2 4a65d58a18.7a07c25a29.com/1e9a067ab9421c931e092a37d792969d/17360?version_name=c
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (888), with no line terminators
Hash 0be41a7729b334fe57e4f3c8ce645c93
9e1f48570d23890f8f831cb9ab599ca34565edb7
71f0d54397d62d4b4a17d2913a39cfe0d14bd803cb9216b764b724b1fa94e090
Analyzer Verdict Alert quad9 Sinkholed
GET /1e9a067ab9421c931e092a37d792969d/17360?version_name=c HTTP/1.1
Host: 4a65d58a18.7a07c25a29.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mail.mymp3song.guru
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 14:40:43 GMT
content-type: application/json
content-length: 888
server: nginx/1.18.0
cache-control: max-age=300
expires: Sun, 27 Nov 2022 14:45:43 GMT
x-proxy-cache: MISS
access-control-allow-origin: *
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 14:11:12 GMT
cache-control: public,max-age=3600
age: 1771
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2ff6ae8af7bbae616f97fcbd042132a7
eeab6db445d4a6ccbfb8f0209843cd11d0f8b582
a5a56638f91d9149919a5e49ba8a7e93f81f05d93ed690a5d455b2da661b537a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A5A56638F91D9149919A5E49BA8A7E93F81F05D93ED690A5D455B2DA661B537A"
Last-Modified: Sat, 26 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2223
Expires: Sun, 27 Nov 2022 15:17:46 GMT
Date: Sun, 27 Nov 2022 14:40:43 GMT
Connection: keep-alive
js.wpadmngr.com/npc/sdk/wp-banners.js
200 OK 0 B URL HTTP/2 js.wpadmngr.com/npc/sdk/wp-banners.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 14:40:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Sun, 27 Nov 2022 14:45:43 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/426610/320x100?region=eu-central-1
200 OK 203 kB URL HTTP/1.1 static.a-ads.com/a-ads-banners/426610/320x100?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 320 x 100\012- data
Size 203 kB (203130 bytes)
Hash 41fdb894cdbde95d2b3709e6f9a891cb
f1c409a13474df704955fbdf4cc0524ec06dcd50
c4e8f404ef8b0c487b659bff5d2b3da915a9c7749258bce5cdbea54e7bafdc53
GET /a-ads-banners/426610/320x100?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ad.a-ads.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 14:40:43 GMT
Content-Type: image/gif
Content-Length: 203130
Connection: keep-alive
x-amz-id-2: aQphz0j1/OaUM/DaP/bWkEf9H8/5ywW33RWjGcSF2z1rA226D3Wyk4QLcA3eMJOdiKEvO1e3lJ0=
x-amz-request-id: M2HG0N5PY0WAKD0R
x-amz-replication-status: COMPLETED
Last-Modified: Sun, 20 Nov 2022 16:37:36 GMT
ETag: "41fdb894cdbde95d2b3709e6f9a891cb"
Cache-Control: max-age=315360000
x-amz-version-id: d08VbeFtNhqi_J0ZEvpCkmSEPRKE0T.K
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4222
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:40:43 GMT
Last-Modified: Sun, 27 Nov 2022 13:30:21 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
fp.metricswpsh.com/fp?tag_id=17360
204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=17360
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=17360 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://mail.mymp3song.guru/
Origin: http://mail.mymp3song.guru
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sun, 27 Nov 2022 14:40:43 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: http://mail.mymp3song.guru
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
notification.tubecup.net/tags?tag_id=17360&timezone_olson=UTC&version_name=c
200 OK 1.5 kB URL HTTP/2 notification.tubecup.net/tags?tag_id=17360&timezone_olson=UTC&version_name=c
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with very long lines (1485), with no line terminators
Hash 1c952ac7ec4427c8c46cda988b8b5a3c
938201bceae75a78f7ed3797823bf13ef69737be
0388285b9e0c3aba30b09ac30d1c13c3daf67fe740590d17f535f9262e53e2cb
GET /tags?tag_id=17360&timezone_olson=UTC&version_name=c HTTP/1.1
Host: notification.tubecup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mail.mymp3song.guru
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 27 Nov 2022 14:40:43 GMT
content-type: application/json
content-length: 1485
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=17360
200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=17360
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=17360 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22284
Origin: http://mail.mymp3song.guru
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 27 Nov 2022 14:40:43 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://mail.mymp3song.guru
Set-Cookie: id=7858250868977398931; Expires=Mon, 27 Nov 2023 14:40:43 GMT; Secure; SameSite=None
Vary: Origin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 13b26ac133ad25ea6583f12f18384908
ee2c8e36ceb57e3f20e79297622f000d10a2d45f
378a453e603f05376de058e2b083e5bcfbd63a26fb77c817f800ec963c7c4fb2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "378A453E603F05376DE058E2B083E5BCFBD63A26FB77C817F800EC963C7C4FB2"
Last-Modified: Sat, 26 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6274
Expires: Sun, 27 Nov 2022 16:25:17 GMT
Date: Sun, 27 Nov 2022 14:40:43 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: t6ylDyQIylwVbV12lFOyuw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uA0nw2VH/Wvjr0m4ADdCfpjvBf4=
dec5c7295d.47daeb1eac.com/in/track?data=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
200 OK 0 B URL HTTP/2 dec5c7295d.47daeb1eac.com/in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI3ODM1MDU3ODQ4NzU4MTQ5MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTcuMiIsInRhZ19pZCI6MTczNjAsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC41MiwiaXNfdjIiOjEsImlzX3YyX2VtcHR5IjpudWxsLCJ1c2VyX2tleXdvcmRzIjoiRnJlZSUyQ0Rvd25sb2FkJTJDU3VuaWRoaSUyQ0NoYXVoYW4lMkNNcDMlMkNTb25ncyUyQ015TXAzU29uZyUyQ2ZyZWUlMkNkb3dubG9hZCUyQ1N1bmlkaGklMkNDaGF1aGFuJTJDbXAzJTJDc29uZ3MlMkNmcm9tJTJDbWlyY2hpZnVuaW5mbyUyQ0ZyZWUlMkNEb3dubG9hZCUyQ1N1bmlkaGklMkNDaGF1aGFuJTJDTXAzJTJDU29uZ3MlMkNmcm9tJTJDTXlNcDNTb25nJTIwIn0=
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/track?data=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 HTTP/1.1
Host: dec5c7295d.47daeb1eac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mail.mymp3song.guru
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 14:40:43 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-6GKFGNW6BH>m=2oeb90&_p=611345485&cid=920536011.1669560043&ul=en-us&sr=1280x1024&_s=1&sid=1669560042&sct=1&seg=0&dl=http%3A%2F%2Fmail.mymp3song.guru%2Fsinger%2FSunidhi%2BChauhan%2Fnew2old%2F1&dt=Free%20Download%20Sunidhi%20Chauhan%20Mp3%20Songs%20-%20MyMp3Song&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-6GKFGNW6BH>m=2oeb90&_p=611345485&cid=920536011.1669560043&ul=en-us&sr=1280x1024&_s=1&sid=1669560042&sct=1&seg=0&dl=http%3A%2F%2Fmail.mymp3song.guru%2Fsinger%2FSunidhi%2BChauhan%2Fnew2old%2F1&dt=Free%20Download%20Sunidhi%20Chauhan%20Mp3%20Songs%20-%20MyMp3Song&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-6GKFGNW6BH>m=2oeb90&_p=611345485&cid=920536011.1669560043&ul=en-us&sr=1280x1024&_s=1&sid=1669560042&sct=1&seg=0&dl=http%3A%2F%2Fmail.mymp3song.guru%2Fsinger%2FSunidhi%2BChauhan%2Fnew2old%2F1&dt=Free%20Download%20Sunidhi%20Chauhan%20Mp3%20Songs%20-%20MyMp3Song&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mail.mymp3song.guru
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://mail.mymp3song.guru
date: Sun, 27 Nov 2022 14:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4a65d58a18.7a07c25a29.com/0475c3a213601220913ee6b1e280a0b9.js
200 OK 73 kB URL HTTP/2 4a65d58a18.7a07c25a29.com/0475c3a213601220913ee6b1e280a0b9.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash c2b300e5f3345aa192e663c4f7265de1
c7c64fb0817e9cbf7f151094687b2fde7a548dc5
619fc2b4d96c1da2b3c04d5ebe03cfd7da53b264f5bf2d76298cc5cd872ff7dd
Analyzer Verdict Alert quad9 Sinkholed
GET /0475c3a213601220913ee6b1e280a0b9.js HTTP/1.1
Host: 4a65d58a18.7a07c25a29.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 14:40:43 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 22 Nov 2022 16:27:58 GMT
etag: W/"637cf88e-48777"
content-encoding: gzip
expires: Sun, 27 Nov 2022 14:45:43 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 87e97dc71aa5421c5d65f231b4bb3705
3c27a5b251e456c27823d83370e07cbfbd77386d
fc8792c7dbd760121d46c5695189e3f98a5a079bc0e5aabbfdca4fe3911332ef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC8792C7DBD760121D46C5695189E3F98A5A079BC0E5AABBFDCA4FE3911332EF"
Last-Modified: Sat, 26 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3916
Expires: Sun, 27 Nov 2022 15:45:59 GMT
Date: Sun, 27 Nov 2022 14:40:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 87e97dc71aa5421c5d65f231b4bb3705
3c27a5b251e456c27823d83370e07cbfbd77386d
fc8792c7dbd760121d46c5695189e3f98a5a079bc0e5aabbfdca4fe3911332ef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC8792C7DBD760121D46C5695189E3F98A5A079BC0E5AABBFDCA4FE3911332EF"
Last-Modified: Sat, 26 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3916
Expires: Sun, 27 Nov 2022 15:45:59 GMT
Date: Sun, 27 Nov 2022 14:40:43 GMT
Connection: keep-alive
bd2bc05960.47daeb1eac.com/in/multy
204 No Content 0 B URL HTTP/2 bd2bc05960.47daeb1eac.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /in/multy HTTP/1.1
Host: bd2bc05960.47daeb1eac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://mail.mymp3song.guru/
Origin: http://mail.mymp3song.guru
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Sun, 27 Nov 2022 14:40:43 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3067
Expires: Sun, 27 Nov 2022 15:31:51 GMT
Date: Sun, 27 Nov 2022 14:40:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3067
Expires: Sun, 27 Nov 2022 15:31:51 GMT
Date: Sun, 27 Nov 2022 14:40:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3067
Expires: Sun, 27 Nov 2022 15:31:51 GMT
Date: Sun, 27 Nov 2022 14:40:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3067
Expires: Sun, 27 Nov 2022 15:31:51 GMT
Date: Sun, 27 Nov 2022 14:40:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F661e728e-05a1-40d9-ae81-c058443324b3.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F661e728e-05a1-40d9-ae81-c058443324b3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 892849386662d30042f01ab952a3ec14
3b349ac17a00d68875e64bee110ec85d07cffda2
893797d55f15081d45af7a31af9fefe106ace9ba236e9b113787d07ab416faf9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F661e728e-05a1-40d9-ae81-c058443324b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9926
x-amzn-requestid: b03f4d3b-b144-4466-ab11-96c8201d75a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8Je2G_NIAMFZRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b22c5-5ef5e11a198cd8202372d8da;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:03:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Eeu-CbRcm2Zv8ZVXNO3vhUt2shbKNQZ1YqsxCMk96twd7zL_rceGYg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 22:05:31 GMT
age: 59713
etag: "3b349ac17a00d68875e64bee110ec85d07cffda2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:41 GMT
age: 60543
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:37 GMT
age: 60547
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15290721-a62e-49b8-80c6-967680cff24f.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15290721-a62e-49b8-80c6-967680cff24f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f7f16c0f8a8e710210ce77c0e4c1c2a2
590c34be54c9889eec4ff7993e070fda836f711f
4224287ba765da59c877ac4f1dec65accc5bec934b7598d9cbbee669ba4ab12e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15290721-a62e-49b8-80c6-967680cff24f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6883
x-amzn-requestid: 9e3878c9-1817-427e-b121-969a8cbc7ad8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cL1ySF0tIAMFY4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638169a8-5143ffea77b70cf67ef60ad7;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 01:19:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GT3Futv4Ztnl2Og2TQFk5311m92Mv_jfvkIZYJXpjJMdkxSB6MI06g==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 06:42:16 GMT
age: 28708
etag: "590c34be54c9889eec4ff7993e070fda836f711f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e97baa4851785eac92c719abf481c64
c32a57038d3cdbc514c9081c9938eca6a04fb481
adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8387
x-amzn-requestid: e4ce369f-7654-4c1a-94c2-70c913eb1a01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFL0tEcqIAMFXHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec01d-37bd969f4cdfe220096b8c1f;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 00:51:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: __2hrJIdzCKzhuJ_YfbSSfz-WwyIqnPugk7P6SuYSjn6b2wwm0otCw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 20:58:18 GMT
age: 63746
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:50:08 GMT
age: 60636
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bd2bc05960.47daeb1eac.com/in/multy
200 OK 19 kB URL HTTP/2 bd2bc05960.47daeb1eac.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (18735), with no line terminators
Hash 77841279325e3f824b7aaf37fb623b0c
2a58a1a055c891ff1db907ab16ad5992c31d8e8b
d05db2539425184d0de3b1e58d68147459a841163df36b329e6a60d2c8fcac43
Analyzer Verdict Alert quad9 Sinkholed
POST /in/multy HTTP/1.1
Host: bd2bc05960.47daeb1eac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 899
Origin: http://mail.mymp3song.guru
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 14:40:45 GMT
content-type: application/json
content-length: 18738
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
bd2bc05960.47daeb1eac.com/in/show/?mid=342480059624669346&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1829652655&sid=3132209822&cid=13369&price=0.00138019&is_cpm=0&cpm=0&ecpm=0.03248719230176197&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=mail.mymp3song.guru&hostname=auc-inpage-hz-0-b&site_id=3113684&spot_id=13684&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-11-27&is_native=2&auction_queue=0&burl=zCxysJjogLIIu4hISYhPrmUviJI2mcOuVB3hUA0gXHKh94c1NzYGLg&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5313684&adblock=0&auction_host=all&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-6&min_cpm=0.0022347023897927496&placement_type_id=&skin_test=0&verify_hash=fbc8889f2cd3c570053681cc37b46d12&score=96.06093366033475&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1829652655%26spot_id%3D13684%26is_adult%3D0%26p%3Dhttp%253A%252F%252Fmail.mymp3song.guru%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.00138019&user_fp=0&v2_track=0&url=c8w1g7mr8Ub6OSrcUBkHJGzOW4pgu3LjqzLMI5EOo_cjR-rOrfH3Hi8UJjFylLMppnQUbMDEn5xrKBNmyZibvGNMJhednbGTmPOyX7FK_UEqLFFXjVj3kmuL1zdsE0B1YahWWaCgz2NY_i2bbuNpaE93MPsnkrvF2CuROo4MiXoKbFU_JA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=2&vertical_id=0&real_bid=0.001041629393&pr=&user_keywords=&auc_type=1&aid=586&ext_cid=0&device_theme=light&keywords=&mlc=1&format=default-slide-t_r-body&mlf=1&cpa=e4034c66-d45a-4142-b690-e9e169ad100f
302 Found 0 B URL HTTP/2 bd2bc05960.47daeb1eac.com/in/show/?mid=342480059624669346&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1829652655&sid=3132209822&cid=13369&price=0.00138019&is_cpm=0&cpm=0&ecpm=0.03248719230176197&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=mail.mymp3song.guru&hostname=auc-inpage-hz-0-b&site_id=3113684&spot_id=13684&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-11-27&is_native=2&auction_queue=0&burl=zCxysJjogLIIu4hISYhPrmUviJI2mcOuVB3hUA0gXHKh94c1NzYGLg&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5313684&adblock=0&auction_host=all&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-6&min_cpm=0.0022347023897927496&placement_type_id=&skin_test=0&verify_hash=fbc8889f2cd3c570053681cc37b46d12&score=96.06093366033475&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1829652655%26spot_id%3D13684%26is_adult%3D0%26p%3Dhttp%253A%252F%252Fmail.mymp3song.guru%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.00138019&user_fp=0&v2_track=0&url=c8w1g7mr8Ub6OSrcUBkHJGzOW4pgu3LjqzLMI5EOo_cjR-rOrfH3Hi8UJjFylLMppnQUbMDEn5xrKBNmyZibvGNMJhednbGTmPOyX7FK_UEqLFFXjVj3kmuL1zdsE0B1YahWWaCgz2NY_i2bbuNpaE93MPsnkrvF2CuROo4MiXoKbFU_JA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=2&vertical_id=0&real_bid=0.001041629393&pr=&user_keywords=&auc_type=1&aid=586&ext_cid=0&device_theme=light&keywords=&mlc=1&format=default-slide-t_r-body&mlf=1&cpa=e4034c66-d45a-4142-b690-e9e169ad100f
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/show/?mid=342480059624669346&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1829652655&sid=3132209822&cid=13369&price=0.00138019&is_cpm=0&cpm=0&ecpm=0.03248719230176197&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=mail.mymp3song.guru&hostname=auc-inpage-hz-0-b&site_id=3113684&spot_id=13684&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-11-27&is_native=2&auction_queue=0&burl=zCxysJjogLIIu4hISYhPrmUviJI2mcOuVB3hUA0gXHKh94c1NzYGLg&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5313684&adblock=0&auction_host=all&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-6&min_cpm=0.0022347023897927496&placement_type_id=&skin_test=0&verify_hash=fbc8889f2cd3c570053681cc37b46d12&score=96.06093366033475&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1829652655%26spot_id%3D13684%26is_adult%3D0%26p%3Dhttp%253A%252F%252Fmail.mymp3song.guru%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.00138019&user_fp=0&v2_track=0&url=c8w1g7mr8Ub6OSrcUBkHJGzOW4pgu3LjqzLMI5EOo_cjR-rOrfH3Hi8UJjFylLMppnQUbMDEn5xrKBNmyZibvGNMJhednbGTmPOyX7FK_UEqLFFXjVj3kmuL1zdsE0B1YahWWaCgz2NY_i2bbuNpaE93MPsnkrvF2CuROo4MiXoKbFU_JA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=2&vertical_id=0&real_bid=0.001041629393&pr=&user_keywords=&auc_type=1&aid=586&ext_cid=0&device_theme=light&keywords=&mlc=1&format=default-slide-t_r-body&mlf=1&cpa=e4034c66-d45a-4142-b690-e9e169ad100f HTTP/1.1
Host: bd2bc05960.47daeb1eac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 27 Nov 2022 14:40:45 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
X-Firefox-Spdy: h2
bd2bc05960.47daeb1eac.com/in/show/?mid=342480059624669346&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1829652655&sid=3132209822&cid=12648&price=0.016750000249594454&is_cpm=0&cpm=0&ecpm=0.05856578417720598&crid=5713643&crtid=1c81c2cc33a9d6c8cd6172aeefa0077e&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=mail.mymp3song.guru&hostname=auc-inpage-hz-0-b&site_id=3113684&spot_id=13684&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669646444&created_at=2022-11-27&is_native=1&auction_queue=0&burl=LhMfWW1KTdqNvz-yPY0EW4oLRyjZmqxWzsplrQuBSc0dsbzHACcy2w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7313684&adblock=0&auction_host=all&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB1-6&min_cpm=0.00025052431630480365&placement_type_id=&skin_test=0&verify_hash=3c748d223febe7e6243860563600b079&score=96.06093366033475&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1829652655%26spot_id%3D13684%26is_adult%3D0%26p%3Dhttp%253A%252F%252Fmail.mymp3song.guru%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.016750000249594454&user_fp=0&v2_track=0&url=XBFxhe8Pr-DLZrfhN7qJllLO1GOUDXIsq_9RqxLbi9egHoANWxU10IP1lGL_6Pd8GrLLtHZsrLNlyP2VHBdi-lTg2e_B5djB2XRXYOrmiPCbqjyB2dH2G1-ZZY_42wrP9j7ck6pklEWmcINlOuxem8dBdERyjOXlEh2-IXgvqqTRFrf22jJl10bJQPtbk7vKakygx5advEGtM8jD1_3DMGDv_vjYtOhlS7KlTIWjqgUjaS7ICmEuTyhVlLplgpvSFlJYPVsvZVISLfTNuImd8EzoHPO4leCY3KsHZOt-zXx0UHEiCOBVfGBdnrD33AX55zpoQfwPmHIQez1erzJCuRpmYs2zXd2pbimvr6KrwfPAq4MCUxNp7NPwNtqgfcu3O88__M_ufCcBOkOycG1HhTbZMvv2TLqis23PMyGXPbQt0fB2GisjaaILdmDgT-MyilVb4EkZaAB8gOEkHwIL8URbAZ9i96uQhG9rnQJRCNEpE75YZzM7-C5yZgxPXgaPiL0h5WINw53XRtBkseQWsXXp0eBC-fL7tOei3va_E1YTQgDTYgnd4Xn2NYbWGg2K6e0aFJk1gi1A3ZBwQAGFlBePsJugtnaxp570a1D-QgDm6ocNtAuUqVsUVRdYXJGz3krv5xOfBeErJoME7oiUExYs5-zz-VgH60f6J6G-MlRgHvQ9ks7idFbHQE5mdRPc_QHT2S__okyvK59diVqMzC0acIjVTLPIkLJ7QgHWuCT_61AvpW-V3PIKwiWVlvFOl4cL6DDt6plZ9ilZ91yk9HGYbKN9AfFHSTukhUBUwCykmqmLLNU_IyPSnaBlQl0XdohWD5YOV4sYwxa3-nG4zkwBaHqme0A5P-qQCOO_Q2ig--Bipufl86IAzTqn4GX9LO90MOsgs2YIv7lfYnWiCsesmWdxCSExP0EThaoGHkn3YMS_S1fzlJ52mHHG7vm50a1GiT5MuCSCxMrEsI1DFjQKZt-G_ltL8lu08rKuaQfi5NPwMuI6GsV2n_Gb9RZZvSe03e-Tggu51KJr4Fc-9CWbkCylEEBj87oxq-MGiK313Zm1VooTIZfnmzpFoDgHvmZUt_2MCMs&image_url=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F492x328%2Fq85%2Fimage%2Fvk%2F3643%2F643%2Frect_626aadf074621t1651158512r522.png.webp&skin_id=2&vertical_id=0&real_bid=0.016750000249594454&pr=&user_keywords=&auc_type=1&aid=412&ext_cid=0&device_theme=light&keywords=&format=default-slide-t_r-body&cpa=6f515013-ae41-4d61-90da-5f8db98e4f18
302 Found 0 B URL HTTP/2 bd2bc05960.47daeb1eac.com/in/show/?mid=342480059624669346&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1829652655&sid=3132209822&cid=12648&price=0.016750000249594454&is_cpm=0&cpm=0&ecpm=0.05856578417720598&crid=5713643&crtid=1c81c2cc33a9d6c8cd6172aeefa0077e&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=mail.mymp3song.guru&hostname=auc-inpage-hz-0-b&site_id=3113684&spot_id=13684&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669646444&created_at=2022-11-27&is_native=1&auction_queue=0&burl=LhMfWW1KTdqNvz-yPY0EW4oLRyjZmqxWzsplrQuBSc0dsbzHACcy2w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7313684&adblock=0&auction_host=all&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB1-6&min_cpm=0.00025052431630480365&placement_type_id=&skin_test=0&verify_hash=3c748d223febe7e6243860563600b079&score=96.06093366033475&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1829652655%26spot_id%3D13684%26is_adult%3D0%26p%3Dhttp%253A%252F%252Fmail.mymp3song.guru%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.016750000249594454&user_fp=0&v2_track=0&url=XBFxhe8Pr-DLZrfhN7qJllLO1GOUDXIsq_9RqxLbi9egHoANWxU10IP1lGL_6Pd8GrLLtHZsrLNlyP2VHBdi-lTg2e_B5djB2XRXYOrmiPCbqjyB2dH2G1-ZZY_42wrP9j7ck6pklEWmcINlOuxem8dBdERyjOXlEh2-IXgvqqTRFrf22jJl10bJQPtbk7vKakygx5advEGtM8jD1_3DMGDv_vjYtOhlS7KlTIWjqgUjaS7ICmEuTyhVlLplgpvSFlJYPVsvZVISLfTNuImd8EzoHPO4leCY3KsHZOt-zXx0UHEiCOBVfGBdnrD33AX55zpoQfwPmHIQez1erzJCuRpmYs2zXd2pbimvr6KrwfPAq4MCUxNp7NPwNtqgfcu3O88__M_ufCcBOkOycG1HhTbZMvv2TLqis23PMyGXPbQt0fB2GisjaaILdmDgT-MyilVb4EkZaAB8gOEkHwIL8URbAZ9i96uQhG9rnQJRCNEpE75YZzM7-C5yZgxPXgaPiL0h5WINw53XRtBkseQWsXXp0eBC-fL7tOei3va_E1YTQgDTYgnd4Xn2NYbWGg2K6e0aFJk1gi1A3ZBwQAGFlBePsJugtnaxp570a1D-QgDm6ocNtAuUqVsUVRdYXJGz3krv5xOfBeErJoME7oiUExYs5-zz-VgH60f6J6G-MlRgHvQ9ks7idFbHQE5mdRPc_QHT2S__okyvK59diVqMzC0acIjVTLPIkLJ7QgHWuCT_61AvpW-V3PIKwiWVlvFOl4cL6DDt6plZ9ilZ91yk9HGYbKN9AfFHSTukhUBUwCykmqmLLNU_IyPSnaBlQl0XdohWD5YOV4sYwxa3-nG4zkwBaHqme0A5P-qQCOO_Q2ig--Bipufl86IAzTqn4GX9LO90MOsgs2YIv7lfYnWiCsesmWdxCSExP0EThaoGHkn3YMS_S1fzlJ52mHHG7vm50a1GiT5MuCSCxMrEsI1DFjQKZt-G_ltL8lu08rKuaQfi5NPwMuI6GsV2n_Gb9RZZvSe03e-Tggu51KJr4Fc-9CWbkCylEEBj87oxq-MGiK313Zm1VooTIZfnmzpFoDgHvmZUt_2MCMs&image_url=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F492x328%2Fq85%2Fimage%2Fvk%2F3643%2F643%2Frect_626aadf074621t1651158512r522.png.webp&skin_id=2&vertical_id=0&real_bid=0.016750000249594454&pr=&user_keywords=&auc_type=1&aid=412&ext_cid=0&device_theme=light&keywords=&format=default-slide-t_r-body&cpa=6f515013-ae41-4d61-90da-5f8db98e4f18
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/show/?mid=342480059624669346&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1829652655&sid=3132209822&cid=12648&price=0.016750000249594454&is_cpm=0&cpm=0&ecpm=0.05856578417720598&crid=5713643&crtid=1c81c2cc33a9d6c8cd6172aeefa0077e&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=mail.mymp3song.guru&hostname=auc-inpage-hz-0-b&site_id=3113684&spot_id=13684&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669646444&created_at=2022-11-27&is_native=1&auction_queue=0&burl=LhMfWW1KTdqNvz-yPY0EW4oLRyjZmqxWzsplrQuBSc0dsbzHACcy2w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7313684&adblock=0&auction_host=all&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB1-6&min_cpm=0.00025052431630480365&placement_type_id=&skin_test=0&verify_hash=3c748d223febe7e6243860563600b079&score=96.06093366033475&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1829652655%26spot_id%3D13684%26is_adult%3D0%26p%3Dhttp%253A%252F%252Fmail.mymp3song.guru%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.016750000249594454&user_fp=0&v2_track=0&url=XBFxhe8Pr-DLZrfhN7qJllLO1GOUDXIsq_9RqxLbi9egHoANWxU10IP1lGL_6Pd8GrLLtHZsrLNlyP2VHBdi-lTg2e_B5djB2XRXYOrmiPCbqjyB2dH2G1-ZZY_42wrP9j7ck6pklEWmcINlOuxem8dBdERyjOXlEh2-IXgvqqTRFrf22jJl10bJQPtbk7vKakygx5advEGtM8jD1_3DMGDv_vjYtOhlS7KlTIWjqgUjaS7ICmEuTyhVlLplgpvSFlJYPVsvZVISLfTNuImd8EzoHPO4leCY3KsHZOt-zXx0UHEiCOBVfGBdnrD33AX55zpoQfwPmHIQez1erzJCuRpmYs2zXd2pbimvr6KrwfPAq4MCUxNp7NPwNtqgfcu3O88__M_ufCcBOkOycG1HhTbZMvv2TLqis23PMyGXPbQt0fB2GisjaaILdmDgT-MyilVb4EkZaAB8gOEkHwIL8URbAZ9i96uQhG9rnQJRCNEpE75YZzM7-C5yZgxPXgaPiL0h5WINw53XRtBkseQWsXXp0eBC-fL7tOei3va_E1YTQgDTYgnd4Xn2NYbWGg2K6e0aFJk1gi1A3ZBwQAGFlBePsJugtnaxp570a1D-QgDm6ocNtAuUqVsUVRdYXJGz3krv5xOfBeErJoME7oiUExYs5-zz-VgH60f6J6G-MlRgHvQ9ks7idFbHQE5mdRPc_QHT2S__okyvK59diVqMzC0acIjVTLPIkLJ7QgHWuCT_61AvpW-V3PIKwiWVlvFOl4cL6DDt6plZ9ilZ91yk9HGYbKN9AfFHSTukhUBUwCykmqmLLNU_IyPSnaBlQl0XdohWD5YOV4sYwxa3-nG4zkwBaHqme0A5P-qQCOO_Q2ig--Bipufl86IAzTqn4GX9LO90MOsgs2YIv7lfYnWiCsesmWdxCSExP0EThaoGHkn3YMS_S1fzlJ52mHHG7vm50a1GiT5MuCSCxMrEsI1DFjQKZt-G_ltL8lu08rKuaQfi5NPwMuI6GsV2n_Gb9RZZvSe03e-Tggu51KJr4Fc-9CWbkCylEEBj87oxq-MGiK313Zm1VooTIZfnmzpFoDgHvmZUt_2MCMs&image_url=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F492x328%2Fq85%2Fimage%2Fvk%2F3643%2F643%2Frect_626aadf074621t1651158512r522.png.webp&skin_id=2&vertical_id=0&real_bid=0.016750000249594454&pr=&user_keywords=&auc_type=1&aid=412&ext_cid=0&device_theme=light&keywords=&format=default-slide-t_r-body&cpa=6f515013-ae41-4d61-90da-5f8db98e4f18 HTTP/1.1
Host: bd2bc05960.47daeb1eac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 27 Nov 2022 14:40:45 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://s.viichxt.com/n/1063/pbiesyteaf6f6atgpn7veyckmztq64cra5shq6srmvesgiwhhvrtum37pzjditbsnive4xafm56h2vldmc23ek3j4camtzvrt2xypk2tbbgvciqg5bbtsoayvoa3x7ms4hbjfalahckltx5ej4m3favhsfscryky3a4rsyozrojus6kojfkfeohj6cv464add4uxqvcshbewtqtjz5fgbwdzl3bdtsgshlte5nxdotafldbtrfuntc4tjgwfc37dqmajy2bzqfwhbbcrwwmj4bfbnawkwts422aub7cta74wqmpojyrlculsrrjyvfgdtjk26swtrxjpyuoqjbumav2mdyzbj4kwemcuhpure2vhj4ksph7faoy4hj3omtp7vsakuvmqhjqwamswj7v7rspbnnbwv4lxj67wtws6mbwgyrtzdlisyk5gnxyg6kkuki4es2jsuzyigyz7vjlffyclnpjfjs6av3ix7jcqhxbwuorsfn7veyknmaz2qstksjktdy3ckhefowuajks552kornrjvfhlkpeevnf46huuty2upfl4epg6novfetxlmw6jlwooh34w3o7e2drpxxgek3vdz7ne4kce5elfljfwkyikpnmqw3t5phavk6i=?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f1cba24a2ce364fd33d563eeb7f7709f
3f0d5ed4f2ec13c142644ad3a4e7b2e1059d1bfe
f8cc0d614aee702a4b64b9d3b2497f11735ad5627f4720025e115317b4589872
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F8CC0D614AEE702A4B64B9D3B2497F11735AD5627F4720025E115317B4589872"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2616
Expires: Sun, 27 Nov 2022 15:24:21 GMT
Date: Sun, 27 Nov 2022 14:40:45 GMT
Connection: keep-alive
i.cdnkimg.com/auto/492x328/q85/image/vk/3643/643/rect_626aadf074621t1651158512r522.png.webp
200 OK 10 kB URL HTTP/2 i.cdnkimg.com/auto/492x328/q85/image/vk/3643/643/rect_626aadf074621t1651158512r522.png.webp
IP
ASN #39572 DataWeb Global Group B.V.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 68329d624a42af6145117bed5c9a2f03
4439b8d8b7e2dc706b5e9a417852bf16e6eb17dd
ede7a9f931abc7e53d07dbf4a82e992cfc38ebb280158f7fa4d12d00cab03bc6
GET /auto/492x328/q85/image/vk/3643/643/rect_626aadf074621t1651158512r522.png.webp HTTP/1.1
Host: i.cdnkimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 14:40:45 GMT
content-type: image/webp
content-length: 10348
server: nginx/1.19.0
cache-control: max-age=1209600
x-cache-status: MISS
expires: Sun, 11 Dec 2022 14:40:45 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9e9ddeff31e7481a44f98f4d07779781
8de80b1f945ecaa9278a2d2f05e4ed0315a6d30a
a0a82621073d9ff399efaaea1e0831a9282a1a0f6457e389383e120a8573f6c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0A82621073D9FF399EFAAEA1E0831A9282A1A0F6457E389383E120A8573F6C6"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17263
Expires: Sun, 27 Nov 2022 19:28:28 GMT
Date: Sun, 27 Nov 2022 14:40:45 GMT
Connection: keep-alive
static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
200 OK 790 B URL HTTP/2 static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 65156a660e465299370ebd90d84aa461
12ff60b17f579a77e42a8be7b6b1892fc71be33d
e3b2784385cd128d5a6dfdec7f4be2147d6b57fa66c1a36c61c085aaf27f9e18
GET /creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 27 Nov 2022 14:40:45 GMT
content-type: image/webp
content-length: 790
last-modified: Tue, 24 Nov 2020 14:20:43 GMT
etag: "5fbd16bb-316"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
s.viichxt.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?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp
302 Found 0 B URL HTTP/2 s.viichxt.com/n/1063/pbiesyteaf6f6atgpn7veyckmztq64cra5shq6srmvesgiwhhvrtum37pzjditbsnive4xafm56h2vldmc23ek3j4camtzvrt2xypk2tbbgvciqg5bbtsoayvoa3x7ms4hbjfalahckltx5ej4m3favhsfscryky3a4rsyozrojus6kojfkfeohj6cv464add4uxqvcshbewtqtjz5fgbwdzl3bdtsgshlte5nxdotafldbtrfuntc4tjgwfc37dqmajy2bzqfwhbbcrwwmj4bfbnawkwts422aub7cta74wqmpojyrlculsrrjyvfgdtjk26swtrxjpyuoqjbumav2mdyzbj4kwemcuhpure2vhj4ksph7faoy4hj3omtp7vsakuvmqhjqwamswj7v7rspbnnbwv4lxj67wtws6mbwgyrtzdlisyk5gnxyg6kkuki4es2jsuzyigyz7vjlffyclnpjfjs6av3ix7jcqhxbwuorsfn7veyknmaz2qstksjktdy3ckhefowuajks552kornrjvfhlkpeevnf46huuty2upfl4epg6novfetxlmw6jlwooh34w3o7e2drpxxgek3vdz7ne4kce5elfljfwkyikpnmqw3t5phavk6i=?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET 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?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp HTTP/1.1
Host: s.viichxt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Sun, 27 Nov 2022 14:40:45 GMT
content-length: 0
location: https://i.cdnkimg.com/auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp
X-Firefox-Spdy: h2
i.cdnkimg.com/auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp
200 OK 7.7 kB URL HTTP/2 i.cdnkimg.com/auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp
IP
ASN #39572 DataWeb Global Group B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash 311dea4d14f115d233335c6e836384b4
8b92a31d5f07440ea67469f1b2827fe1bde271e4
8136f9d883af8abb2895a1c5946063fc41ed4b3a7f7226ffe2f49e49a3d0c961
GET /auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp HTTP/1.1
Host: i.cdnkimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 14:40:45 GMT
content-type: image/webp
content-length: 7712
server: nginx/1.19.0
cache-control: max-age=1209600
x-cache-status: MISS
expires: Sun, 11 Dec 2022 14:40:45 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
4a65d58a18.7a07c25a29.com/ec8384a546668869aeca46562f679d38.js
200 OK 0 B URL HTTP/2 4a65d58a18.7a07c25a29.com/ec8384a546668869aeca46562f679d38.js
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert quad9 Sinkholed
GET /ec8384a546668869aeca46562f679d38.js HTTP/1.1
Host: 4a65d58a18.7a07c25a29.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mail.mymp3song.guru
Connection: keep-alive
Referer: http://mail.mymp3song.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 14:40:43 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 15 Nov 2022 13:38:16 GMT
etag: W/"63739648-17810"
content-encoding: gzip
expires: Sun, 27 Nov 2022 14:45:43 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
161.97.135.48
45.133.44.25
31.220.27.155
93.184.220.29
23.36.77.32
0.0.0.0