{"report_id":"d941e37b-4201-4c1b-b128-a0b7ff88797a","version":0,"status":"done","tags":[],"date":"2026-10-03T16:53:29Z","url":{"schema":"http","addr":"spotifymode.org/","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":0,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"spotifymode.org/","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"title":"Spotify MOD APK Download for Android (Latest Version)","dom":{"size":51201,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12378)","md5":"2359d7ba5f9ed7c6b9eb400ec4ecb3d5","sha1":"1d50f0e48c25c4c7ac5b0c8d4f86f27257a71a0e","sha256":"07ffcbbbd12bcefb4e3bf0b5263b230e42131b231a0e9697eebd5ed95d8d5f04","sha512":"e1504a90a12cd887321b5fee6277d7db136fc75ecdbd319bbfc6778eca31983f8ef9c8a105c4c19cfaab480384088d803a24d8f79a8c7e1b36945ac019a541e2","ssdeep":"768:tIitAWU9Gz9aHy9VW9Vr9VSr2bOOxBDhTC4TBNslpM1I+:tIiGwMjSaOObD59TpI+","tlshash":"bd33c723a1f4a77a1353d1d622267b6dfb6a900bcb99050073ee01ad5fc7e624d7329c","dom_hash":"domhash081a5da1d360156965690f4657c2dbdc","first_seen":"2026-10-02T22:55:31.054704Z","last_seen":"2026-10-03T16:53:32.185379Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"spotifymode.org/","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":0,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-07T16:53:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"spotifymode.org","ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"domain_registered":"2025-03-14","domain_rank":0,"first_seen":"2026-06-20T15:00:56.437438Z","last_seen":"2026-10-02T22:55:30.662321Z","alert_count":130,"request_count":26,"received_data":161283,"sent_data":15218,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-27T23:14:39.019501Z","alert_count":0,"request_count":5,"received_data":623323,"sent_data":2888,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"push-sdk.com","ip":{"addr":"23.88.8.123","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-10-25","domain_rank":36212,"first_seen":"2022-12-23T14:43:48Z","last_seen":"2026-10-03T16:47:15.28173Z","alert_count":0,"request_count":2,"received_data":56473,"sent_data":984,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"uidsync.net","ip":{"addr":"157.90.33.121","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-07-23","domain_rank":36249,"first_seen":"2021-07-23T21:20:22Z","last_seen":"2026-10-01T05:07:00.229074Z","alert_count":0,"request_count":2,"received_data":1721,"sent_data":1160,"comment":"","tags":null,"fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"spotifymode.org/","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"61c2cf18985785caa8934b7a2ede85a1","sha1":"68c97159e7c2e97eaada272d556e491d551a3dc6","sha256":"586e91786ec8fc86cec9694f1fd9d7b3677ebdc520a9e0c22fd0bf2bbf0dd1a3","sha512":"07ced6855a5cb0e72af040df1eeb21e995dcec2106658d2c82184dad889626e258653413e147b702660aaeff4a0f4e8ade1f6b6a642ac6d7ef100089ff2e1360","ssdeep":"","tlshash":"c801f91e2313b235167b31caab17910c14728053a240c09cb78c562a8f75f6fd6df685","size":711,"data":"","first_seen":"2026-10-02T22:55:31.130453Z","last_seen":"2026-10-03T16:53:32.208329Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/assets/js/main.min.js","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dd94ad88187a4f6416597af2c13e61e","sha1":"b50da0446e4ad5b9d73cab1c78c0102519c4dc31","sha256":"32539eb3c1487e9e5c285e645695c8ddb8f43e9ecf95e62a79e35300a9632983","sha512":"481178b22218505d33d2c8497acbb5dd0b407e9b63ee8e0ba5ae513e6483c32861ee6250c70c036a23e6db45e6712f82393c68dbb1c9b46b9bf31ecc05ea3cda","ssdeep":"192:jrVhtJlxOJlfFO1AVelNDyTOtF3SCmktiSRZzUfC1nJ6WKjBl08aGM/AS:jrVht/xO/NOJlN/FZtMey2vR","tlshash":"6e02cc2bf5f3217a00b771756bdf1604b625504b6045e9323b7c878d2f92e2828e2be9","size":8653,"data":"","first_seen":"2026-05-19T07:01:51.459476Z","last_seen":"2026-10-03T16:53:32.190223Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-10-03T20:33:54.940597Z","times_seen":375887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/f/sdk.js?z=3178070","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"23.88.8.123","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b6a35c355ef6261b641f5082b944669","sha1":"eb9a2e85d1087f4a940a94fdceab3cf2ba47b2bf","sha256":"531bc51f5453a5b9bf0a9876010e358e68c0521eee0be8d2a7cca02824938e9b","sha512":"4942abfe540ee4a5592aaf1f0434657df31433038ff080a2ef951b8e487374aca00770d84bc6676ec40a8766b4e3b7c3fcdbc9b75b70e6f4035ab7972d6052a2","ssdeep":"1536:Sw8mMmNHUkcaDwgzTDF/0dLWbxQwJB+DsLY:Sw8u0JruLLY","tlshash":"3f43a1897bca722801a3a078183f40d6ea277c24950eda09d852f7e23d7575aef33d75","size":55433,"data":"","first_seen":"2026-07-06T22:42:18.541587Z","last_seen":"2026-10-03T18:09:40.269704Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Website loaded successfully","filename":"https://spotifymode.org/assets/js/main.min.js","line_number":225,"column_number":13},{"level":"log","text":"[sdk] requesting permission","filename":"https://push-sdk.com/f/sdk.js?z=3178070","line_number":1,"column_number":35425},{"level":"log","text":"[sdk] notification permission statedefaultfalse","filename":"https://push-sdk.com/f/sdk.js?z=3178070","line_number":1,"column_number":41680},{"level":"log","text":"[ra] user permission state default","filename":"https://push-sdk.com/f/sdk.js?z=3178070","line_number":1,"column_number":43324}]},"http":[{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778523921_6a021f111c666.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.207Z","timestamp":1791046380207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778523921_6a021f111c666.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 18:25:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 542\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":542,"size_decoded":954,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4ece939d17614b2c198c745e34704802","sha1":"ec0407bb387fbcf1a78aff1d6012e3d8684a9658","sha256":"0b5c85154c4d4c1bc685245c1ed5d8a0be0deca13c3bb1bfb2bb527f21904f92","sha512":"d696bc481d9ad1b69ee94fd2f7fb6d1107abd7d6eda91e369517b97085a72cf626040a51b8fce16583ffbee5142fdab398bd273ffa49268a77152e8bb53b3951","ssdeep":"","tlshash":"c1f020020b2ee96b449cba405293c6ea6697372c57e3fb7f1754029041a6c421a2a63c","first_seen":"2026-05-25T08:02:43.632673Z","last_seen":"2026-10-03T16:53:32.186447Z","times_seen":28,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778527275_6a022c2bc85dc.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.224Z","timestamp":1791046380224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778527275_6a022c2bc85dc.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:21:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1388\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1388,"size_decoded":1801,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7983af5e8da745dbbbc296100e955938","sha1":"fce38c611ae67cbad4314ee10e529722478e4b29","sha256":"0c17758550e579442d857649fd735dd8516031cdcf40c2fe897f36c677a4c9a2","sha512":"ec87b6780e3169ec2dc60c6003c25db204030e92e1fba0d856438a4f6f29baa9183120d3c0eb71bbb8576fbf025eb5e9682687c058378e71251838eecd2d6668","ssdeep":"","tlshash":"ef21b6c17d145e26b9c9f4ea9ba238863168ca8a0a737b51f019084957ea6942e31f0e","first_seen":"2026-07-11T17:54:58.568764Z","last_seen":"2026-10-03T16:53:32.187047Z","times_seen":17,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778527375_6a022c8f5a693.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.226Z","timestamp":1791046380226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778527375_6a022c8f5a693.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:22:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1218\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1218,"size_decoded":1631,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc9b018ece3d1eb98ec7af5ab6a05512","sha1":"09e5eb820530f8d13b6d42ec9ce422329a00d463","sha256":"215f690459d4f93de01f819186048897f16c7d05577708a2e5f2d4213306c598","sha512":"962e6b8a0295414c0a60a737b04c03c1d9857087479a2ec46aa22dcfe6c2262787c3997587fae649c7e4bf29ab1319a94b97955a2a6ffd0875bc3ccc5cf4494c","ssdeep":"","tlshash":"4221aa43c94d198571d4d51094a33b20e48215ed7f90c505fbbb1d91be66763771c6c5","first_seen":"2026-07-11T17:54:58.651664Z","last_seen":"2026-10-03T16:53:32.187589Z","times_seen":17,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778527619_6a022d838ede0.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.228Z","timestamp":1791046380228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778527619_6a022d838ede0.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:26:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1836\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1836,"size_decoded":2249,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c091493cc7defbf161217ea0055c584a","sha1":"b2ed43e0fffea2dbc1c2e8d7fab53742f66e629b","sha256":"51973d556e7c58582c4872f906d334bdb6306b893a2413ff08d30ec928fcd6dd","sha512":"6c1aef7bf4fc5e4bedd65a57330eade20175e73512d9105c331096adf02bcaa5b3c36910c1860dc086a582594abcc913bbdf1e74fbd9d7a5ec2bfc7fe519b830","ssdeep":"","tlshash":"d5314b6e0201af9ff9ede82448f8911befe59c421513aff000ef0117d4a5620679b41f","first_seen":"2026-07-11T17:54:58.531819Z","last_seen":"2026-10-03T16:53:32.188184Z","times_seen":17,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778527782_6a022e2650d79.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.229Z","timestamp":1791046380229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778527782_6a022e2650d79.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:29:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 628\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":628,"size_decoded":1040,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a191415c28ed9785c994f29f938c824a","sha1":"bdf8464084e2962724d2de3a83409eb076bda0f5","sha256":"447a833b5a61abf0cdf0ce521c06c810bb5c914f2365ae421e0fd8c20edd7034","sha512":"b90315ef58a542924d53b3995aa1eaf741098bc358b781c34f0dc27105ebb38214e6bf597a840a1fcc9f883f42b779d7d2bebe3426d031395a107ee4d7363fe4","ssdeep":"","tlshash":"4df062800041be4e0cc064629c7b309abc3a729594d3f32786f32cf778294b648278df","first_seen":"2026-07-11T17:54:58.65972Z","last_seen":"2026-10-03T16:53:32.18866Z","times_seen":17,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.382Z","timestamp":1791046380382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://spotifymode.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 848425\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DeJAI9asliVzPFtQieSQZTSwyoDi9xrLw6lUAazxKFT46DbNi3SsiyKIxII4yWBQ%2F%2FEobSEhzkAG1lmv7IKJX4r4XK5FB3RBZty1E2qHsVxCHE%2F1hwyufJc2FWhH%2F0ED91WpyldT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a44d75e56a5a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 108020\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108020,"size_decoded":109021,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-10-03T20:30:53.322679Z","times_seen":25768,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/logo/img_1783679593_6a50ca698f54d.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:52:59.869Z","timestamp":1791046379869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/logo/img_1783679593_6a50ca698f54d.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:52:59 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 10 Jul 2026 10:33:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17676\r\ndate: Sat, 03 Oct 2026 16:52:59 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17676,"size_decoded":18090,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a49a636e769cb0eac916d87f33880d3a","sha1":"cf4f1260ca58aaac628a67c31fd20385a53a9c6a","sha256":"e4855dadcd6ac04c9c9bfcd410b64d681eb035338875af55052f879605349554","sha512":"2aaafd2bc065dfe536c933e1b6d5a11a497e0167757fd4a637db5c6a0e011cd2eebf88c110e41c44de32042e0de5e6e45013cf0a083a29fbfe169e6463f7ef8e","ssdeep":"384:JwTBEk3+o02RVAhi/PVVawVhzV5/m1Gs8dhlTwtHAag:WTyk3SVi+wDzrrsIlTe","tlshash":"5682d0c6822d8eb9dc2ee1faadc0d1fb524e7483db044d72815c476b3b06cc6a1c9127","first_seen":"2025-08-02T11:09:13.422914Z","last_seen":"2026-10-03T16:53:32.189752Z","times_seen":6,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/assets/js/main.min.js","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:52:59.871Z","timestamp":1791046379871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /assets/js/main.min.js HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:52:59 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 15 May 2026 19:29:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1800\r\ndate: Sat, 03 Oct 2026 16:52:59 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8653,"size_decoded":2263,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6dd94ad88187a4f6416597af2c13e61e","sha1":"b50da0446e4ad5b9d73cab1c78c0102519c4dc31","sha256":"32539eb3c1487e9e5c285e645695c8ddb8f43e9ecf95e62a79e35300a9632983","sha512":"481178b22218505d33d2c8497acbb5dd0b407e9b63ee8e0ba5ae513e6483c32861ee6250c70c036a23e6db45e6712f82393c68dbb1c9b46b9bf31ecc05ea3cda","ssdeep":"192:jrVhtJlxOJlfFO1AVelNDyTOtF3SCmktiSRZzUfC1nJ6WKjBl08aGM/AS:jrVht/xO/NOJlN/FZtMey2vR","tlshash":"6e02cc2bf5f3217a00b771756bdf1604b625504b6045e9323b7c878d2f92e2828e2be9","first_seen":"2026-05-19T07:01:51.459476Z","last_seen":"2026-10-03T16:53:32.190223Z","times_seen":29,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778526364_6a02289cd8115.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.215Z","timestamp":1791046380215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778526364_6a02289cd8115.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:06:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 946\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":946,"size_decoded":1358,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e200cadf77e1775feadb0c2136f30828","sha1":"eaab79309fd0aa9d496c7d3a074af6b3136951ed","sha256":"63bf9b123ff96585eafac44b4a95f363807f267e8cd4d5f0e4c69890da3867f5","sha512":"288972ad9c057cce3d626c688e30e9ff5771e0a57ff58093f7b9c3b33e4263b41fae5d1c4522a62e81df5d63dd1d65c2c9dd360910475d632e54caae4d981c02","ssdeep":"","tlshash":"ba11c83143f6a0d4cf87bc40a324dc14d12508251c08d329ca6f4088dac0795aca30b9","first_seen":"2026-05-31T17:57:46.068935Z","last_seen":"2026-10-03T16:53:32.19066Z","times_seen":22,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778526482_6a022912b4cf3.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.217Z","timestamp":1791046380217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778526482_6a022912b4cf3.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:08:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 112\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":112,"size_decoded":524,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f0f8cdc4539a6f11c681f0cef897c26","sha1":"9538a3668a19a239fe33437accd49a30b7fa09d8","sha256":"52e9ad39c52339c593b836104ddc1cdaecff77c29a02693755402767c894a4cd","sha512":"b22cde6dbfea457727ed4c9d054c514dc5db5addcfa084ac52383414d4b743c9dd6e58ea902287f54efaa873df8be62038c2f8fb13472f365a194f4587406c2e","ssdeep":"","tlshash":"a8b0228c020080fc0020ec33bc0c3cfece208b2b00828fcac00388a8ec2082002c038c","first_seen":"2026-05-31T17:57:46.07437Z","last_seen":"2026-10-03T16:53:32.191177Z","times_seen":22,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778527534_6a022d2ecbdc3.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.227Z","timestamp":1791046380227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778527534_6a022d2ecbdc3.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:25:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 628\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":628,"size_decoded":1040,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1df393faeff25376a2a506dc3e194534","sha1":"d1c5423ed0e0d26d06b8d75c785bf2e3eeaa842f","sha256":"18b4a7be763d97cab833a0c5225c02e115a412e85d6cadfcc96946f77de2dc15","sha512":"c0a2adc3630e102109c013dc6196be48e5f7164eb529ba97f86917511b9aafba5d8cb8880ccf4aeee281efa10e443b22a475d9112420a1e41feebe2fb0ffb8d9","ssdeep":"","tlshash":"62f0230eb1f62c30ec65f351679653c43ae9504f416dc512d7a414a6c5e0292217e03f","first_seen":"2026-07-11T17:54:58.573876Z","last_seen":"2026-10-03T16:53:32.191954Z","times_seen":17,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778528003_6a022f033e57e.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.232Z","timestamp":1791046380232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778528003_6a022f033e57e.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:33:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 146\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146,"size_decoded":558,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a4c265e2c42f1f6fc401330c8156d732","sha1":"90552523300225ea3ce7d83508eb2fdc59aafc26","sha256":"4fc639512777f33ec19d49ccd0aba166d2a42a7377bf39eac0fa9ef6609004bf","sha512":"e84f35eaaa827837233256142865a30631fdd27ee25a2acdf3abb7cff18b01c911cecd4306c867ef7d32ea358b94bf9f7ca5f98ffe8e79f3c45114b505b51976","ssdeep":"","tlshash":"35c02b118feacd0f5e4a3e6b02d442f080f31511691afb8f2b8cd78070118635e21934","first_seen":"2026-07-11T17:54:58.653982Z","last_seen":"2026-10-03T16:53:32.192677Z","times_seen":17,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/event?z=3178070","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"23.88.8.123","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.420Z","timestamp":1791046380420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"push-sdk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 03:43:19 GMT","end":"Thu, 19 Nov 2026 03:43:18 GMT"},"fingerprint":{"sha1":"4B:29:03:3B:47:AE:E6:CF:A4:2D:8A:16:A7:A5:82:51:C3:91:15:74","sha256":"C5:1A:5C:B1:6D:B2:05:62:BE:92:6B:04:EC:6A:05:5A:89:53:D8:81:6B:D4:D1:3C:8C:37:AA:5E:04:B5:E6:C4"}}},"request":{"raw":"POST /event?z=3178070 HTTP/1.1\r\nHost: push-sdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 83\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://spotifymode.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":83,"data":"{\"event\":\"request\",\"zone_id\":3178070,\"subid1\":null,\"subid2\":\"\",\"ext_click_id\":null}"}},"response":{"raw":"HTTP/2 200 \r\nserver: Angie\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://spotifymode.org\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 00:00:00 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":1365,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T20:32:31.651125Z","times_seen":18807218,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uidsync.net/sync?user_id=j34fEsCaBmO0I8P2e5UaBc","fqdn":"uidsync.net","domain":"uidsync.net","tld":"net"},"ip":{"addr":"157.90.33.121","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.529Z","timestamp":1791046380529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uidsync.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Sat, 03 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A1:D4:F1:F4:D8:CB:38:29:D0:0F:CB:B2:AA:B2:E8:38:AD:3D:CE:6A","sha256":"D3:62:C6:EC:24:C4:F0:E8:FA:BF:FC:5F:F0:EC:27:5C:1B:7D:C4:B1:01:52:88:06:6C:C0:D7:F8:92:64:C7:EF"}}},"request":{"raw":"GET /sync?user_id=j34fEsCaBmO0I8P2e5UaBc HTTP/1.1\r\nHost: uidsync.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nContent-Type: application/json\r\nOrigin: https://spotifymode.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Angie\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: https://spotifymode.org\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 00:00:00 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nset-cookie: rauid=j34fEsCaBmO0I8P2e5UaBc; expires=Sun, 03 Oct 2027 16:53:00 GMT; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"rauid","value":"j34fEsCaBmO0I8P2e5UaBc","quoted":false,"path":"/","expires":"2027-10-03T16:53:00Z","raw_expires":"Sun, 03 Oct 2027 16:53:00 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"rauid=j34fEsCaBmO0I8P2e5UaBc; expires=Sun, 03 Oct 2027 16:53:00 GMT; path=/; secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":62,"size_decoded":981,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"022c40ab2e69b10a177756cb964c6e3a","sha1":"4ef76173f02232b619796729e644c8dc2c3ff8a8","sha256":"45ad2c3ab4cf687f2a74555ff88f251fa283a0a29c369b214f3fd2ad4a66aad0","sha512":"3dc91db4dd711c16045eb1a592996405b5c306865bcd1cc50fb37ddfd26b885b73ad5d7143c1ada43b38a4f0fd87653d1a2bc95dffba13bb4fb7fd79efe2fe1f","ssdeep":"","tlshash":"e6a00200685b556974c5233759d6d6041e640d81b04c64a5a9f5010968657a84d97148","first_seen":"2026-10-03T16:53:32.193976Z","last_seen":"2026-10-03T16:53:32.193976Z","times_seen":1,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":33,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778528267_6a02300b2deac.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.235Z","timestamp":1791046380235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778528267_6a02300b2deac.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:37:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 490\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":490,"size_decoded":902,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63460f3a5c88b412df9764c5d07185d8","sha1":"676cce25b1c4e141fb9225adfe572ff68ccf8674","sha256":"5fa70e2324b86800169e3746b0df93d220cb813ce26e02391122c1695ba586c8","sha512":"7508a0ead30f76e1b79f719361f4c2a429b124ef819a524e556825da69e4bb88d70a6a3d75019cc4edba4d155e623e2cabbc970d21fe6d8c8a520de41f4fd464","ssdeep":"","tlshash":"11f00ec5d5122218d9ebfa9a24426a4d20503edac611de8dc4821b6af6ca5212280c6c","first_seen":"2026-07-11T17:54:58.628949Z","last_seen":"2026-10-03T16:53:32.195436Z","times_seen":18,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778526822_6a022a6662bcc.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.219Z","timestamp":1791046380219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778526822_6a022a6662bcc.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:13:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110,"size_decoded":522,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"84b1c83eeca745d44ec543c5ad101f31","sha1":"b960dc5b819209692e91dbc99bc3af324624973b","sha256":"69bea6985aa03c464f6e83da2050ff401cb80a05b8a1f1e6a51bb68d88bd6617","sha512":"6269c75171ea994a21c274a758869a0a97df3641019196e1e7898dba4913bcc5b3e656bb02a4d66e19f192415ee8d84f1fb8605c18680f6a6a034e5dbc45688a","ssdeep":"","tlshash":"48b0929e092e05080f6666494fa4f263a924514017a29df19662b5a2a160620b6167ac","first_seen":"2026-05-31T17:57:46.076393Z","last_seen":"2026-10-03T16:53:32.196238Z","times_seen":22,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778526918_6a022ac64b64d.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.220Z","timestamp":1791046380220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778526918_6a022ac64b64d.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:15:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 444\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":444,"size_decoded":856,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"116993dc349c44e06605391352016eb6","sha1":"74c864c34d21c514ab1631afc0d671c7f49c4500","sha256":"f5f95ee249a49347a09b0306f97775efa4e82db3ac0e08ce57cdb2736c32214a","sha512":"eaef171f023dbb467fd2e1df52dae35666f128df324643783c86d69574edae2bbf552e5936d2bafdc68849909cf67cc007585cb1410c31365ff2979035eace30","ssdeep":"","tlshash":"14f0235d268340651976d3d4803e07c514404294fdc1fda918f61270d40482485af5de","first_seen":"2026-05-31T17:57:46.071798Z","last_seen":"2026-10-03T16:53:32.196806Z","times_seen":21,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.190Z","timestamp":1791046380190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=6,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 869238\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YshE2YRTaYfwD14k87FcLpJ1D6D9JWvIBV4qDLTcVWGBWTHzRVAUMaW8jqZT6Il%2Bc5qM5pTQUZtj9Bw217XTGlgpjyzvn%2BEkVrIZNt3zXYjJiVuA968c5Or9q0AL%2FTPZ%2FIjPr8WC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a44d75e449630b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18752\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":19758,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-10-03T20:30:53.483733Z","times_seen":63427,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778528815_6a02322f13334.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.223Z","timestamp":1791046380223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778528815_6a02322f13334.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:46:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 484\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":484,"size_decoded":896,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2cc9a21d4c2d349006e01aef19bc8048","sha1":"22819559bea8d1dd25f3a925ac5d4f6799c892d5","sha256":"dbd1980ac7d0f2d7e585c6ea9e635e67093cbb16f1946371e991cce3c564e83d","sha512":"62494f63c1b5d5bea12ab3780b3616414151e50124a0435bc646d530c90e54744668febf1a13ed0c8456f2d67e0036fee97943bb8669441c6af6eb69654ca81d","ssdeep":"","tlshash":"05f0d44d3e9825404e4a4c4da8f2ec92d62c10f5d02d530458e3257280d21db7f75166","first_seen":"2026-05-31T17:57:46.091353Z","last_seen":"2026-10-03T16:53:32.197987Z","times_seen":21,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778527923_6a022eb3ef3ec.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.230Z","timestamp":1791046380230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778527923_6a022eb3ef3ec.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:32:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 192\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":192,"size_decoded":604,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6f03edba018968a14ca224283bab8f57","sha1":"628417c8009eb3aec4f557812ffde02def96f9cf","sha256":"0f13c3bba8fad48f5924cf5fe3b4fca7f5873567291a07960588b41be875bf8b","sha512":"d7f2423ee33c7b24df33557fa6ea6f2745370614dc9b181b9ccf8f73aff0fbc324f77f30bdde67e89738207eb70076b09401244760686b2afbda648ddde84547","ssdeep":"","tlshash":"3dc0c0caf4137a8fca017bef2030a00cef9083070e28cde15a040895503ee00fac043e","first_seen":"2026-07-11T17:54:58.61814Z","last_seen":"2026-10-03T16:53:32.199369Z","times_seen":17,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/favicon/img_1781679514_6a32459a180b1.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.385Z","timestamp":1791046380385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/favicon/img_1781679514_6a32459a180b1.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 17 Jun 2026 06:58:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7728\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7728,"size_decoded":8141,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"925d52ecf60ed95a61294e9fcb7ddbae","sha1":"29d9ae24a9888257cc01591d2d89d1243e2ba1f2","sha256":"1795bdd170168158389ff41b95ad460e4f7e184c458e267b5cb78dbfedf98c07","sha512":"64929bd8574cd572d5d213f9382da696094cb0105e7e05dbf0d27e41bc4464798abd4711d92e3c80be2bfd1833b5b93e408da1b3a23a6c6253634b2f61f7d8c1","ssdeep":"192:D9zKtWoARqDtpJVejGwHTy+jT8nvliy2xjztLw:A4o3tpyjRjT4vl4xna","tlshash":"c1f1c06ccee645a073b943846b1695607a2354383cfa13f5f23446249561fcd202fbb3","first_seen":"2026-10-02T22:55:31.114132Z","last_seen":"2026-10-03T16:53:32.200405Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/f/sdk.js?z=3178070","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"23.88.8.123","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.197Z","timestamp":1791046380197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"push-sdk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 03:43:19 GMT","end":"Thu, 19 Nov 2026 03:43:18 GMT"},"fingerprint":{"sha1":"4B:29:03:3B:47:AE:E6:CF:A4:2D:8A:16:A7:A5:82:51:C3:91:15:74","sha256":"C5:1A:5C:B1:6D:B2:05:62:BE:92:6B:04:EC:6A:05:5A:89:53:D8:81:6B:D4:D1:3C:8C:37:AA:5E:04:B5:E6:C4"}}},"request":{"raw":"GET /f/sdk.js?z=3178070 HTTP/1.1\r\nHost: push-sdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Angie\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15530\r\ncontent-encoding: gzip\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":55433,"size_decoded":15811,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55366), with no line terminators","md5":"8b6a35c355ef6261b641f5082b944669","sha1":"eb9a2e85d1087f4a940a94fdceab3cf2ba47b2bf","sha256":"531bc51f5453a5b9bf0a9876010e358e68c0521eee0be8d2a7cca02824938e9b","sha512":"4942abfe540ee4a5592aaf1f0434657df31433038ff080a2ef951b8e487374aca00770d84bc6676ec40a8766b4e3b7c3fcdbc9b75b70e6f4035ab7972d6052a2","ssdeep":"1536:Sw8mMmNHUkcaDwgzTDF/0dLWbxQwJB+DsLY:Sw8u0JruLLY","tlshash":"3f43a1897bca722801a3a078183f40d6ea277c24950eda09d852f7e23d7575aef33d75","first_seen":"2026-07-06T22:42:18.541587Z","last_seen":"2026-10-03T18:09:40.269704Z","times_seen":163,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":4,"connect":36,"send":0,"wait":39,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.309Z","timestamp":1791046380309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://spotifymode.org/\r\nOrigin: https://spotifymode.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 786308\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FVi2XjJLoVtfC65GK8qiw7HDMvlq1M9kS2BZlzIps5c30aNtg3F7F%2Bt2%2ByrFbYo3uVYO0%2BsAUNtN2qENUjHtOZtaerLnMUg9tlo7NzXfEI%2FAjxxZddbum9Raii26uUOz8FfwonJQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a44d75e4fa318be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 150124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":151125,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-10-03T20:30:53.26513Z","times_seen":47864,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/general/img_1783679355_6a50c97b4f4dc.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:52:59.880Z","timestamp":1791046379880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/general/img_1783679355_6a50c97b4f4dc.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:52:59 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 10 Jul 2026 10:29:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18720\r\ndate: Sat, 03 Oct 2026 16:52:59 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18720,"size_decoded":19134,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"348a94a79ca1b80207ea9e7c0db278c7","sha1":"92216e0c07d579775552898e34204a926ed31cce","sha256":"33b6345f1b6c918931f35ec8fb02297ac38c1a32001309dd9e6dac54a5b79c4c","sha512":"6ec65a7e58f4f6488f46abdccd545a95637925e35687426ed6097fe7eb35e770e1a161ce37db9cba785eb28ea83738899fdcb4dfab221992346564e9d283761a","ssdeep":"384:fBAesc8CYtJzm39OT8WuvN4gFMiOIM061bPckf7ImclTWxCpD6DH:fqesc8CKJzc9c8WwN4PsVaxfkmSWwa","tlshash":"9a82d0a692a70eebc9dc6d938130532ca1dd094beb50c87e07a071091f7b56ab31468e","first_seen":"2026-10-02T22:55:31.125465Z","last_seen":"2026-10-03T16:53:32.202955Z","times_seen":4,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778528774_6a023206b0501.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.212Z","timestamp":1791046380212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778528774_6a023206b0501.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:46:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 460\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":460,"size_decoded":872,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b608be83d5f1632197694387f98317b0","sha1":"9318e04d474672892e9cedaafb52f785478194dd","sha256":"3e68c15cb721a556e5866e5b73d775bb78da1d00e1562efdbb4e300fcb0f11f5","sha512":"dabd65aeb4454cc604368903e1e2085c129e7a6bb961071f923ef9983ad34a72c95f3b2ada5973bdf0e3b1888e065f240e8023a1e3d18af9076157739b276b71","ssdeep":"","tlshash":"28f0542ce294b3a9c8992038111c5050c4ef0853d69d4255c5cf18b4305317db4b3826","first_seen":"2026-05-31T17:57:46.073329Z","last_seen":"2026-10-03T16:53:32.203649Z","times_seen":21,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778527021_6a022b2d88e43.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.221Z","timestamp":1791046380221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778527021_6a022b2d88e43.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:17:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 82\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82,"size_decoded":493,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58c8aad5a34f4f749963477bcf7a02b2","sha1":"5dd0baf7c04e97c6c107acdcac36d0a0da6673a6","sha256":"548554ede4c3e782c69a59dbe1351891898adc03e5eaaa255a80568e656baa3c","sha512":"86ca210c74391392ea3be717edded68fb7795aaf2f8fa8a4cfde513e05054cbaaa88c664c3637906e89105c7afaaee98673ed08570f20fdf8cf49c71d83a8cf1","ssdeep":"","tlshash":"29a012058a9481860c0c1c854198c032045180044885c0d0f29e091514140083314c38","first_seen":"2026-05-31T17:57:46.077412Z","last_seen":"2026-10-03T16:53:32.204247Z","times_seen":22,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778527140_6a022ba49c788.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.222Z","timestamp":1791046380222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778527140_6a022ba49c788.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:19:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110,"size_decoded":522,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3755691e5f4286531b873b2bfb981eaa","sha1":"0d98727dfbd5774d80822d8be6ec5411b2d944b4","sha256":"b3b9ea2846644653cbba913475089a4926636d3eb54ce1cda8935f133d793fdb","sha512":"cb6ddb05047a7fcf2b5b6b49fe87e6ef1ef00af7609fba57e33f7d2257655de5a8a5c0335fb5567f2cfa5abda665a98c5be59b5b0f5359221f11693fb15771f9","ssdeep":"","tlshash":"fcb01227f764445e475d1d56c2babca79c0e9eb2002cd3c111a304d0c523707e18cfad","first_seen":"2026-05-31T17:57:46.070693Z","last_seen":"2026-10-03T16:53:32.20487Z","times_seen":22,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uidsync.net/sync?user_id=j34fEsCaBmO0I8P2e5UaBc","fqdn":"uidsync.net","domain":"uidsync.net","tld":"net"},"ip":{"addr":"157.90.33.121","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.531Z","timestamp":1791046380531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uidsync.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Sat, 03 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A1:D4:F1:F4:D8:CB:38:29:D0:0F:CB:B2:AA:B2:E8:38:AD:3D:CE:6A","sha256":"D3:62:C6:EC:24:C4:F0:E8:FA:BF:FC:5F:F0:EC:27:5C:1B:7D:C4:B1:01:52:88:06:6C:C0:D7:F8:92:64:C7:EF"}}},"request":{"raw":"OPTIONS /sync?user_id=j34fEsCaBmO0I8P2e5UaBc HTTP/1.1\r\nHost: uidsync.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://spotifymode.org/\r\nOrigin: https://spotifymode.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: Angie\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\naccess-control-allow-origin: https://spotifymode.org\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 00:00:00 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":740,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T20:32:31.651125Z","times_seen":18807218,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":2,"connect":33,"send":0,"wait":33,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778528067_6a022f4332a9b.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.233Z","timestamp":1791046380233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778528067_6a022f4332a9b.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:34:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 506\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":506,"size_decoded":918,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"84dcfc9479646255fe86de154884acb6","sha1":"4022dd9864babcf117e170b05f77410685ccdacc","sha256":"3ef6e48dcd72fe245fccdf5070c10c1651ef490709ce6adc73686f4c7055b8b1","sha512":"d85bd3f093779b00f4ffb78550309bfcbe76d06ecd1adc0fe99d59f71c1fb54b6b7a752999e6688a1f8cd302a088eb7e55522d616a6800eea7ae7031392033f6","ssdeep":"","tlshash":"d4f0052cb3031757197f3e345691d437680c7706d885e7471ac044677c60972611980c","first_seen":"2026-07-11T17:54:58.656024Z","last_seen":"2026-10-03T16:53:32.205446Z","times_seen":17,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778528153_6a022f9979357.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.234Z","timestamp":1791046380234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778528153_6a022f9979357.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:35:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 702\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":702,"size_decoded":1114,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c8d5dcb6d5adac9d314a351806062480","sha1":"b4cca5fd1a9f31bb50aa3d6f22664a3f508ab4ce","sha256":"1ecac1b236b39d1fa9bd85c44697e83e8c942029e655a79054f4a29d7990d75c","sha512":"f6ea80d751719c04c7412d071b3efe5ac5d04373a19edd2bc0ea8c7f15611d1667aa1ef11c27d537e0dc833a2674bcb4c1d6c3c7efc4489acb414b9df21d99c1","ssdeep":"","tlshash":"68014491c1a104d27d2ad93142340f0d957216c036a6cb1a63ceaf5e55ad386d00789c","first_seen":"2026-07-11T17:54:58.550232Z","last_seen":"2026-10-03T16:53:32.206012Z","times_seen":17,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T16:52:59.354Z","timestamp":1791046379354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 10568\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 03 Oct 2026 16:52:59 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=38f2fdab7388161350149e9a19bb02ef; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":52687,"size_decoded":11152,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12378), with CRLF, LF line terminators","md5":"5b4d1ea671782c721e399f90fecee4ee","sha1":"0a34569b085cfc0ce53724377913909db636b891","sha256":"84782649f72b3136fbb986e5e5acf23c2bd13e7adeb47b856a232af82027bd46","sha512":"f3ff7b25d9d8f2605abbc0c5ef7f49fd304cb2aa6dee3013d6cc48ae494b283b4d4a6748820a99095292f32faaffc2a35536096c90cdd4f65d563bda0d0f1d32","ssdeep":"768:oIiZyWs9yQ9yW79Vt9VA9V+gZhppABDhTC4TBNslpM1Ph:oIiYTha+kppWD59TpPh","tlshash":"1833b83361f0967a5373d1d612367b6dfb5a800bcb9a050072ee02ae5fe7e614d73298","first_seen":"2026-10-02T22:55:31.0785Z","last_seen":"2026-10-03T16:53:32.206533Z","times_seen":4,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":33,"connect":20,"send":0,"wait":197,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/assets/css/style.min.css","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:52:59.868Z","timestamp":1791046379868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /assets/css/style.min.css HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 02 Nov 2026 16:52:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 May 2026 11:07:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6132\r\ndate: Sat, 03 Oct 2026 16:52:59 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33062,"size_decoded":6645,"mime_type":"text/css","magic":"ASCII text, with very long lines (33062), with no line terminators","md5":"5c20c489a22b281f336d9d09805ac7b9","sha1":"d23dcfff45353407543bd815fb5e06fa3ef9f577","sha256":"4fb5f1c6f18f6a470632ffd618418bbb05ecd90cb34c764be4d7c8611e6bc5db","sha512":"0ba283ff62924006fc11ac597c74403bc3077994fb40e073e8756720773005708b0be0ae1a5818049a074c234b10ee48a6230a5f06e304620a1710c30db7da2f","ssdeep":"384:F7F0naPBbeybbpT751MofgV9+AkXhkoCkQj6KwQ+BsIk8:FR0naPUybbKV9+Afo9eV+BsIh","tlshash":"a6e2962aa664713da43bd03997d4979c7228d801eb7396fefa53a229c5c63f30571b0c","first_seen":"2026-05-25T08:02:43.636787Z","last_seen":"2026-10-03T16:53:32.207133Z","times_seen":22,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotifymode.org/uploads/flags/img_1778526143_6a0227bfe2534.webp","fqdn":"spotifymode.org","domain":"spotifymode.org","tld":"org"},"ip":{"addr":"31.43.191.161","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.209Z","timestamp":1791046380209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotifymode.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:29:38 GMT","end":"Sun, 06 Dec 2026 09:29:37 GMT"},"fingerprint":{"sha1":"7D:40:F3:C2:1B:3E:15:CA:FC:6A:C4:01:07:E4:F2:89:E0:8F:B4:46","sha256":"99:9F:25:B7:3C:38:BC:C7:26:29:28:F5:9A:E0:94:BA:E3:47:99:86:E1:11:22:88:32:AF:A2:DC:31:8A:CF:C3"}}},"request":{"raw":"GET /uploads/flags/img_1778526143_6a0227bfe2534.webp HTTP/1.1\r\nHost: spotifymode.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spotifymode.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=38f2fdab7388161350149e9a19bb02ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"38f2fdab7388161350149e9a19bb02ef"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Oct 2027 16:53:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 19:02:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 690\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":690,"size_decoded":1102,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b778448d32b622cd1cdd052b5b394098","sha1":"1ad908f8800b2174a565b02d07ecf0d3cd072028","sha256":"27c1fc5acd1166da32a878dde0250292f839bbe11f6a60e62d6f174cdecdc2c4","sha512":"249ff24983ee0b37ab93a52db7bd19ad1beb9588d9c9d0cfb710c945ba394d6423464250ce6c108b49d5d0bbae9f628ee897e3bc80807cda5b1b2e6768551771","ssdeep":"","tlshash":"26019420cd81d45cac0312328ccc3b8f3461a8a68a06dda8e2fc96733f1af40584e89f","first_seen":"2026-05-31T17:57:46.075386Z","last_seen":"2026-10-03T16:53:32.207727Z","times_seen":21,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"spotifymode.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"spotifymode.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.310Z","timestamp":1791046380310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://spotifymode.org/\r\nOrigin: https://spotifymode.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 848425\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zdd3xj9hx%2FmEYS67CvivO85j8sYJjCTAtZIgxo%2B7XmIyfjvShJLuHH9rgl%2FwAsZ3bphT12s2DXObddjuF9FuhDuKgUyvQIMABp%2F91J8Qr%2BGlxfyyNkFgAX77y8lM%2B8Mzg6VmcXWL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a44d75e4fa328be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 108020\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108020,"size_decoded":109025,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-10-03T20:30:53.322679Z","times_seen":25768,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://spotifymode.org/","date":"2026-10-03T16:53:00.380Z","timestamp":1791046380380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://spotifymode.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:53:00 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 786308\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMGfbJk%2FW0OG71bzwtA9LV4%2FMiMgFVYb6Vh3K9abjYwO7Ly7ji5hrT4b3hrMczOmZuj4HBQ6tmLKObRFpBSKu3zb8sdjjuZBKaymApzU9o0iznXSlagG6ZS0VQuxhecNyONilBZ6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a44d75e56a588be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 150124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":151121,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-10-03T20:30:53.26513Z","times_seen":47864,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}