jam.click/download?data=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
301 Moved Permanently 162 B URL HTTP/1.1 jam.click/download?data=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
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /download?data=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 HTTP/1.1
Host: jam.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 29 Jan 2023 06:05:34 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://jam.click/download?data=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
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12869
Expires: Sun, 29 Jan 2023 09:40:04 GMT
Date: Sun, 29 Jan 2023 06:05:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10786
Expires: Sun, 29 Jan 2023 09:05:21 GMT
Date: Sun, 29 Jan 2023 06:05:35 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 05:43:08 GMT
content-type: application/json
age: 1347
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5906
Expires: Sun, 29 Jan 2023 07:44:01 GMT
Date: Sun, 29 Jan 2023 06:05:35 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Edgeywaa0noKe3TeQEEAVWD/QVwbu5rq1pvzhZchNfqnm1ipGekiic8RRmw/o48o5lu0WrpJOkU=
x-amz-request-id: 5WHF12G8NMGXNVD2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 05:21:16 GMT
age: 2659
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a61b97bd23b2b11ee2a39f5e87df2afd
2aff193a233a8cdd5e049f30e1cefdaafb77334a
e732d6e44ffd1399c8f677f453e0a78bbd45e3a08ca372117108f0f78fe9040d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E732D6E44FFD1399C8F677F453E0A78BBD45E3A08CA372117108F0F78FE9040D"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16482
Expires: Sun, 29 Jan 2023 10:40:17 GMT
Date: Sun, 29 Jan 2023 06:05:35 GMT
Connection: keep-alive
jam.click/download?data=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
302 Found 3.1 kB URL HTTP/2 jam.click/download?data=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
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (902)
Hash f08ba52e1f6c7be1f28196a7ed64eee6
57ad0454307f719574eeb2d3c5c4f1548a4a8698
daf2d0ca09b0508e7cdb6ca989dce2dcc2280895f02595b7d18981402f5a64c0
GET /download?data=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 HTTP/1.1
Host: jam.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Sun, 29 Jan 2023 06:05:35 GMT
content-type: text/html; charset=UTF-8
content-length: 3085
x-cad: 'http://bornmp3.com/cancao/2-lewis_capaldi/2-someone_you_loved/?__=0.9208888994335518'
location: https://ikzoncud.com/7-18wn6j-fak-h9x2-c1gr?deeplink=https%3A%2F%2Fjam.click%2Fdownload%3Fdata%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%26push&subid_1=bornmp3.com
set-cookie: push_redirect=1674972335; path=/; domain=.jam.click; secure; httponly
count=2; path=/; domain=.jam.click; secure; httponly
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 06:05:35 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d1a6a82c596d41319d71ba2be86fd565
3f5c03f248686f7de83081f204619e8a5cfa8650
4758ae3bb3c0f8035828b05183ce0661033f4b0e89ae787dba8c02074fafac2a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4758AE3BB3C0F8035828B05183CE0661033F4B0E89AE787DBA8C02074FAFAC2A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8967
Expires: Sun, 29 Jan 2023 08:35:02 GMT
Date: Sun, 29 Jan 2023 06:05:35 GMT
Connection: keep-alive
ikzoncud.com/7-18wn6j-fak-h9x2-c1gr?deeplink=https%3A%2F%2Fjam.click%2Fdownload%3Fdata%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%26push&subid_1=bornmp3.com
302 Found 0 B URL HTTP/1.1 ikzoncud.com/7-18wn6j-fak-h9x2-c1gr?deeplink=https%3A%2F%2Fjam.click%2Fdownload%3Fdata%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%26push&subid_1=bornmp3.com
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /7-18wn6j-fak-h9x2-c1gr?deeplink=https%3A%2F%2Fjam.click%2Fdownload%3Fdata%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%26push&subid_1=bornmp3.com HTTP/1.1
Host: ikzoncud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: openresty
Date: Sun, 29 Jan 2023 06:05:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.0.27
Set-Cookie: visitId=eckgsc4wggcg4o4w; expires=Mon, 13-Feb-2023 06:05:35 GMT; Max-Age=1296000; path=/
location: https://84.biqund.com/index/m3?diff=0&utm_source=ogdd&utm_campaign=12854&utm_content=bornmp3.com&utm_clickid=eckgsc4wggcg4o4w&aurl=https%3A%2F%2Fjam.click%2Fdownload%3Fdata%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%26push&an=&utm_term=&site=&isubs=0
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 2.2 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
Hash 90b4f90b14939b793ec0719c640eeb5d
82e8d66897ffb7a1c9dce5b418cee91042e01e74
7ceae2257d066eb06e0823fa2d9d34374288cc6faf29df411aac12692e20b08b
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 29 Jan 2023 05:41:41 GMT
age: 1434
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11697
Expires: Sun, 29 Jan 2023 09:20:32 GMT
Date: Sun, 29 Jan 2023 06:05:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9bd0fb0bdeaac6390653c4b04a1e24a8
619905592a82e5b9b8746b36f12166761f356f75
3ec04d8fe1453249891d73c7271789be6aa63395d27bd73df53856c64b675462
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3EC04D8FE1453249891D73C7271789BE6AA63395D27BD73DF53856C64B675462"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6300
Expires: Sun, 29 Jan 2023 07:50:36 GMT
Date: Sun, 29 Jan 2023 06:05:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3be7e27684b5aae3cbc790dff85cb927
e74be38637397fc73bb0ec22dfdc466440f1a32d
e6036fbbaa7053f1caf21af1b566894a49064db1d7ebac69199419a823410c69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E6036FBBAA7053F1CAF21AF1B566894A49064DB1D7EBAC69199419A823410C69"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17668
Expires: Sun, 29 Jan 2023 11:00:04 GMT
Date: Sun, 29 Jan 2023 06:05:36 GMT
Connection: keep-alive
hdtcode.com/event?data=&id=10
200 OK 0 B URL HTTP/2 hdtcode.com/event?data=&id=10
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event?data=&id=10 HTTP/1.1
Host: hdtcode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://84.biqund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.0
date: Sun, 29 Jan 2023 06:05:36 GMT
content-length: 0
access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
sartojelius.com/81599
200 OK 3.2 kB IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (3244), with no line terminators
Hash 03dbf6e685be23005e94efb96ceeb431
ef147dc89ca987753f6de48a8a368f042c7e770b
15f64e88d3e98e4d490933a3271c56cab606ecc9397e188e18d048100c5deb50
POST /81599 HTTP/1.1
Host: sartojelius.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://84.biqund.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://84.biqund.com
Content-Length: 249
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 06:05:36 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://84.biqund.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Set-Cookie: userid=1b4e0aad-3e4d-458d-be3a-0c0bcaf53411; expires=Sat, 29-Jan-2028 06:05:36 GMT; Path=/; SameSite=None; Secure
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IIc44Qfzio/qVl6OBXZhnQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: f0Peb70nTsRLpeYMqPe7UXCmH9k=
sartojelius.com/js/cs?uuid=1b4e0aad-3e4d-458d-be3a-0c0bcaf53411
302 Found 0 B URL HTTP/1.1 sartojelius.com/js/cs?uuid=1b4e0aad-3e4d-458d-be3a-0c0bcaf53411
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/cs?uuid=1b4e0aad-3e4d-458d-be3a-0c0bcaf53411 HTTP/1.1
Host: sartojelius.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://84.biqund.com/
Cookie: userid=1b4e0aad-3e4d-458d-be3a-0c0bcaf53411
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 29 Jan 2023 06:05:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uuid=1b4e0aad-3e4d-458d-be3a-0c0bcaf53411; expires=Tue, 28-Feb-2023 06:05:36 GMT; Path=/; domain=.sartojelius.com; SameSite=None; Secure
Location: https://s.uuidksinc.net/match/1165/?remote_uid=1b4e0aad-3e4d-458d-be3a-0c0bcaf53411&cb_url=https%3A%2F%2Fsartojelius.com%2Fjs%2Fcs%3Fuuid%3D1b4e0aad-3e4d-458d-be3a-0c0bcaf53411%26oid%3D%5BUID%5D
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d92555c61f8aa062bf84d8a7a55fc804
f7a7704c034ef46140892059652b869699f202b7
3445362df74ad7d4b78ca6ca5830b0aab1e067e5c02209ae4f9a92b5a82754e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3445362DF74AD7D4B78CA6CA5830B0AAB1E067E5C02209AE4F9A92B5A82754E9"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13105
Expires: Sun, 29 Jan 2023 09:44:01 GMT
Date: Sun, 29 Jan 2023 06:05:36 GMT
Connection: keep-alive
sartojelius.com/event/set
200 OK 20 B URL HTTP/1.1 sartojelius.com/event/set
IP
ASN #39572 DataWeb Global Group B.V.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
POST /event/set HTTP/1.1
Host: sartojelius.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 129
Origin: https://84.biqund.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://84.biqund.com/
Connection: keep-alive
Cookie: userid=1b4e0aad-3e4d-458d-be3a-0c0bcaf53411; uuid=1b4e0aad-3e4d-458d-be3a-0c0bcaf53411
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 06:05:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://84.biqund.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PROPFIND, PROPPATCH, COPY, MOVE, DELETE, MKCOL, LOCK, UNLOCK, PUT, GETLIB, VERSION-CONTROL, CHECKIN, CHECKOUT, UNCHECKOUT, REPORT, UPDATE, CANCELUPLOAD, HEAD, OPTIONS, GET, POST
Access-Control-Allow-Headers: Overwrite, Destination, Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control
Content-Encoding: gzip
jam.click/download?data=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&push
200 OK 20 kB URL HTTP/2 jam.click/download?data=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&push
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (59454)
Hash 21d85d6b69b65faaffc2454ebfa351ba
99ba2df290c724253e1d5f89353df1acee3038b1
988b1a54a01fddd580a8edd69a0c177e41c61d64c8298458b1a0687c388ade98
GET /download?data=MGEvU1NHR3ptalAyQ25hcmZ2dkhoUzcxYXpvdnF4OVV5eHFRNzBVZWQ2ais3b2RaSDlrd3hWdHFua2dSSlAwVStIYkJjZ1pDRmV1NEFKdkV2eGdCL25NVW5TZlFwblZQRnZ1RGRmUFM4Mld0VVVUUFAyS1d5S3RsM3N4NmUzLzUzanhtZE00TDNGSnRmdFQ3TDRJSnYzSmZ1bjhoeFg3MTFTbUIvTFk3RDdqdWFNc0JlVEVNSmhBTld0cnNhT21KTDZ2Ty9LRDkrcmdBNmlrL2JJbkl3TGhob2YxMUxSRTJLYzVSN25YVy9SQWdZQU9KaTNUSzRPVTRqR3hRNDBMNGJZRFBhdFRGWllNYXc2elVGbWNYMFJaNmNaYUpNZjM2dWRhb1dCazl1eURZanMrVkpBTkQvWkFnMjdYRDBrYTdWVzhPN3lGQ2U0U2VwSEJYNzdJWnRhL0NhVzVBY1hrTllqVU1vOGtZYVNqSG0wMDRFNmZwcGRzT3ZzNWFqcEtFUDRJMENvUjg3azRDOWovZXdKVXRTMy8yWERiSGoyY05KcVBhS1ZyVGR1UTZOMmkxVUtxb2pKejFPZnQ5UHNEVVNaREZFc2FNRjBWemNZeitwbVZ5Vm1rWi9rZXkxUkd2YS9Pc2N1NkYxa29BaGhmMHNWL2ZFbytXNjFoR0RYUVFOTEVKUWZHbWEySW92am5FdE04Z3J3PT0&push HTTP/1.1
Host: jam.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://84.biqund.com/
Cookie: push_redirect=1674972335; count=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 06:05:36 GMT
content-type: text/html; charset=UTF-8
content-length: 19771
x-cad: 'http://bornmp3.com/cancao/2-lewis_capaldi/2-someone_you_loved/?__=0.9208888994335518'
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 39fa44a0cec3f96167dee8a3a13bb383
72343b37119553916d57870b9d4f6d070e296be1
c8d083017e20b2ff483b41f1ccae3b9037ece1f907f3b0cdc237a6772b10d9d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8D083017E20B2FF483B41F1CCAE3B9037ECE1F907F3B0CDC237A6772B10D9D8"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21597
Expires: Sun, 29 Jan 2023 12:05:34 GMT
Date: Sun, 29 Jan 2023 06:05:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3990
Expires: Sun, 29 Jan 2023 07:12:07 GMT
Date: Sun, 29 Jan 2023 06:05:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3990
Expires: Sun, 29 Jan 2023 07:12:07 GMT
Date: Sun, 29 Jan 2023 06:05:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3990
Expires: Sun, 29 Jan 2023 07:12:07 GMT
Date: Sun, 29 Jan 2023 06:05:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3990
Expires: Sun, 29 Jan 2023 07:12:07 GMT
Date: Sun, 29 Jan 2023 06:05:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3990
Expires: Sun, 29 Jan 2023 07:12:07 GMT
Date: Sun, 29 Jan 2023 06:05:37 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 61dd48155b70501a72ec13f79745433d
4efc3d15f04a290a590b54122822d55a9d3fa1ca
9345056c111439b34aff08323fc99a2d315fa91293039dc5acf67affb50636d3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4202
x-amzn-requestid: d33bee10-9642-4138-8dde-3486ec7f6535
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa9ABFFvIAMFbqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d441ff-3b3a99db469e3f8c068d553c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:28:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yBrvQ9Y8bIsIJQcL3F2dZ5djdNlCPtTF6ZGpBmh6FqzZQ3phnA6JGQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 05:22:43 GMT
age: 2574
etag: "4efc3d15f04a290a590b54122822d55a9d3fa1ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e59316e1b1333c42d9d120fa88619bc2
669cdc8dfeba9d64f93f260adbb5f493a5649bb0
c4e78ec96322f1f151b07f9a45d51e6ca3fd46613472cf627f53bf399193a533
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9398
x-amzn-requestid: 3b2ecbd0-b8ee-415d-9473-32cdd50de777
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: feX-4GNXIAMFuIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5a05f-7015e4eb1410a8022de024d6;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 22:23:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: LX-_6oYOx0-UFWzbPAPZIaxNU4Wvvne7p6sUt8Q90kv_PASntoUcIA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 03:20:22 GMT
age: 9915
etag: "669cdc8dfeba9d64f93f260adbb5f493a5649bb0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7cfa685-1688-424d-b352-82b8ce19495a.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7cfa685-1688-424d-b352-82b8ce19495a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cbbc57c4e469baec1bda006407877cc
e988f007b1f9ec2327e7817f38cf56202096aeae
5237a8a8a7aa1fe59548582abf726fe77ad9e1fad8535bb5f88519dc6e779a86
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7cfa685-1688-424d-b352-82b8ce19495a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6158
x-amzn-requestid: f6073f30-9a9c-4674-8ca9-a43e1982ab44
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLzV7FHtoAMFRGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce328c-08806a615c478d443f76119f;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:09:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 5AeWdtII3LLgHysTJsa4Kn5-SSmF0rkM0uYXZwtpBC0p60eJ_VSjBw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 15:00:59 GMT
age: 54278
etag: "e988f007b1f9ec2327e7817f38cf56202096aeae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6af6f32397882f56d14d22348e44a9f1
5a626376807e7507fa3a204c4e4e9e44aa074a37
478f32e98c0a1f0d62fa337795ca88b7927e14b684b681f7629b648bc2d709a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7417
x-amzn-requestid: 53032353-8613-49b0-944d-3742236cf50c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcMmFeQIAMF3Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340b6-7fe2226327d90db014527c08;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zd8cTO2N1JO-OK3hCDwVO8naClCsg0raJLboRFle-DPSKhR_7k8-Yg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 03:16:35 GMT
age: 10142
etag: "5a626376807e7507fa3a204c4e4e9e44aa074a37"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 20:46:16 GMT
age: 33561
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d2bbd93-ce5c-4300-9ac3-8ccdde169701.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d2bbd93-ce5c-4300-9ac3-8ccdde169701.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ed721e83648418f4a5d64f9d038fd1a
7a311c79e311448941a8d624c1064b1a2d97cfbd
b961e73aaba814eec66532ceeafad5191371fc762b05338990e8cc9c8ecfcbff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d2bbd93-ce5c-4300-9ac3-8ccdde169701.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6875
x-amzn-requestid: 5fb13e91-8750-4dd9-90a2-f1218ea6009b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fS9t2E0AoAMF_LA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d10ff2-22e819312302377c4bf698ff;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 11:18:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: K5USIaSWnvB6PnUOFU_HW7OtgQ2GpOWCDeSubisxUIs3W545amtGlA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 07:59:12 GMT
age: 79585
etag: "7a311c79e311448941a8d624c1064b1a2d97cfbd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
jam.click/download?data=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&push
200 OK 0 B URL HTTP/2 jam.click/download?data=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&push
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /download?data=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&push HTTP/1.1
Host: jam.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jam.click/download?data=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&push
Cookie: push_redirect=1674972335; count=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 06:05:38 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-cad: 'http://bornmp3.com/cancao/2-lewis_capaldi/2-someone_you_loved/?__=0.9208888994335518'
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fab99d68c5416257c4a29b94fb088c07
c03a60a581faa24df778ede2e9eecf0d2100a5fa
4a29e6e0a35c1c8bf24195a3e319dcb0f588af753a6b1a32bcf8f11e39dc4e37
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A29E6E0A35C1C8BF24195A3E319DCB0F588AF753A6B1A32BCF8F11E39DC4E37"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17131
Expires: Sun, 29 Jan 2023 10:51:09 GMT
Date: Sun, 29 Jan 2023 06:05:38 GMT
Connection: keep-alive
augailou.com/tag.min.js
200 OK 24 kB IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash aa6ace1fab6b79d01a592237fdf403ca
dfb899b26b603ebe3a6999ade7c7c358d2b79f6b
e46b518362df138baca64438cdfab42250333c74626e784e574c0c9ce44087ef
Analyzer Verdict Alert quad9 Sinkholed
GET /tag.min.js HTTP/1.1
Host: augailou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jam.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 06:05:38 GMT
content-type: text/javascript; charset=utf-8
content-length: 23483
content-encoding: br
x-trace-id: 0a3164cec4b50610f15358a96f9476ba
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Fri, 27 Jan 2023 14:26:31 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
jam.click/favicon.ico
200 OK 32 kB IP
ASN #60781 LeaseWeb Netherlands B.V.
File type MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel\012- data
Hash 2c30e05d020d928eff6a7e3534dd7bee
f1449a17b8cdd4a3e5cde5aae327b17deec977b2
3cf1b77c832294b02ef078c54e44ae7a39f47adcae5b23ce28554df6696acc3d
GET /favicon.ico HTTP/1.1
Host: jam.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jam.click/download?data=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&push
Cookie: push_redirect=1674972335; count=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 06:05:38 GMT
content-type: image/vnd.microsoft.icon
content-length: 32038
last-modified: Fri, 26 Feb 2016 13:10:52 GMT
etag: "7d26-52cac074c6f00"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 58ce3a9e789805ac6044fc5d0f5c93e2
c3fb071e6873a025e91d03f07f846f5da45565fb
e33ac168f9adb059e1f34f39160048ec57bb2b678cea0e3195ae283b3d4b1738
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1423
Server: nginx
Content-Type: application/ocsp-response
Expires: Thu, 02 Feb 2023 05:13:45 GMT
ETag: "c3fb071e6873a025e91d03f07f846f5da45565fb"
Last-Modified: Sun, 29 Jan 2023 05:13:46 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 29 Jan 2023 06:05:38 GMT
Age: 3111
X-Served-By: cache-qpg1269-QPG, cache-bma1641-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 114
X-Timer: S1674972338.426196,VS0,VE0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2c4380697a101b67d9f8edb80bbe917c
d031ccb76ff8aeef9f80594b3ac3a7117e1ad05d
92fcb57afd01dbdc56cdd37ff2ebfb8807a286936093b1a863d334a3826aceb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92FCB57AFD01DBDC56CDD37FF2EBFB8807A286936093B1A863D334A3826ACEB3"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10280
Expires: Sun, 29 Jan 2023 08:56:58 GMT
Date: Sun, 29 Jan 2023 06:05:38 GMT
Connection: keep-alive
counter.yadro.ru/hit;overall?rhttps%3A//84.biqund.com/;s1280*1024*24;uhttps%3A//jam.click/download%3Fdata%3DMGEvU1NHR3ptalAyQ25hcmZ2dkhoUzcxYXpvdnF4OVV5eHFRNzBVZWQ2ais3b2RaSDlrd3hWdHFua2dSSlAwVStIYkJjZ1pDRmV1NEFKdkV2eGdCL25NVW5TZlFwblZQRnZ1RGRmUFM4Mld0VVVUUFAyS1d5S3RsM3N4NmUzLzUzanhtZE00TDNGSnRmdFQ3TDRJSnYzSmZ1bjhoeFg3MTFTbUIvTFk3RDdqdWFNc0JlVEVNSmhBTld0cnNhT21KTDZ2Ty9LRDkrcmdBNmlrL2JJbkl3TGhob2YxMUxSRTJLYzVSN25YVy9SQWdZQU9KaTNUSzRPVTRqR3hRNDBMNGJZRFBhdFRGWllNYXc2elVGbWNYMFJaNmNaYUpNZjM2dWRhb1dCazl1eURZanMrVkpBTkQvWkFnMjdYRDBrYTdWVzhPN3lGQ2U0U2VwSEJYNzdJWnRhL0NhVzVBY1hrTllqVU1vOGtZYVNqSG0wMDRFNmZwcGRzT3ZzNWFqcEtFUDRJMENvUjg3azRDOWovZXdKVXRTMy8yWERiSGoyY05KcVBhS1ZyVGR1UTZOMmkxVUtxb2pKejFPZnQ5UHNEVVNaREZFc2FNRjBWemNZeitwbVZ5Vm1rWi9rZXkxUkd2YS9Pc2N1NkYxa29BaGhmMHNWL2ZFbytXNjFoR0RYUVFOTEVKUWZHbWEySW92am5FdE04Z3J3PT0%26push;0.4934007219361054
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;overall?rhttps%3A//84.biqund.com/;s1280*1024*24;uhttps%3A//jam.click/download%3Fdata%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%26push;0.4934007219361054
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;overall?rhttps%3A//84.biqund.com/;s1280*1024*24;uhttps%3A//jam.click/download%3Fdata%3DMGEvU1NHR3ptalAyQ25hcmZ2dkhoUzcxYXpvdnF4OVV5eHFRNzBVZWQ2ais3b2RaSDlrd3hWdHFua2dSSlAwVStIYkJjZ1pDRmV1NEFKdkV2eGdCL25NVW5TZlFwblZQRnZ1RGRmUFM4Mld0VVVUUFAyS1d5S3RsM3N4NmUzLzUzanhtZE00TDNGSnRmdFQ3TDRJSnYzSmZ1bjhoeFg3MTFTbUIvTFk3RDdqdWFNc0JlVEVNSmhBTld0cnNhT21KTDZ2Ty9LRDkrcmdBNmlrL2JJbkl3TGhob2YxMUxSRTJLYzVSN25YVy9SQWdZQU9KaTNUSzRPVTRqR3hRNDBMNGJZRFBhdFRGWllNYXc2elVGbWNYMFJaNmNaYUpNZjM2dWRhb1dCazl1eURZanMrVkpBTkQvWkFnMjdYRDBrYTdWVzhPN3lGQ2U0U2VwSEJYNzdJWnRhL0NhVzVBY1hrTllqVU1vOGtZYVNqSG0wMDRFNmZwcGRzT3ZzNWFqcEtFUDRJMENvUjg3azRDOWovZXdKVXRTMy8yWERiSGoyY05KcVBhS1ZyVGR1UTZOMmkxVUtxb2pKejFPZnQ5UHNEVVNaREZFc2FNRjBWemNZeitwbVZ5Vm1rWi9rZXkxUkd2YS9Pc2N1NkYxa29BaGhmMHNWL2ZFbytXNjFoR0RYUVFOTEVKUWZHbWEySW92am5FdE04Z3J3PT0%26push;0.4934007219361054 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jam.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 29 Jan 2023 06:05:38 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Fri, 28 Jan 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
augailou.com/5/3041593/?oo=1&aab=1
200 OK 1.4 kB URL HTTP/2 augailou.com/5/3041593/?oo=1&aab=1
IP
Hash 033cccf0a6a495433e51fc25eff83547
d46fd2f3068cc9cf892aaf7ff6e42980671e9236
672d4cdc2be8c29b3b23455ca147157723c36619fc864a8845dd2321fbaa987a
Analyzer Verdict Alert quad9 Sinkholed
GET /5/3041593/?oo=1&aab=1 HTTP/1.1
Host: augailou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jam.click
Connection: keep-alive
Referer: https://jam.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 06:05:38 GMT
content-type: application/json
x-trace-id: e0b22b2cf37a5dedb06a39fc08229b8a
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://jam.click
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=c4c6da09cd32446eac9a948d17bec90a; expires=Mon, 29 Jan 2024 06:05:38 GMT; path=/; secure; SameSite=None
oaidts=1674972338; expires=Mon, 29 Jan 2024 06:05:38 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
augailou.com/?rb=6a5m-6SQWWZGNj5CnhErre7KZruKCMxs3m8vMdcn4DJDJ554rjkc4tprbDeyHZJvvoOg6E-pWIcK6C3qaMe4cAR5imk2Qg_QdzHDdiJozzEyY67sGPNH_iOQRuCpk1yZS92NV8e4Pi1XziogxmTsFHlJI0Be33cqpyQ8HWrXUIcL3Wn7d3kHIOK7rWdM0JPVR8JZaHKiRT2bhxxMDzltsiZL__3msVweEzFhZA%3D%3D&request_ab2=0&zoneid=3041593&js_build=iclick-v1.474.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fjam.click%2Fdownload%3Fdata%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%26push&drf=https%3A%2F%2F84.biqund.com%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.474.0&bs=24a8345a-aa81-4a10-a9aa-c1f9feb167d0&userId=c4c6da09cd32446eac9a948d17bec90a&m=link
200 OK 0 B URL HTTP/2 augailou.com/?rb=6a5m-6SQWWZGNj5CnhErre7KZruKCMxs3m8vMdcn4DJDJ554rjkc4tprbDeyHZJvvoOg6E-pWIcK6C3qaMe4cAR5imk2Qg_QdzHDdiJozzEyY67sGPNH_iOQRuCpk1yZS92NV8e4Pi1XziogxmTsFHlJI0Be33cqpyQ8HWrXUIcL3Wn7d3kHIOK7rWdM0JPVR8JZaHKiRT2bhxxMDzltsiZL__3msVweEzFhZA%3D%3D&request_ab2=0&zoneid=3041593&js_build=iclick-v1.474.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fjam.click%2Fdownload%3Fdata%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%26push&drf=https%3A%2F%2F84.biqund.com%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.474.0&bs=24a8345a-aa81-4a10-a9aa-c1f9feb167d0&userId=c4c6da09cd32446eac9a948d17bec90a&m=link
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /?rb=6a5m-6SQWWZGNj5CnhErre7KZruKCMxs3m8vMdcn4DJDJ554rjkc4tprbDeyHZJvvoOg6E-pWIcK6C3qaMe4cAR5imk2Qg_QdzHDdiJozzEyY67sGPNH_iOQRuCpk1yZS92NV8e4Pi1XziogxmTsFHlJI0Be33cqpyQ8HWrXUIcL3Wn7d3kHIOK7rWdM0JPVR8JZaHKiRT2bhxxMDzltsiZL__3msVweEzFhZA%3D%3D&request_ab2=0&zoneid=3041593&js_build=iclick-v1.474.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fjam.click%2Fdownload%3Fdata%3DMGEvU1NHR3ptalAyQ25hcmZ2dkhoUzcxYXpvdnF4OVV5eHFRNzBVZWQ2ais3b2RaSDlrd3hWdHFua2dSSlAwVStIYkJjZ1pDRmV1NEFKdkV2eGdCL25NVW5TZlFwblZQRnZ1RGRmUFM4Mld0VVVUUFAyS1d5S3RsM3N4NmUzLzUzanhtZE00TDNGSnRmdFQ3TDRJSnYzSmZ1bjhoeFg3MTFTbUIvTFk3RDdqdWFNc0JlVEVNSmhBTld0cnNhT21KTDZ2Ty9LRDkrcmdBNmlrL2JJbkl3TGhob2YxMUxSRTJLYzVSN25YVy9SQWdZQU9KaTNUSzRPVTRqR3hRNDBMNGJZRFBhdFRGWllNYXc2elVGbWNYMFJaNmNaYUpNZjM2dWRhb1dCazl1eURZanMrVkpBTkQvWkFnMjdYRDBrYTdWVzhPN3lGQ2U0U2VwSEJYNzdJWnRhL0NhVzVBY1hrTllqVU1vOGtZYVNqSG0wMDRFNmZwcGRzT3ZzNWFqcEtFUDRJMENvUjg3azRDOWovZXdKVXRTMy8yWERiSGoyY05KcVBhS1ZyVGR1UTZOMmkxVUtxb2pKejFPZnQ5UHNEVVNaREZFc2FNRjBWemNZeitwbVZ5Vm1rWi9rZXkxUkd2YS9Pc2N1NkYxa29BaGhmMHNWL2ZFbytXNjFoR0RYUVFOTEVKUWZHbWEySW92am5FdE04Z3J3PT0%26push&drf=https%3A%2F%2F84.biqund.com%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.474.0&bs=24a8345a-aa81-4a10-a9aa-c1f9feb167d0&userId=c4c6da09cd32446eac9a948d17bec90a&m=link HTTP/1.1
Host: augailou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jam.click/
Origin: https://jam.click
Connection: keep-alive
Cookie: OAID=c4c6da09cd32446eac9a948d17bec90a; oaidts=1674972338
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 06:05:38 GMT
content-type: application/json
x-trace-id: c8f69405125f1d4cfad84e4d5f1b64a5
access-control-allow-origin: https://jam.click
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=c4c6da09cd32446eac9a948d17bec90a; expires=Mon, 29 Jan 2024 06:05:38 GMT; path=/; secure; SameSite=None
oaidts=1674972338; expires=Mon, 29 Jan 2024 06:05:38 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sun, 05 Feb 2023 06:05:38 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
84.biqund.com/index/m3?diff=0&utm_source=ogdd&utm_campaign=12854&utm_content=bornmp3.com&utm_clickid=eckgsc4wggcg4o4w&aurl=https%3A%2F%2Fjam.click%2Fdownload%3Fdata%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%26push&an=&utm_term=&site=&isubs=0
200 OK 0 B URL HTTP/2 84.biqund.com/index/m3?diff=0&utm_source=ogdd&utm_campaign=12854&utm_content=bornmp3.com&utm_clickid=eckgsc4wggcg4o4w&aurl=https%3A%2F%2Fjam.click%2Fdownload%3Fdata%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%26push&an=&utm_term=&site=&isubs=0
IP
GET /index/m3?diff=0&utm_source=ogdd&utm_campaign=12854&utm_content=bornmp3.com&utm_clickid=eckgsc4wggcg4o4w&aurl=https%3A%2F%2Fjam.click%2Fdownload%3Fdata%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%26push&an=&utm_term=&site=&isubs=0 HTTP/1.1
Host: 84.biqund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 29 Jan 2023 06:05:35 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W7vI8J7Gy5YhbSic8lhZnBr4Imv8hPSY763wWwfaJkFRIIQBqilko%2FGvm819CAqMR5sDUlQNE7P4hCYzXqaSjCrbc3thzjDQNWhWnX%2B1v%2Faq63Fl42lA8e4xZ1kv93TI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790fc6e88fe9b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
lavageethion.com/r7NT2yo95T10y/34041
200 OK 0 B URL HTTP/2 lavageethion.com/r7NT2yo95T10y/34041
IP
GET /r7NT2yo95T10y/34041 HTTP/1.1
Host: lavageethion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jam.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
content-type: text/html; charset=UTF-8
date: Sun, 29 Jan 2023 06:05:37 GMT
x-powered-by: PHP/5.4.16
X-Firefox-Spdy: h2
95.211.203.220
34.160.144.191
139.45.197.243
188.114.96.1
23.36.76.226
88.212.201.198
0.0.0.0