Report - en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019

Report Overview

Submitted URL
en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
IP
104.21.69.3
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-24 15:59:53
Access
public
Website Title
Search and Browse YIFY Movies Torrent Downloads - YTS - Page 4
Final URL
en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.cloudimagesb.com	23099	2020-10-06	2021-02-12	2024-04-23	440 B	16 kB	45.133.44.9
downstairsnegotiatebarren.com	unknown	2024-03-04	2024-03-04	2024-04-23	826 B	57 kB	172.67.180.87
cdn.creative-bars1.com	unknown	2022-11-01	2022-11-15	2024-04-21	2.3 kB	45 kB	188.114.97.1
proftrafficcounter.com	unknown	2023-11-16	2023-11-21	2024-04-23	874 B	850 B	18.185.247.192
capaciousdrewreligion.com	unknown	2023-11-07	2023-11-27	2024-04-22	419 B	329 B	192.243.59.13
waterfallchequeomnipotent.com	unknown	2024-04-23	2024-04-23	2024-04-23	7.6 kB	13 kB	192.243.59.20
unseenreport.com	unknown	2022-03-30	2022-03-30	2024-04-23	1.5 kB	846 B	192.243.59.12
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	2.1 kB	77 kB	216.58.207.227
growingcastselling.com	unknown	unknown	No data	No data	888 B	48 kB	172.240.127.234
postthieve.com	unknown	unknown	No data	No data	483 B	467 B	192.243.59.12
cdn.barscreative1.com	25648	2021-09-08	2021-09-16	2024-04-23	496 B	1.7 kB	45.133.44.3
en.yts-official.mx	unknown	2024-02-16	2024-02-22	2024-04-18	17 kB	805 kB	104.21.69.3
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	897 B	13 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	unseenreport.com	Sinkholed
2024-04-24	medium	unseenreport.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	downstairsnegotiatebarren.com/sfp.js	86 kB	2024-03-29	2024-05-05
Pretty URL downstairsnegotiatebarren.com/sfp.js IP 172.67.180.87 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-29 13:13:34 Last Seen2024-05-05 21:06:47 Times Seen2298 Hash f4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716 Loading...

	capaciousdrewreligion.com/advertisers.js	0 B	2023-03-07	2024-05-05
Pretty URL capaciousdrewreligion.com/advertisers.js IP 192.243.59.13 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-05 23:27:24 Times Seen37371124 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js	84 kB	2023-03-07	2024-05-05
Pretty URL cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-05-05 20:00:52 Times Seen16003 Hash 4a356126b9573eb7bd1e9a7494737410 8258d046f17dd3c15a5d3984e1868b7b5d1db329 22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5 Loading...

	unknown	1.3 kB	2024-04-18	2024-05-05
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 12:10:15 Last Seen2024-05-05 15:03:13 Times Seen20 Hash c49d905a401c8300d3a430b90f647172 abbb3b563239dfe2eb172377985ef6f5fe9db5a6 55c0ad517dc805ddffa8f13a2614bc0217b201e44cbfb2e9fc900dd42c4120c4 Loading...

	en.yts-official.mx/static/yts/style/modded1.js?yify=1	163 kB	2023-03-08	2024-05-05
Pretty URL en.yts-official.mx/static/yts/style/modded1.js?yify=1 IP 104.21.69.3 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 07:05:18 Last Seen2024-05-05 15:03:13 Times Seen141 Hash 60de675fcd2844a3ffbb68550d303076 8a53cc2f554a8ef1f58f3fd1996a3c3552ea5472 1c821bdab262418e3742bfa3c295c3b668724f7e8898b45638958a898bd93d33 Loading...

	en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019	428 B	2024-04-18	2024-05-05
Pretty URL en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019 IP 104.21.69.3 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 12:10:15 Last Seen2024-05-05 15:03:13 Times Seen63 Hash 6dcff6572b90a25babb8be2e3703eb97 58ca34991d0315b9cef9bb1e9bd8ba547602e5b3 28f374670828d65e52a411c90ba6dd9017599b26eca5ef05eb3278c2f4f81982 Loading...

	growingcastselling.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js	84 kB	2024-04-24	2024-04-24
Pretty URL growingcastselling.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js IP 172.240.127.234 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 18:00:00 Last Seen2024-04-24 18:00:01 Times Seen2 Hash b1863c733b6066bb3b0199f1e83ad3b3 d1a7c227b3f9953c0101ce16f58b0cde633b28d1 9249f63313aec2ba9b0369888d77ffefbd16f76f29e88e475de5b0bc6c478f65 Loading...

	growingcastselling.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js	44 kB	2024-04-24	2024-04-24
Pretty URL growingcastselling.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js IP 172.240.127.234 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 18:00:00 Last Seen2024-04-24 18:00:01 Times Seen2 Hash b6abfb37eb67072649a69e4392b076a5 388f1ab220d9b29b3b1ec903f24393af7defa263 54109ead00b1155231a91881e92a574a6c36f5bf40f05938cecd0f941f6f2804 Loading...

HTTP Transactions (61)

URL IP Response Size

en.yts-official.mx/static/yts/style/modded1.js?yify=1

104.21.69.3

200 OK

72 kB

URL GET HTTP/3
en.yts-official.mx/static/yts/style/modded1.js?yify=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JavaScript source, ASCII text, with very long lines (65452)
Size
72 kB (71764 bytes)
Hash
60de675fcd2844a3ffbb68550d303076
8a53cc2f554a8ef1f58f3fd1996a3c3552ea5472
1c821bdab262418e3742bfa3c295c3b668724f7e8898b45638958a898bd93d33

HTTP Headers

GET /static/yts/style/modded1.js?yify=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: application/javascript
last-modified: Mon, 19 Feb 2024 03:18:38 GMT
vary: Accept-Encoding
etag: W/"65d2c88e-27b24"
expires: Wed, 24 Apr 2024 23:03:14 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 17772
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h3z%2Fdw65RGcz7ZPL5uFVtS%2BWQAwJvER2WvA6U54qgYi0x11dJwz5i2zI7olYQ3tNPr7dhP2z8aVGIZUVOhskFeYBTTEMqvGZScFZJbXYVtRdKByl1LaOMSfxoQOMUSXCddkAKGE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87974cee39c256bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/the-other-lamb-2019.jpg?v=1

104.21.69.3

200 OK

13 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/the-other-lamb-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
13 kB (13157 bytes)
Hash
34543f21543070906fd85858511d34db
c51c8fcc6bfd73f9c743d2d5e511ada5762c0d83
8f868bd409b2f815e98055e723216bbf1b500edcc32963c34e69022eb62c9f00

HTTP Headers

GET /movies/poster/the-other-lamb-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 13157
last-modified: Fri, 29 Oct 2021 17:31:30 GMT
etag: "617c2ff2-3365"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9C5%2Bypd2c1yJY%2BGNLyYlzZnpeiiTZLR0P8rMDayzjV2wRsvLwZA%2BIEh5lZvfxQTAtXLRgoz29NB5oVU62gXSw8m5zyzJR1YZ2lSb1VkE81GPqiEIynArsK9xulRkZijO%2FitrC1A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee299d56bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/nevrland-2019.jpg?v=1

104.21.69.3

200 OK

34 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/nevrland-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 230x345, components 3
Size
34 kB (33732 bytes)
Hash
2d4f7b07f5accd485ccbed953e521b06
71f09534296a4d9d777265413f0cc29cf07c89f9
eacc23947c1f76c83ce80eaeeedbdc6b24b4ada53cb78cae651d39e70eca6def

HTTP Headers

GET /movies/poster/nevrland-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 33732
last-modified: Fri, 29 Oct 2021 15:48:47 GMT
etag: "617c17df-83c4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AopsMzU9M9w2Dp7ju7PYLfGITEHzPQmUHGr8KsaQ9NqHvdOJmTN0s8GAJu%2F3mPIqGVUTbs1WLanpFkTZ1ufmMqGJ13zPEOFrI51q%2FaohqjzSJYtpp%2FHqLnf1cxPfiuwMt2Qmbok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee29a056bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/1br-2019.jpg?v=1

104.21.69.3

200 OK

20 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/1br-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
20 kB (20267 bytes)
Hash
d8f85df6bd847aa27dbab29d5211b9c8
1d5c0564a4aa9d8c51d902c82db717b8647dbec0
939a6c1a05f8a9a95e82b21c8c9fa16cc4f2566ec786dc357061f07cb4ac41e6

HTTP Headers

GET /movies/poster/1br-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 20267
last-modified: Fri, 29 Oct 2021 14:36:20 GMT
etag: "617c06e4-4f2b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W2LLj%2FLVxPB0w0rlcjCZB4y6Sef7BqOixZFFi7UwvEByxeWY3When6PTIksPgVIyh%2BmgjV8%2BGSLLMIQemGwpZRJERxEvFskMg83xWVelnj2fEPI4uJKKZe7V2KqJAuT7rOK8gfY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee39bb56bf-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2

216.58.207.227

200 OK

20 kB

URL GET HTTP/2
fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 20040, version 1.0
Size
20 kB (20040 bytes)
Hash
a61c670a24d6794a95a9712f0d12b656
c9b3114b27790109ec51508f51f1a033ccfe0812
a4f5230d39a7a21971fe62ccde2443345638d2beaa369b752820390a687b91b6

HTTP Headers

GET /s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 00:37:32 GMT
expires: Wed, 23 Apr 2025 00:37:32 GMT
cache-control: public, max-age=31536000
age: 141714
last-modified: Thu, 14 Sep 2023 00:51:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2

216.58.207.227

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 22052, version 1.0
Size
22 kB (22052 bytes)
Hash
f0e48ce2beda9e8cbd7d915bf1b1ae71
3dc1cfff1759b0959cc7fb17517651ec850d584d
b2504b3c20c2feb37e78773b788dd09a9cc43c9f36086bc1e2f83a6366ebaa34

HTTP Headers

GET /s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:46:37 GMT
expires: Fri, 18 Apr 2025 02:46:37 GMT
cache-control: public, max-age=31536000
age: 565969
last-modified: Thu, 14 Sep 2023 00:00:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

en.yts-official.mx/movies/poster/evil-little-things-2019.jpg?v=1

104.21.69.3

200 OK

14 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/evil-little-things-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
14 kB (14020 bytes)
Hash
4b0a0c9495d5204fe579576e949484a5
7f01e1f0b5d240eb111c12b11d70d89914e6ce60
90ee6d0e35fb4383f755978a4295c52d0e4304c40f6f9bad584703ee89bb445d

HTTP Headers

GET /movies/poster/evil-little-things-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 14020
last-modified: Fri, 29 Oct 2021 14:06:35 GMT
etag: "617bffeb-36c4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IiRcxBoEW5o9YDkXEisb5lq%2F2mV2lHwgVxpB5Sqwnk23kIaZOaaQmEoLZJe%2BJO%2B8HnvZWzwwncbVrO0kRO6fsh5dn00GB3kNiiISfTmoK0lSEoO38EptAXDSgwKE4j8CrvE4vJk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee39be56bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/into-the-labyrinth-2019.jpg?v=1

104.21.69.3

200 OK

18 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/into-the-labyrinth-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
18 kB (18507 bytes)
Hash
777992515246a05949d0b980441174a6
750886385cf0d6d13c369d0885b8c2848c2a3010
6e1ad9bad93c00af9f1c45ab818292bfcbbd21396a3d573bdd96ea09bc298239

HTTP Headers

GET /movies/poster/into-the-labyrinth-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 18507
last-modified: Fri, 29 Oct 2021 20:05:48 GMT
etag: "617c541c-484b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bB4nNU%2F9R4XTYqJRZnYaT4766mtSVRkv3PMw4REvgb2SdMiKGQJPRyKlePipgY7UzZ70qttTMYX74TsADmsA0FhgEw45aUcCa%2BNNaOokdWZFtyZC80xCCwC1pRp5duM8qkgfAto%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee198556bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/the-devils-machine-2019.jpg?v=1

104.21.69.3

200 OK

41 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/the-devils-machine-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
41 kB (41028 bytes)
Hash
0ab51b870c55e2383bffb60a4d288c8c
b5643cd407b4f51834fd1c1769419daa163d9789
2fa20dc251905e9012f992c418bdc896204ca59eb61272842b1b2974a14313a6

HTTP Headers

GET /movies/poster/the-devils-machine-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 41028
last-modified: Fri, 29 Oct 2021 19:19:22 GMT
etag: "617c493a-a044"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pEAfj7wkXnLQdSMRpRG2ocv0ZZ7%2F1z1CSqSFyffvdzY5eexpEM4xl9wKXC0%2BiuMJC%2FWIWe%2BanHtNlErfkbBsEqxQI9F0o45DGIF%2BoHxgYtYVefs5QWBnfUW69nbftlejAX27a9w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee198856bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/the-faceless-man-2019.jpg?v=1

104.21.69.3

200 OK

40 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/the-faceless-man-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
40 kB (40485 bytes)
Hash
27f53c7828604c85c37e723e9b377f67
cbf111db61b8e2c9958266678a3f2206e8c45ff1
f186e94f8e1634811ebe77f055868254093a57fa68145fefd3f9de2b9961ed42

HTTP Headers

GET /movies/poster/the-faceless-man-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 40485
last-modified: Fri, 29 Oct 2021 19:50:33 GMT
etag: "617c5089-9e25"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5B8vC30%2FtJKGYYYxDBTrOgQgTDyVu6eoLZMMb1SWFZPBbDOLUhzE7Ribb7bW8zOuJp1NEtiu1uOdTYC1BwDiAcvPrxQBBsoGmKMbPOdHs%2BJ6r6bIzdN1VHHWxB4AetW0RCAndRw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee198656bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/into-the-dark-treehouse-2019.jpg?v=1

104.21.69.3

200 OK

29 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/into-the-dark-treehouse-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
29 kB (29413 bytes)
Hash
621e448e53aff300c51a1ba0ca8340c6
0209e33f5388e757687b77e78d5ff1f40965e114
a83872651633adf1c7e8e8d809ca583cf04db34ef78833d833eebbd8a93d8458

HTTP Headers

GET /movies/poster/into-the-dark-treehouse-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 29413
last-modified: Fri, 29 Oct 2021 19:24:54 GMT
etag: "617c4a86-72e5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HRDjLsGInKgSgQweLhbuFtCQ%2FvsjLcKy5IKFAfGVhdTagGDCTvoiN3qlLRlhMD1O%2BLlB%2FZ3rpnu9iak8byQMlZF5ap4YXuA12d7XKIPPVHjJOfCgLAiJxBlE7cuOh%2FUaas%2BHj5Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee198756bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/the-driver-2019.jpg?v=1

104.21.69.3

200 OK

22 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/the-driver-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
22 kB (22462 bytes)
Hash
efdc77fe326b153bcf0a6cfbdf191896
ed683cabf1ec01bffd12f82f1f3f4a7cc3cd5828
f31780ac6b16a8bba2a90787e5d266355700738dc5d458aefb22c0abcf6596bc

HTTP Headers

GET /movies/poster/the-driver-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 22462
last-modified: Fri, 29 Oct 2021 19:06:18 GMT
etag: "617c462a-57be"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W2sNP5Ki9hhLKe2AXv13Evdouyg9CkY8oBO5xPVxjdmryjPPNsYXYVsbyJGH3ia71%2FIlzOpqGeVm2gqoA6%2FAZvI8ABhV%2Fl3DyJV7Pdq9ZhdqdrifhvfCysRvYqwoI4Dmj57fwlc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee198956bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019

104.21.69.3

200 OK

37 kB

URL GET HTTP/3
en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
HTML document, ASCII text, with very long lines (1330), with CRLF line terminators
Size
37 kB (36712 bytes)
Hash
4bc75832255d6a6db0686cf5d2f91b54
06b0edc5008e5007abccef3bec7bce56f45b2e38
2c26c10f26d192bfe63064941985916f6cc50fd5cc362a1085b0dd8b9aaedc7c

HTTP Headers

GET /browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RO6eftbOUL1a8gqX0YWtuHvyy%2BSK7QUsEvuM4uT4J0X3%2F%2BEhvn4LY6TBU4TGr27K1DD%2FdGw8v1UuLNZF2zT8rD5M55NGDL%2BB4VaOxfaTWvRUvjOL1jQ8VriAFcoTYIa%2FAifBFhg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87974cebd89f56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

en.yts-official.mx/movies/poster/la-llorona-2019.jpg?v=1

104.21.69.3

200 OK

32 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/la-llorona-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
32 kB (31553 bytes)
Hash
c8934e6f646bf4fb8dd770159e9df0f2
ee97e5a117d46384556656c90fbb0650b3c014b4
6f0044031d525961235d4d768463bfb75fdd4e575d65e5876c90f3e14b573506

HTTP Headers

GET /movies/poster/la-llorona-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 31553
last-modified: Fri, 29 Oct 2021 18:39:13 GMT
etag: "617c3fd1-7b41"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J8T7z8YFBfsHp%2FOXZFl26q4gGpFDPBXdWuonb%2FTHhULVekQ2Zi5xtQNu2y5mdBkSVJgYgvFcFTKSx9vGRmyG6M0mGsmjxL44qUu5ZXvWnczWMv4x3htSGrARpjUN19xBsAj4mzA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee199256bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/clown-motel-spirits-arise-2019.jpg?v=1

104.21.69.3

200 OK

35 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/clown-motel-spirits-arise-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
35 kB (34676 bytes)
Hash
18f2751b181adbb629f8a77f85979586
12b6910a04c1eedf67727bffa8aeefc4365a675b
d8e41d151b4ed1c32b1f04ecb8932ba9b5a498b5a2d61e064d40bc1ee7372b48

HTTP Headers

GET /movies/poster/clown-motel-spirits-arise-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 34676
last-modified: Fri, 29 Oct 2021 18:12:20 GMT
etag: "617c3984-8774"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yGOdf4Zwol7UWEPpz2wVJsWfo2QH1CoHX6wwDgtr%2FyQF6Lb1H2FtijXvlkbLIoSkxqtdkHkcH%2FhdpcVvUhyxBOSRlwXh4eCbR9Yx%2BRv5cxfG9x%2BVSJZ7LLx%2BQRV3WLIW4zE5gXI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee299b56bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/dreamland-2019.jpg?v=1

104.21.69.3

200 OK

40 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/dreamland-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
40 kB (39717 bytes)
Hash
5c2eb83caf055260cfd2f7ad1483e944
8953b3b988108fd5cd2fa222e2387702872ae0c5
00fc695fcf00fb1e4d725cab7ac59407773541d07aeaf495dd08a01e875f4a70

HTTP Headers

GET /movies/poster/dreamland-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 39717
last-modified: Fri, 29 Oct 2021 15:44:32 GMT
etag: "617c16e0-9b25"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iWK%2FHhW5syNvRZ4mCJHmkmrHyFi4D8t2QqVxYC7vEPZDbgYh%2FxIko%2BuukngDiMstyNskT%2B8jS5VSGzaOHCYPcD7VTC1MApZsGuCfTJW9wkxmdtgMC4LiM%2FbilltW6uaIc00TS80%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee29a256bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/confessional-2019.jpg?v=1

104.21.69.3

200 OK

29 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/confessional-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
29 kB (28752 bytes)
Hash
d5bc4e9c65d7b6fb7398d592f83252b1
61da9a2303864d0f4bce6bd310b919df1ac9bd01
12f0db48aa77e8fbf55c7689b034062adecd0d03a565cf30b0fe2614c5b707c6

HTTP Headers

GET /movies/poster/confessional-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 28752
last-modified: Fri, 29 Oct 2021 15:39:15 GMT
etag: "617c15a3-7050"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZyL%2FA%2FuOIsEIr7ONt6jFPbIZ9ww60Re8TMwTDodQ8IzyC3xNZyXPBEgs9kOnfgwzBy0i4MQ6q6DdyTu1YiBaj0y284z1gv6KIjGtqKDUs10hCjeKQLNCsWvbQLkwdvgnVQk5yjw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee39b456bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/we-summon-the-darkness-2019.jpg?v=1

104.21.69.3

200 OK

42 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/we-summon-the-darkness-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
42 kB (42518 bytes)
Hash
f8769147b6ca4aedbecfa3064ba65701
79419c0666505808a1c558c73e2ff4fb974ec229
9117504aa8163b39026c45ebfa878e0c38e1c5d756b9eddab48ad73ff20123c0

HTTP Headers

GET /movies/poster/we-summon-the-darkness-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 42518
last-modified: Fri, 29 Oct 2021 15:17:10 GMT
etag: "617c1076-a616"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6r10wOL3nCnlQOs8OHXzXfuWHwaVJZEFuGf3UIyFjpU5c5%2Bl1Hpv6H7whuZd%2F5yM%2BVjVNPdcRe40GvAdswyPmWlRoWMqSkpyim5UZsLPU8jsZck3GUleh8PBUxj0cXzcxEtQHXo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee39b656bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/a-good-woman-is-hard-to-find-2019.jpg?v=1

104.21.69.3

200 OK

22 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/a-good-woman-is-hard-to-find-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
22 kB (22384 bytes)
Hash
bf7d561999ebeebc7a2c51c02d969c92
862c650b21c0f643af5b0dbb5fbe888a96eddaf1
694af745791c9398ab88902528755ccbe797b5f1fd9d9e2af50d5e80ec028a21

HTTP Headers

GET /movies/poster/a-good-woman-is-hard-to-find-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 22384
last-modified: Fri, 29 Oct 2021 14:53:04 GMT
etag: "617c0ad0-5770"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o1%2B%2FGqJYakIrJtU092vhO2jHtgQx2%2FBx4oY9uMkp5RUCgmGP1Yse1%2FCbzSSlN2Z0q6ktvY8tDLnYiMTb0EaO6XkD5I7fipFm4F8q13ETji80Zd2sPmd%2B64VyHF7qS2IGzXZRKFw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee39b956bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/exorcism-at-60000-feet-2019.jpg?v=1

104.21.69.3

200 OK

40 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/exorcism-at-60000-feet-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
40 kB (40330 bytes)
Hash
e13e5563b44ee210b76a7becd2f17a50
a07a87ac4e360e1820937d0f2794b2519614ecf0
8fee5a10cb4decbb4ac1b87715661d8dfa4c1082ff2d60514167dd04a41f27e5

HTTP Headers

GET /movies/poster/exorcism-at-60000-feet-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 40330
last-modified: Fri, 29 Oct 2021 14:25:30 GMT
etag: "617c045a-9d8a"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=84zluNhI58CJgj%2BHigicaCnkvjKHDP4ORht%2FhtpuqBAapWB7loFfz08XxAfxRzYl9MDV8PyLueBwvoWBQtN14%2BQgy%2FTGwtuXQhVp6E5Oem0ZBy66VWRycKEBRVYPaykmGsx5ANA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee39bd56bf-OSL
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext

142.250.74.106

200 OK

4.4 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
4.4 kB (4350 bytes)
Hash
f9d6e4661d64c4db0752fdd5257bc3c9
12befad9d5128a6d1d9eba3670051c746f8395b9
9f5ffab81101913ea1fe7575a7f806707de44947c12e9ac13947353fcf42d906

HTTP Headers

GET /css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:59:26 GMT
date: Wed, 24 Apr 2024 15:59:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

en.yts-official.mx/movies/poster/skin-walker-2019.jpg?v=1

104.21.69.3

200 OK

16 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/skin-walker-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
16 kB (16372 bytes)
Hash
6bb033830049ed2543529ad41adbf7d6
7e4be76088b71f43e4e8bdc92e85298d80cfbd7e
7d535666274c587f3d8fe938404864e179b14e2f8e984a1a681507b7a2ace755

HTTP Headers

GET /movies/poster/skin-walker-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 16372
last-modified: Fri, 29 Oct 2021 18:32:06 GMT
etag: "617c3e26-3ff4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CU2XrEMZd72ZOxsOHvruX%2BD%2Fbe1dHoGR%2F5KJc6TAX9cgYTKd6vdSNCDIlxt0yM89VF3EWFKogMxIbBmwcWixy9cHCra28jHc%2FeN1E3Ah1J%2BX4w9C3QJfgQPilZOWBDUMhBImH2k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee299a56bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/midsommar-2019.jpg?v=1

104.21.69.3

200 OK

36 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/midsommar-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
36 kB (36175 bytes)
Hash
c342bca9945376d42f20a98fec914c18
2739d086062a057ed099c6843132fadba8e0576a
dd96d43213a721f3f53fb57f03150446740802f945254e2822552249e4a2fb36

HTTP Headers

GET /movies/poster/midsommar-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 36175
last-modified: Fri, 29 Oct 2021 18:53:53 GMT
etag: "617c4341-8d4f"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iWNatOijFwjuTDaJ3D2u8cuGsWzbseweISU9khK49UUkooqg8kDn5aFVay8w%2BMI3TEd%2BFKpasflTIvwB55wO5ztOTFkSc7JGfENObrlg%2FA72K3IgZKZ6l9wRxu0B0yNE9U9Jxtk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee198c56bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/for-we-are-many-2019.jpg?v=1

104.21.69.3

200 OK

45 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/for-we-are-many-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
45 kB (45152 bytes)
Hash
4132e306441017f6f8f26943caf9a54e
a06673a815d3ea4fb229f66384d38cd3654434f6
1335a3ab64219eab39093a7a9298baa7de80fd0c715710d93f4d6158e055c895

HTTP Headers

GET /movies/poster/for-we-are-many-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 45152
last-modified: Fri, 29 Oct 2021 14:52:49 GMT
etag: "617c0ac1-b060"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IGkpkwoJI5PR6uQJN9fPb4RoXecB0aRyoGjpxGrAgtX9PR8Y2B1u2OccU%2BtTgLZti2z1voxlyqMhoqy7LJwo6h2cTeFT2mivPnZweu4qxTD%2FQ%2F%2BeQ324UMkmIIr01EjrHVfJKKk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee39ba56bf-OSL
alt-svc: h3=":443"; ma=86400

growingcastselling.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js

172.240.127.234

200 OK

16 kB

URL GET HTTP/1.1
growingcastselling.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js
IP
172.240.127.234:443
ASN
#7979 SERVERS-COM

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectgrowingcastselling.com
Fingerprint3E:B6:D3:62:BC:57:AD:19:9E:FA:67:C4:B3:FA:10:7C:98:4A:71:2B
ValidityThu, 18 Apr 2024 13:01:11 GMT - Wed, 17 Jul 2024 13:01:10 GMT

File type
JavaScript source, ASCII text, with very long lines (44084), with no line terminators
Size
16 kB (15801 bytes)
Hash
b6abfb37eb67072649a69e4392b076a5
388f1ab220d9b29b3b1ec903f24393af7defa263
54109ead00b1155231a91881e92a574a6c36f5bf40f05938cecd0f941f6f2804

HTTP Headers

GET /0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js HTTP/1.1
Host: growingcastselling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 15:59:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 62a4a1af9ca6b4bd9c1649efbde20603
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

growingcastselling.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js

172.240.127.234

200 OK

31 kB

URL GET HTTP/1.1
growingcastselling.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js
IP
172.240.127.234:443
ASN
#7979 SERVERS-COM

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectgrowingcastselling.com
Fingerprint3E:B6:D3:62:BC:57:AD:19:9E:FA:67:C4:B3:FA:10:7C:98:4A:71:2B
ValidityThu, 18 Apr 2024 13:01:11 GMT - Wed, 17 Jul 2024 13:01:10 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
31 kB (31071 bytes)
Hash
b1863c733b6066bb3b0199f1e83ad3b3
d1a7c227b3f9953c0101ce16f58b0cde633b28d1
9249f63313aec2ba9b0369888d77ffefbd16f76f29e88e475de5b0bc6c478f65

HTTP Headers

GET /b1/27/0e/b1270e96b85c3dd200807d09a940c676.js HTTP/1.1
Host: growingcastselling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 15:59:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-2931_layer=0; expires=Sat, 27 Apr 2024 15:59:26 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9bbec713d6f0c2556ceaafce239b4e8e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

proftrafficcounter.com/stats

18.185.247.192

200 OK

40 B

URL GET HTTP/2
proftrafficcounter.com/stats
IP
18.185.247.192:443
ASN
#16509 AMAZON-02

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
381335c15094ac06e737ba02a9b298a9
7afbeed181b8b72e012c47098c935eb276143908
47c37a46d8972dcbe98395735b38e7b210495c61aab31cfc9edee1ba101662ee

HTTP Headers

GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:59:27 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://en.yts-official.mx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=f18d50e8-2534-44c2-adf8-e21d50631e92:1:1; expires=Sat, 22 Apr 2034 15:59:27 GMT; secure; SameSite=None
X-Firefox-Spdy: h2

proftrafficcounter.com/stats

18.185.247.192

200 OK

40 B

URL GET HTTP/2
proftrafficcounter.com/stats
IP
18.185.247.192:443
ASN
#16509 AMAZON-02

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
1cd0b018f36c493413af8e4aeaf62e8a
a3406bd15a34b2cd23ce07a3b3bc29028ea1ce5e
6f96d47966e149a4ef6f7dc20cc375fa4f3ed3dbccdcc55c9e71793d9aa3b75d

HTTP Headers

GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:59:27 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://en.yts-official.mx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=40ccad1c-c88e-4e9b-97de-bdbc2aefdf9c:1:1; expires=Sat, 22 Apr 2034 15:59:27 GMT; secure; SameSite=None
X-Firefox-Spdy: h2

postthieve.com/pixel/purst?dl=0&th=0&sc=0&rs=1027&rd=1027&fd=674&bv=24.4.4887&tmpl=70

192.243.59.12

200 OK

0 B

URL GET HTTP/1.1
postthieve.com/pixel/purst?dl=0&th=0&sc=0&rs=1027&rd=1027&fd=674&bv=24.4.4887&tmpl=70
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectpostthieve.com
Fingerprint4C:B5:73:17:36:A5:52:8C:0D:CC:8E:C4:1B:A3:F7:CC:16:70:06:41
ValidityTue, 23 Apr 2024 10:57:03 GMT - Mon, 22 Jul 2024 10:57:02 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pixel/purst?dl=0&th=0&sc=0&rs=1027&rd=1027&fd=674&bv=24.4.4887&tmpl=70 HTTP/1.1
Host: postthieve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 15:59:27 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png

104.21.69.3

200 OK

7.0 kB

URL GET HTTP/3
en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced
Size
7.0 kB (6973 bytes)
Hash
f87afcf11d459620ff02da6112365db2
d09e6d4e7db706569474bfb7ec93f31ccbd6ed69
a70913fad67537f16d871e4c456c8f4484106f6d4ef3e12fa3c3b2eceefee508

HTTP Headers

GET /static/yts/image/apple-touch-icon-180x180.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=40ccad1c-c88e-4e9b-97de-bdbc2aefdf9c%3A1%3A1; pp_main_b1270e96b85c3dd200807d09a940c676=1; sb_page_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_onpage_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_main_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_count_0a2f9bfefa2d59b6782f748beec9f30e=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:27 GMT
content-type: image/png
content-length: 6973
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-1b3d"
expires: Mon, 20 May 2024 16:27:29 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 343917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H4%2BrNa4yZUY21Nijvajoy8RP13BThZ6cj1p0yVxWH5TsZ%2B%2BaQmoYFyEttCjDylpGCGLzOeoDTE%2FTMr0ke9ZYhjRhsjru25Hlm4KvtvCcwLaUSyRUwSVdybNOVKmtxZ%2FH9Z5T5Pg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cf6abbe56bf-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/static/yts/image/favicon-16x16.png

104.21.69.3

200 OK

619 B

URL GET HTTP/3
en.yts-official.mx/static/yts/image/favicon-16x16.png
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Size
619 B (619 bytes)
Hash
ea830fdd4f9a6d19aa7455dabdac987a
b0d567d6b4d40959e1bd44032f6bc2331057b319
71148160c085a70d1af7708c1d52cfcf39f8ef6e4ce13f0f20c080b2e19195db

HTTP Headers

GET /static/yts/image/favicon-16x16.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=40ccad1c-c88e-4e9b-97de-bdbc2aefdf9c%3A1%3A1; pp_main_b1270e96b85c3dd200807d09a940c676=1; sb_page_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_onpage_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_main_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_count_0a2f9bfefa2d59b6782f748beec9f30e=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:27 GMT
content-type: image/png
content-length: 619
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-26b"
expires: Mon, 20 May 2024 20:01:08 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 331099
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lk38C1I7mbCy3iaw6neXeuy5LxudOIJMQyAkqW0uUkcI%2BvAATzqVXvHjvpDienryW%2FN9leNrRRva%2Fru6WIT03yeQ4Il%2FCeOvPEcuml1muhqHAgFpeZmj6KHsE4A3vXuMUMMNw00%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cf6abc056bf-OSL
alt-svc: h3=":443"; ma=86400

downstairsnegotiatebarren.com/sfp.js

172.67.180.87

200 OK

28 kB

URL GET HTTP/2
downstairsnegotiatebarren.com/sfp.js
IP
172.67.180.87:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectdownstairsnegotiatebarren.com
Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44
ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size
28 kB (27461 bytes)
Hash
f4a2f8f9f99541c6f105bbd0a025bd40
1f8e3eff12168fdd9e719adfc098d24a45b6916a
b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716

HTTP Headers

GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:59:27 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 848714d5596431d3316d7aacd5542117
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 24 Apr 2024 15:59:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kbvmLgvkC%2FS5P9E995Ei%2B8qilOxvZVksypYl0hGYhdO7kBGiyFnbm%2FAeJFRAG9hO%2F8nLhxCQT899at%2BBNy5F3qx%2F%2FGQjik8%2FwCQPApq%2F5asLvVgcivx3cB%2FbhUf1bzw9uhZjcFe8PcHBbDD500ysHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cf25ba7b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

downstairsnegotiatebarren.com/sfp.js

172.67.180.87

200 OK

28 kB

URL GET HTTP/2
downstairsnegotiatebarren.com/sfp.js
IP
172.67.180.87:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectdownstairsnegotiatebarren.com
Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44
ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size
28 kB (27964 bytes)
Hash
f4a2f8f9f99541c6f105bbd0a025bd40
1f8e3eff12168fdd9e719adfc098d24a45b6916a
b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716

HTTP Headers

GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:59:27 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 1d0037a85e349c467a9b8b03a1a380cb
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 24 Apr 2024 15:59:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yvWIcmjqTd2sk%2BB1KRdwv9wld6fPbk11wEwrJDz8rRofOJsoX1LaZ605kusujvFa4ToFaLsJrzsycguvbWS5Y4Z4dAcHgz2C%2BFNF9MmwRzqyx32f71a4yPKE8E7CpbbR2DMfRkD%2BXwUXCAbEKE7t%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cf26baeb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

waterfallchequeomnipotent.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=f18d50e8-2534-44c2-adf8-e21d50631e92%3A1%3A1

192.243.59.20

200 OK

8.3 kB

URL GET HTTP/1.1
waterfallchequeomnipotent.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=f18d50e8-2534-44c2-adf8-e21d50631e92%3A1%3A1
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectwaterfallchequeomnipotent.com
Fingerprint10:02:FD:E1:42:43:0C:C7:37:B0:94:C6:F9:9A:80:1F:38:80:C0:6E
ValidityTue, 23 Apr 2024 10:44:53 GMT - Mon, 22 Jul 2024 10:44:52 GMT

File type
JSON text data
Size
8.3 kB (8302 bytes)
Hash
556972b24fd59305e311ed70ff302686
3d442960cde837c4bc2fb0c1c81a1b78880e7dee
6f9fe0a93614c57925108699c890fbd6d25d511e75e4f5f24144097b577c90e4

HTTP Headers

GET /sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=f18d50e8-2534-44c2-adf8-e21d50631e92%3A1%3A1 HTTP/1.1
Host: waterfallchequeomnipotent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 15:59:28 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://en.yts-official.mx
Access-Control-Allow-Origin: https://en.yts-official.mx
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16587847; expires=Thu, 25 Apr 2024 15:59:27 GMT; secure; SameSite=None
uid_id2=f18d50e8-2534-44c2-adf8-e21d50631e92:1:1; expires=Wed, 01 May 2024 15:59:27 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 25 Apr 2024 15:59:28 GMT; secure; SameSite=None
uncs=1; expires=Thu, 25 Apr 2024 15:59:28 GMT; secure; SameSite=None
pdhtkv29=true; expires=Thu, 25 Apr 2024 15:59:28 GMT; secure; SameSite=None
uncs29=1; expires=Thu, 25 Apr 2024 15:59:28 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8585e8387ebc725ffbd64dc006365441
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

en.yts-official.mx/static/yts/style/minified.css

104.21.69.3

200 OK

30 kB

URL GET HTTP/3
en.yts-official.mx/static/yts/style/minified.css
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
ASCII text, with very long lines (57475)
Size
30 kB (30211 bytes)
Hash
a314b10e99529c56373ebff456f96618
89369052969ff4793a3c290593b5ded5d2d3e6d7
e043e009630de7fdb24141cd7e788e91a7978880af7730e0f8f97bf41c2cd549

HTTP Headers

GET /static/yts/style/minified.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 08:38:28 GMT
vary: Accept-Encoding
etag: W/"65d31384-1d423"
expires: Wed, 24 Apr 2024 23:03:14 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 17772
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j0D8RagNhaF6uTdjO1k48%2B30nhZlz5ZF3nkTcRezASEJQaDdhmPXY3pVUK%2BX12eq5zsRbaRAWYnxAGO09tIeaqszhccOa74zeD%2B3aQiXqK73OF0fWxw8y%2FM4yg8Vh0RfrPm%2FSD8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87974cee198156bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

waterfallchequeomnipotent.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxReuzuZ3%2BoGg7EFZhTl42IXNpLtnpmfGPSzGmCUaN2F3RW9a3VU9KVPd1VR1TU9yCi7IHkcvXjvfJBvURXavgot0FjwEhIynHMzF%2F0Bhb4rMODj6oOq9V98r6ntfvc8O7AXxYen56ntqT0hJl1t1t3b1Q8%2B7UdsQqR3UBp3go6B5o6b7b3SDunutdotHO2rZdz3X9VyvtiY0j9VgeQJCZI%2B6Xr3r1pt%2B3Ws1MdD%2FzY11YKgD1r8gL0Gw8eIz5zJEVCFNHq9ys5Or7PrbiZU0Vxp9dvx%2BupOqIkUyD2PtIE6PZ9VQ5mztKVR6NKUL1f%2BnMBRj4vz4FGF6PCOJsH845RlK8BQh%2Bz%2BKfgUuKwhaIVL3IdgZASKG25tIk4e3lS7o7t8onaBjsvj8d4hiTBZ%2FuYw0%2BXZFikHtrpI2Fyo1GMQlxKCC6FXI7AnyvQWI4gRR%2FikE%2B4ksP99AmhxuGqkg2PnrsddhLZd3lvxWo7nUbEb%2BEmVxZ4n7Hmu5QcPjXX8qkBAVRFxB8iGocWAnSziwsQObOUjYeS3yPK%2Ftsoi6nW4UNVibhwFzPdqOPeq5QQc2mvQwRJ4NEckhIr2PTO9jR3x%2B1noH2v4As13CMAcmJ%2BizEgUnKAxBQQkKQVDkBEW%2FPGLS%2BKZ8yKSxoTfz%2Fsw3ypHKewf0SOU9nhJQPYRm5UF2QV6cavjHq7eww89rLvXjbhjzmPqs1Q2DdseP281OyHnUjRsuhxElhFmYdrwnxuSV9ZeRiTH535d%2FIqQnMPIEkXBA7WugRQm6XWIvPd7NTV2lHEyVyPJF5LvOgbwgV6aPr28%2BAY9Ob%2F7amBoiXSLTJT4Rzwh68sHojirI4R1VGPJkM8tFIvbo5HPv5jTnl75%2Bl%2B8WSrP1VTP86s1oAkzCR%2Fe4yTdoykTaM%2BSbFcEY12tKR5x8v24%2B4OGWNdsrVqc229h6a209yTQ3Rqi0Ap3M6W8akRiTF67cm87t1e%2B2IHQFbUsk9pTMDEJViLJ9mGzO3ygCLec1YeagsOVI%2B%2BH8UAoCyec5DUuYf%2BXhPB5pOrlNRXlgHqCnF0Dz%2B0iTEn1doi9LUDmEsZdGeaZPb%2F48oxHKhVEo9cJhKLX8YirzZHsMI85r7UbDpUG35bXblLfDpt%2BJA49R6jcDPwhoA7kZx9euf%2FwXAAAA%2F%2F8BAAD%2F%2F20ZvwSRBAAA

192.243.59.20

200 OK

7 B

URL GET HTTP/1.1
waterfallchequeomnipotent.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxReuzuZ3%2BoGg7EFZhTl42IXNpLtnpmfGPSzGmCUaN2F3RW9a3VU9KVPd1VR1TU9yCi7IHkcvXjvfJBvURXavgot0FjwEhIynHMzF%2F0Bhb4rMODj6oOq9V98r6ntfvc8O7AXxYen56ntqT0hJl1t1t3b1Q8%2B7UdsQqR3UBp3go6B5o6b7b3SDunutdotHO2rZdz3X9VyvtiY0j9VgeQJCZI%2B6Xr3r1pt%2B3Ws1MdD%2FzY11YKgD1r8gL0Gw8eIz5zJEVCFNHq9ys5Or7PrbiZU0Vxp9dvx%2BupOqIkUyD2PtIE6PZ9VQ5mztKVR6NKUL1f%2BnMBRj4vz4FGF6PCOJsH845RlK8BQh%2Bz%2BKfgUuKwhaIVL3IdgZASKG25tIk4e3lS7o7t8onaBjsvj8d4hiTBZ%2FuYw0%2BXZFikHtrpI2Fyo1GMQlxKCC6FXI7AnyvQWI4gRR%2FikE%2B4ksP99AmhxuGqkg2PnrsddhLZd3lvxWo7nUbEb%2BEmVxZ4n7Hmu5QcPjXX8qkBAVRFxB8iGocWAnSziwsQObOUjYeS3yPK%2Ftsoi6nW4UNVibhwFzPdqOPeq5QQc2mvQwRJ4NEckhIr2PTO9jR3x%2B1noH2v4As13CMAcmJ%2BizEgUnKAxBQQkKQVDkBEW%2FPGLS%2BKZ8yKSxoTfz%2Fsw3ypHKewf0SOU9nhJQPYRm5UF2QV6cavjHq7eww89rLvXjbhjzmPqs1Q2DdseP281OyHnUjRsuhxElhFmYdrwnxuSV9ZeRiTH535d%2FIqQnMPIEkXBA7WugRQm6XWIvPd7NTV2lHEyVyPJF5LvOgbwgV6aPr28%2BAY9Ob%2F7amBoiXSLTJT4Rzwh68sHojirI4R1VGPJkM8tFIvbo5HPv5jTnl75%2Bl%2B8WSrP1VTP86s1oAkzCR%2Fe4yTdoykTaM%2BSbFcEY12tKR5x8v24%2B4OGWNdsrVqc229h6a209yTQ3Rqi0Ap3M6W8akRiTF67cm87t1e%2B2IHQFbUsk9pTMDEJViLJ9mGzO3ygCLec1YeagsOVI%2B%2BH8UAoCyec5DUuYf%2BXhPB5pOrlNRXlgHqCnF0Dz%2B0iTEn1doi9LUDmEsZdGeaZPb%2F48oxHKhVEo9cJhKLX8YirzZHsMI85r7UbDpUG35bXblLfDpt%2BJA49R6jcDPwhoA7kZx9euf%2FwXAAAA%2F%2F8BAAD%2F%2F20ZvwSRBAAA
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectwaterfallchequeomnipotent.com
Fingerprint10:02:FD:E1:42:43:0C:C7:37:B0:94:C6:F9:9A:80:1F:38:80:C0:6E
ValidityTue, 23 Apr 2024 10:44:53 GMT - Mon, 22 Jul 2024 10:44:52 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

HTTP Headers

GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxReuzuZ3%2BoGg7EFZhTl42IXNpLtnpmfGPSzGmCUaN2F3RW9a3VU9KVPd1VR1TU9yCi7IHkcvXjvfJBvURXavgot0FjwEhIynHMzF%2F0Bhb4rMODj6oOq9V98r6ntfvc8O7AXxYen56ntqT0hJl1t1t3b1Q8%2B7UdsQqR3UBp3go6B5o6b7b3SDunutdotHO2rZdz3X9VyvtiY0j9VgeQJCZI%2B6Xr3r1pt%2B3Ws1MdD%2FzY11YKgD1r8gL0Gw8eIz5zJEVCFNHq9ys5Or7PrbiZU0Vxp9dvx%2BupOqIkUyD2PtIE6PZ9VQ5mztKVR6NKUL1f%2BnMBRj4vz4FGF6PCOJsH845RlK8BQh%2Bz%2BKfgUuKwhaIVL3IdgZASKG25tIk4e3lS7o7t8onaBjsvj8d4hiTBZ%2FuYw0%2BXZFikHtrpI2Fyo1GMQlxKCC6FXI7AnyvQWI4gRR%2FikE%2B4ksP99AmhxuGqkg2PnrsddhLZd3lvxWo7nUbEb%2BEmVxZ4n7Hmu5QcPjXX8qkBAVRFxB8iGocWAnSziwsQObOUjYeS3yPK%2Ftsoi6nW4UNVibhwFzPdqOPeq5QQc2mvQwRJ4NEckhIr2PTO9jR3x%2B1noH2v4As13CMAcmJ%2BizEgUnKAxBQQkKQVDkBEW%2FPGLS%2BKZ8yKSxoTfz%2Fsw3ypHKewf0SOU9nhJQPYRm5UF2QV6cavjHq7eww89rLvXjbhjzmPqs1Q2DdseP281OyHnUjRsuhxElhFmYdrwnxuSV9ZeRiTH535d%2FIqQnMPIEkXBA7WugRQm6XWIvPd7NTV2lHEyVyPJF5LvOgbwgV6aPr28%2BAY9Ob%2F7amBoiXSLTJT4Rzwh68sHojirI4R1VGPJkM8tFIvbo5HPv5jTnl75%2Bl%2B8WSrP1VTP86s1oAkzCR%2Fe4yTdoykTaM%2BSbFcEY12tKR5x8v24%2B4OGWNdsrVqc229h6a209yTQ3Rqi0Ap3M6W8akRiTF67cm87t1e%2B2IHQFbUsk9pTMDEJViLJ9mGzO3ygCLec1YeagsOVI%2B%2BH8UAoCyec5DUuYf%2BXhPB5pOrlNRXlgHqCnF0Dz%2B0iTEn1doi9LUDmEsZdGeaZPb%2F48oxHKhVEo9cJhKLX8YirzZHsMI85r7UbDpUG35bXblLfDpt%2BJA49R6jcDPwhoA7kZx9euf%2FwXAAAA%2F%2F8BAAD%2F%2F20ZvwSRBAAA HTTP/1.1
Host: waterfallchequeomnipotent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=f18d50e8-2534-44c2-adf8-e21d50631e92:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 15:59:28 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 014de50f1d81bf3b2679987dd9aad1dc
Strict-Transport-Security: max-age=0; includeSubdomains

waterfallchequeomnipotent.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html&l=1325&fd=105

192.243.59.20

200 OK

0 B

URL GET HTTP/1.1
waterfallchequeomnipotent.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html&l=1325&fd=105
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectwaterfallchequeomnipotent.com
Fingerprint10:02:FD:E1:42:43:0C:C7:37:B0:94:C6:F9:9A:80:1F:38:80:C0:6E
ValidityTue, 23 Apr 2024 10:44:53 GMT - Mon, 22 Jul 2024 10:44:52 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html&l=1325&fd=105 HTTP/1.1
Host: waterfallchequeomnipotent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=f18d50e8-2534-44c2-adf8-e21d50631e92:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 15:59:28 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/img/close.png

188.114.97.1

200 OK

591 B

URL GET HTTP/3
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/img/close.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced
Size
591 B (591 bytes)
Hash
9fd5bcb6103d86e317bd1eb019bcbe71
6b5a52ea669dcb74946f2bed4bdd7ec985026113
0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae

HTTP Headers

GET /sb/ssp/vpn/classic-push/small/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:28 GMT
content-type: image/png
content-length: 591
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: "65aa84fe-24f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 6058461
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n8dpSydAn6vGXLEHEeoIODTW6KxARXD0HGqVDFli9Vhz8q%2BXJbZp%2BTYuvDdrzqCT6dlSnEnw87cJ7l7l8lxUKFQvZ2GF9PIEjnXRTVsrxxEHLj5S2Dh%2FfPXAXd5MmSqZM1Nt4d5Ikl5A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cfa792656b5-OSL
alt-svc: h3=":443"; ma=86400

cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/animate.css

188.114.97.1

200 OK

4.9 kB

URL GET HTTP/2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/animate.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
ASCII text
Size
4.9 kB (4869 bytes)
Hash
3d4123dbfb33d27a5cfdfcfa91df6783
e7d0eeeec54b848f0bc3da8685fa3bc88429d660
cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887

HTTP Headers

GET /sb/ssp/vpn/classic-push/small/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:59:28 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-13361"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 561765
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EIjAOTpyRq5NL%2F7RlVlzrdcfc71lQon%2BpAQr6%2FAAbQwb77tdi1Iuxtwyld1EMM7E35dFil%2BlvI8At0Dyv2njelLvu9i1imTrLxXJjfzT%2FlKkRrR3166zbOg%2FHgtAKfRAwVv%2BJgzOQu6S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cf9fc4256b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

unseenreport.com/pxf.gif?uuid=40ccad1c-c88e-4e9b-97de-bdbc2aefdf9c&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15

192.243.59.12

200 OK

1 B

URL GET HTTP/1.1
unseenreport.com/pxf.gif?uuid=40ccad1c-c88e-4e9b-97de-bdbc2aefdf9c&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13
ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pxf.gif?uuid=40ccad1c-c88e-4e9b-97de-bdbc2aefdf9c&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 15:59:28 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2de742990d05b5eb8a3fc09c2cb9fff9
Strict-Transport-Security: max-age=0; includeSubdomains

unseenreport.com/pxf.gif?uuid=40ccad1c-c88e-4e9b-97de-bdbc2aefdf9c&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15

192.243.59.12

200 OK

1 B

URL GET HTTP/1.1
unseenreport.com/pxf.gif?uuid=40ccad1c-c88e-4e9b-97de-bdbc2aefdf9c&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13
ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pxf.gif?uuid=40ccad1c-c88e-4e9b-97de-bdbc2aefdf9c&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 15:59:28 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3eaf62e9d5c4d0a00e2690bafa898381
Strict-Transport-Security: max-age=0; includeSubdomains

cdn.cloudimagesb.com/si/07/9c/1b/079c1b9b48633e3ef398faef0739f24f/1701651986.png

45.133.44.9

200 OK

16 kB

URL GET HTTP/2
cdn.cloudimagesb.com/si/07/9c/1b/079c1b9b48633e3ef398faef0739f24f/1701651986.png
IP
45.133.44.9:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0
ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
16 kB (16093 bytes)
Hash
14cf262fabfd850855c42847d14fe775
2fafa28f167f018a0fb1f261f47380c8810803c9
972004ebada4077c3a4d03dcb45175ea467faf54da72be727a1c5c75e688b8af

HTTP Headers

GET /si/07/9c/1b/079c1b9b48633e3ef398faef0739f24f/1701651986.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:59:28 GMT
content-type: image/png
content-length: 16093
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:06:35 GMT
etag: "656d261b-3edd"
expires: Fri, 26 Apr 2024 15:59:28 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:54:31 GMT
expires: Wed, 23 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 137097
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js

188.114.97.1

200 OK

31 kB

URL GET HTTP/3
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
JavaScript source, ASCII text, with very long lines (32025)
Size
31 kB (30953 bytes)
Hash
4a356126b9573eb7bd1e9a7494737410
8258d046f17dd3c15a5d3984e1868b7b5d1db329
22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5

HTTP Headers

GET /sb/ssp/vpn/classic-push/small/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:28 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-1499c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 6058462
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uvi5pxsCmQCAHE70DAv%2BOyLJNKq2EmwDtFgcKJnskazy7kv4iGuOCxRyzdelI1YX4Sune9b7aHaG0QgDjtNRVOQG7H2Jh4QyYPYHmpvnVQIFoUPqsSezJxk0Y9rsctOOlxLOVSsEVrBz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cfa792b56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 84710
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

waterfallchequeomnipotent.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css&l=78689&fd=63

192.243.61.225

200 OK

0 B

URL GET HTTP/1.1
waterfallchequeomnipotent.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css&l=78689&fd=63
IP
192.243.61.225:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectwaterfallchequeomnipotent.com
Fingerprint10:02:FD:E1:42:43:0C:C7:37:B0:94:C6:F9:9A:80:1F:38:80:C0:6E
ValidityTue, 23 Apr 2024 10:44:53 GMT - Mon, 22 Jul 2024 10:44:52 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css&l=78689&fd=63 HTTP/1.1
Host: waterfallchequeomnipotent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=f18d50e8-2534-44c2-adf8-e21d50631e92:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 15:59:28 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

waterfallchequeomnipotent.com/pixel/sbs?c=1

192.243.61.225

200 OK

0 B

URL GET HTTP/1.1
waterfallchequeomnipotent.com/pixel/sbs?c=1
IP
192.243.61.225:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectwaterfallchequeomnipotent.com
Fingerprint10:02:FD:E1:42:43:0C:C7:37:B0:94:C6:F9:9A:80:1F:38:80:C0:6E
ValidityTue, 23 Apr 2024 10:44:53 GMT - Mon, 22 Jul 2024 10:44:52 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pixel/sbs?c=1 HTTP/1.1
Host: waterfallchequeomnipotent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=f18d50e8-2534-44c2-adf8-e21d50631e92:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 15:59:28 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

waterfallchequeomnipotent.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skxRevzuZ7%2BoKg7EFZhTl42IXNpLvnt3tYjDFLNG7C7oretH71pExNV1PVPT3JKbggexy9eO18JtmgLrJ7FVyks%2BAhIGQ85WAu%2FgcKe1NkxsHRB1Xvvfq8oj7vU%2B%2Bzg%2ByChMjo%2Bep7Zk9pTZcbVb9y9cMguFHZUHE2qAzazY%2Ba9RsV23%2Bj06z61yq3JN8xy6Ef%2BH7gB5U1ZWVkBssTECp51AmqHb9aD6tBo46B%2FW%2FuMg%2BOehD9C%2FISlBgvPvMuQ%2FESce%2FxqnQ7qUmuv93LNE2NRV8cvx%2FvxCaP0ZuHkfUQxcezahh3tvYUJj6a0oXp%2F1PI1Jh4Pz4Fi49nJMH6h1OeTEPGYOL%2FyPslpC6haAlu7kOJMwJwgdubiHsPbxub092%2FUTpBx2Tx%2Be9Q%2BZgs%2FnIZce%2FbFa0GlbtGZ6kyscMgKqAGJVS3RJKdIN1bgMpPwNNPocRPZPn5BuLe4abTBkqcvx4FbdHwZXspbNTqS%2FU6D5eoiNpLMgxEw2%2FWAtkJpwIpVUJFJbQcgjoP2WQpD1nkIUs89MR5hQdB0PIFp367w3lNtCRrCj%2BgrSiggd9sI%2BOTHoZIkyG4HoLbfSR2Hzvq87PGO7DZD3DbBZzw4FKCviiQS4LcEeSUIFcEeUqQ94sjoV3oiodCu4wFMx%2FOfK0YmbR7QI9M2pUxAbVDWFEcJBfkxamGf7x6CzvyvOLTMOqwSEY0FI0Oa7baYdSqt5mUvBPVfAmnCii3MO14T43JK%2BsvI1Fj8r8v%2FwSjJ3D6BFx5oNlroHkBul1gLz7eTV3VxBLCFEjSRaS73oG%2BIFemj69vPoHkpzd%2FrU0N3BZIbIFP1DOCrn4wumNycnjH5I482UxS1VN7dPK5d1Oayktfvyt3c2PF%2BqobfvUmnwCT8NE96dINGgsVdx35ZkUJIe2asVyS79fdB5JtZW57JbNxlmxsvbW23kusdE6ZuASdzOlvFlyNyQtX7k3n9up3W1C2hM0K9LJTMjMoU4In%2B3DJnL8zBFbPa1jiIc%2BKkQ3Z%2FFArAi3nOWUF3L9yNo9Hlk5uU1UcuAfo2gXQ9D7iXoG%2BLdDXBagewmWXRmliT2%2F%2BPKPB9MKIabtwyLTVX0xlnmyP4dR5peaLFpORbDFZb9QjyQVrNJjPI85qot3mSN04unb9478AAAD%2F%2FwEAAP%2F%2F7c1q7JEEAAA%3D

192.243.59.20

200 OK

7 B

URL GET HTTP/1.1
waterfallchequeomnipotent.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skxRevzuZ7%2BoKg7EFZhTl42IXNpLvnt3tYjDFLNG7C7oretH71pExNV1PVPT3JKbggexy9eO18JtmgLrJ7FVyks%2BAhIGQ85WAu%2FgcKe1NkxsHRB1Xvvfq8oj7vU%2B%2Bzg%2ByChMjo%2Bep7Zk9pTZcbVb9y9cMguFHZUHE2qAzazY%2Ba9RsV23%2Bj06z61yq3JN8xy6Ef%2BH7gB5U1ZWVkBssTECp51AmqHb9aD6tBo46B%2FW%2FuMg%2BOehD9C%2FISlBgvPvMuQ%2FESce%2FxqnQ7qUmuv93LNE2NRV8cvx%2FvxCaP0ZuHkfUQxcezahh3tvYUJj6a0oXp%2F1PI1Jh4Pz4Fi49nJMH6h1OeTEPGYOL%2FyPslpC6haAlu7kOJMwJwgdubiHsPbxub092%2FUTpBx2Tx%2Be9Q%2BZgs%2FnIZce%2FbFa0GlbtGZ6kyscMgKqAGJVS3RJKdIN1bgMpPwNNPocRPZPn5BuLe4abTBkqcvx4FbdHwZXspbNTqS%2FU6D5eoiNpLMgxEw2%2FWAtkJpwIpVUJFJbQcgjoP2WQpD1nkIUs89MR5hQdB0PIFp367w3lNtCRrCj%2BgrSiggd9sI%2BOTHoZIkyG4HoLbfSR2Hzvq87PGO7DZD3DbBZzw4FKCviiQS4LcEeSUIFcEeUqQ94sjoV3oiodCu4wFMx%2FOfK0YmbR7QI9M2pUxAbVDWFEcJBfkxamGf7x6CzvyvOLTMOqwSEY0FI0Oa7baYdSqt5mUvBPVfAmnCii3MO14T43JK%2BsvI1Fj8r8v%2FwSjJ3D6BFx5oNlroHkBul1gLz7eTV3VxBLCFEjSRaS73oG%2BIFemj69vPoHkpzd%2FrU0N3BZIbIFP1DOCrn4wumNycnjH5I482UxS1VN7dPK5d1Oayktfvyt3c2PF%2BqobfvUmnwCT8NE96dINGgsVdx35ZkUJIe2asVyS79fdB5JtZW57JbNxlmxsvbW23kusdE6ZuASdzOlvFlyNyQtX7k3n9up3W1C2hM0K9LJTMjMoU4In%2B3DJnL8zBFbPa1jiIc%2BKkQ3Z%2FFArAi3nOWUF3L9yNo9Hlk5uU1UcuAfo2gXQ9D7iXoG%2BLdDXBagewmWXRmliT2%2F%2BPKPB9MKIabtwyLTVX0xlnmyP4dR5peaLFpORbDFZb9QjyQVrNJjPI85qot3mSN04unb9478AAAD%2F%2FwEAAP%2F%2F7c1q7JEEAAA%3D
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectwaterfallchequeomnipotent.com
Fingerprint10:02:FD:E1:42:43:0C:C7:37:B0:94:C6:F9:9A:80:1F:38:80:C0:6E
ValidityTue, 23 Apr 2024 10:44:53 GMT - Mon, 22 Jul 2024 10:44:52 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

HTTP Headers

GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skxRevzuZ7%2BoKg7EFZhTl42IXNpLvnt3tYjDFLNG7C7oretH71pExNV1PVPT3JKbggexy9eO18JtmgLrJ7FVyks%2BAhIGQ85WAu%2FgcKe1NkxsHRB1Xvvfq8oj7vU%2B%2Bzg%2ByChMjo%2Bep7Zk9pTZcbVb9y9cMguFHZUHE2qAzazY%2Ba9RsV23%2Bj06z61yq3JN8xy6Ef%2BH7gB5U1ZWVkBssTECp51AmqHb9aD6tBo46B%2FW%2FuMg%2BOehD9C%2FISlBgvPvMuQ%2FESce%2FxqnQ7qUmuv93LNE2NRV8cvx%2FvxCaP0ZuHkfUQxcezahh3tvYUJj6a0oXp%2F1PI1Jh4Pz4Fi49nJMH6h1OeTEPGYOL%2FyPslpC6haAlu7kOJMwJwgdubiHsPbxub092%2FUTpBx2Tx%2Be9Q%2BZgs%2FnIZce%2FbFa0GlbtGZ6kyscMgKqAGJVS3RJKdIN1bgMpPwNNPocRPZPn5BuLe4abTBkqcvx4FbdHwZXspbNTqS%2FU6D5eoiNpLMgxEw2%2FWAtkJpwIpVUJFJbQcgjoP2WQpD1nkIUs89MR5hQdB0PIFp367w3lNtCRrCj%2BgrSiggd9sI%2BOTHoZIkyG4HoLbfSR2Hzvq87PGO7DZD3DbBZzw4FKCviiQS4LcEeSUIFcEeUqQ94sjoV3oiodCu4wFMx%2FOfK0YmbR7QI9M2pUxAbVDWFEcJBfkxamGf7x6CzvyvOLTMOqwSEY0FI0Oa7baYdSqt5mUvBPVfAmnCii3MO14T43JK%2BsvI1Fj8r8v%2FwSjJ3D6BFx5oNlroHkBul1gLz7eTV3VxBLCFEjSRaS73oG%2BIFemj69vPoHkpzd%2FrU0N3BZIbIFP1DOCrn4wumNycnjH5I482UxS1VN7dPK5d1Oayktfvyt3c2PF%2BqobfvUmnwCT8NE96dINGgsVdx35ZkUJIe2asVyS79fdB5JtZW57JbNxlmxsvbW23kusdE6ZuASdzOlvFlyNyQtX7k3n9up3W1C2hM0K9LJTMjMoU4In%2B3DJnL8zBFbPa1jiIc%2BKkQ3Z%2FFArAi3nOWUF3L9yNo9Hlk5uU1UcuAfo2gXQ9D7iXoG%2BLdDXBagewmWXRmliT2%2F%2BPKPB9MKIabtwyLTVX0xlnmyP4dR5peaLFpORbDFZb9QjyQVrNJjPI85qot3mSN04unb9478AAAD%2F%2FwEAAP%2F%2F7c1q7JEEAAA%3D HTTP/1.1
Host: waterfallchequeomnipotent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=f18d50e8-2534-44c2-adf8-e21d50631e92:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 15:59:28 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ebe073a886f1e0a7bebc1b70da679074
Strict-Transport-Security: max-age=0; includeSubdomains

en.yts-official.mx/static/yts/images/website/select-arrows.svg

104.21.69.3

200 OK

6.4 kB

URL GET HTTP/3
en.yts-official.mx/static/yts/images/website/select-arrows.svg
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
SVG Scalable Vector Graphics image
Size
6.4 kB (6405 bytes)
Hash
88be16e7ca0a244652429e056179d1ba
890121e5575a131b66e5fefde915c3be93d758b0
75d6d0bf20e8acc508018fd5f0b584c18c56db8eb96e0acd92a81b3603424421

HTTP Headers

GET /static/yts/images/website/select-arrows.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-267"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3260
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cZu%2BQGXJh%2B5P99XHyRwVRiOG8nQHhrz%2BlWLBS2Imb%2Bdr2dVv82DYAyCMMbe4MLRQFKaENH2GTos97R1fBhZVfLn9QsM0b%2BxHfnB24v2m3teGNQkfhiV4SpoVPRIALenSaPNHyJs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cef0ac356bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/static/yts/fonts/fonts.css

104.21.69.3

200 OK

1.3 kB

URL GET HTTP/3
en.yts-official.mx/static/yts/fonts/fonts.css
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
ASCII text, with very long lines (1384), with no line terminators
Size
1.3 kB (1316 bytes)
Hash
0ea9baa4ec422b74a6cf6ef7cd998e7b
28edd12415ade93ae8ce77cc26054ec487d73508
a284eec07f7cc18bb397bffc2b34b52f8bacde6198dc1eaeef2924ac61190bb4

HTTP Headers

GET /static/yts/fonts/fonts.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-524"
expires: Wed, 24 Apr 2024 23:03:14 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 17772
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NpEQfTzwyKLP5C0tfEvJ7OhYkOMccUsEmTmfHfWUYyeYpiDKXE%2BHvxjwLcCH7O15UP0RqrEg0KDGosNsIUET97MMn7XkQ%2B6%2FGpHpoyJ9RYSZebXVJqPWwjz1m4n68T%2FABWDkGtM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87974cee097456bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/static/yts/image/logo-YTS.svg

104.21.69.3

200 OK

23 kB

URL GET HTTP/3
en.yts-official.mx/static/yts/image/logo-YTS.svg
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
SVG Scalable Vector Graphics image
Size
23 kB (23348 bytes)
Hash
fdd85bfbf80d872ea41b942cf21d1db9
6a2d54565cbffa3af342a63931e412ad8837f92d
2234cb288342eab0edfb65ebda4189cf47b40a4b639a25af62c57c03f7ace459

HTTP Headers

GET /static/yts/image/logo-YTS.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Feb 2024 02:51:28 GMT
etag: W/"65d413b0-5b34"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6794
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z7jbWIJ%2BOd5nHwwTG6ej0HwsFd4fTzwrFGfTzyOt%2FzJM9iyUkOxqiHfrb3AK5xD99Xb7UBJT0x80griBG3PFc1Cl%2FcoUI2CZW4HPE2QtjIBKHgMo64Mo7aEnPyk%2FUxGEhmf%2Bn%2B0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee198456bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

capaciousdrewreligion.com/advertisers.js

192.243.59.13

200 OK

0 B

URL GET HTTP/1.1
capaciousdrewreligion.com/advertisers.js
IP
192.243.59.13:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectcapaciousdrewreligion.com
Fingerprint53:B6:ED:C6:B5:B6:60:3E:6D:02:5A:92:2E:C3:12:74:64:A1:23:DC
ValidityWed, 06 Mar 2024 11:57:32 GMT - Tue, 04 Jun 2024 11:57:31 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 15:59:27 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b27276dd7ef34e5bd55378aca66ce9cf
Strict-Transport-Security: max-age=0; includeSubdomains

en.yts-official.mx/movies/poster/witches-in-the-woods-2019.jpg?v=1

104.21.69.3

200 OK

32 kB

URL GET HTTP/3
en.yts-official.mx/movies/poster/witches-in-the-woods-2019.jpg?v=1
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
32 kB (31719 bytes)
Hash
f9e94aba7657bcfd46c1c04d628b5176
5bf58bdfda4b56059703d37bbca8a0779b2f83ef
c37251cef8e0c8b1ac94876464478b64dcbad0e165bfda8799f95630501927d7

HTTP Headers

GET /movies/poster/witches-in-the-woods-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/jpeg
content-length: 31719
last-modified: Fri, 29 Oct 2021 18:53:55 GMT
etag: "617c4343-7be7"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V9nIfo%2FSOl7RJ0Z53wV7XDBN%2BjnuhCZLApgIk8LofQz1C41fPfaALL%2F4dzAELIMBezpyCJIWXk5dajgpVJHCb15qsj%2BQQvxYdNMYDTsGDI29DVsr%2BeDf%2FysfffqkzNQvtM5XnNg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cee198a56bf-OSL
alt-svc: h3=":443"; ma=86400

waterfallchequeomnipotent.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js&l=962&fd=14

192.243.61.225

200 OK

0 B

URL GET HTTP/1.1
waterfallchequeomnipotent.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js&l=962&fd=14
IP
192.243.61.225:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectwaterfallchequeomnipotent.com
Fingerprint10:02:FD:E1:42:43:0C:C7:37:B0:94:C6:F9:9A:80:1F:38:80:C0:6E
ValidityTue, 23 Apr 2024 10:44:53 GMT - Mon, 22 Jul 2024 10:44:52 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js&l=962&fd=14 HTTP/1.1
Host: waterfallchequeomnipotent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=f18d50e8-2534-44c2-adf8-e21d50631e92:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 15:59:28 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap

142.250.74.106

200 OK

7.0 kB

URL GET HTTP/3
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (7193), with no line terminators
Size
7.0 kB (7004 bytes)
Hash
16b49a99486594c0b42d9bd7821deb2c
2fb46e5e86d6b37d4497cc04bfd89b3cb33a276a
3f3540952441e06ef81189cf63d46bac242804e386779dbb0cdd78ed10025c21

HTTP Headers

GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:59:28 GMT
date: Wed, 24 Apr 2024 15:59:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

en.yts-official.mx/static/yts/images/website/icon-search.svg

104.21.69.3

200 OK

894 B

URL GET HTTP/3
en.yts-official.mx/static/yts/images/website/icon-search.svg
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
SVG Scalable Vector Graphics image
Size
894 B (894 bytes)
Hash
9caad64a555d10c835c1e121b53743b0
5db8cc1d36d939a65725c4869ebec8cc0b5ce9e3
fa70e1614aed8ae3b0463b4d9884de60fd528951a068e6a13a60a329ef93face

HTTP Headers

GET /static/yts/images/website/icon-search.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-37e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6546
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TF%2BY4Cb%2BV%2BOI5eDi1ccg5bCZ98NfzA5A3oz3UI8Tu%2BEDheI4sZLw1ZJgnqucWhHR9m7FhedHyMKarn1Di0L3DMGy%2BNisVLMGNBnU8ODmHTGdzeeqzC7yiZGEAaWS2vh6bgfHBuI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cef0ac256bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2

104.21.69.3

200 OK

3.6 kB

URL GET HTTP/3
en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2
IP
104.21.69.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
Web Open Font Format, CFF, length 3560, version 0.0
Size
3.6 kB (3560 bytes)
Hash
4e54891305c71736de2da03f14b57434
fbf29db32b5514cad7a908167ce63c76a91a2f12
332ec1d337a38ad421deff49f3585da56563253756da3870b26b46bd025f96e4

HTTP Headers

GET /static/yts/fonts/icomoon.woff?fmg7s2 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:26 GMT
content-type: font/woff
content-length: 3560
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: "65d2c88f-de8"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tTbsn01IHcZyeIsAcaURdO%2B3oBlaedSeWRhh4QOR6Kcam1riyhzymwsll7w1bk6rv349FG%2FYHX4sJJWyHncHvdjedHCdp8DV4kbYrMxICTz6xjqGIh0zmLeq%2FmtkunziHcz21Dc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cef0acc56bf-OSL
alt-svc: h3=":443"; ma=86400

cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/style.css

188.114.97.1

200 OK

3.4 kB

URL GET HTTP/2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/style.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
ASCII text, with very long lines (3537), with no line terminators
Size
3.4 kB (3355 bytes)
Hash
b8a277e051f047a41d3229377460f0c9
596b934114e1b6e3cee15ef19925c7f2ff5607e7
9cf981fe6d59b72cb9d12e4bc958983bac07f16b8f1b40bb1c6ced0bf2d6b2d0

HTTP Headers

GET /sb/ssp/vpn/classic-push/small/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:59:28 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-d1b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 561765
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w7SbEJAUgusvVXE07bSY1TANh8Geyz9Zs3Mvf%2B0nOiPTvLJfrppf6lTLXgdTlDAwKQQezNBJZOq8oP6G8IxoHlB5fs2Z0lhgQZ0mn6ygRAXQXrviXpK9%2FR4TNLKnnGfs392%2BirXxFVNA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cf9fc4456b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

waterfallchequeomnipotent.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css&l=3355&fd=63

192.243.59.20

200 OK

0 B

URL GET HTTP/1.1
waterfallchequeomnipotent.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css&l=3355&fd=63
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectwaterfallchequeomnipotent.com
Fingerprint10:02:FD:E1:42:43:0C:C7:37:B0:94:C6:F9:9A:80:1F:38:80:C0:6E
ValidityTue, 23 Apr 2024 10:44:53 GMT - Mon, 22 Jul 2024 10:44:52 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css&l=3355&fd=63 HTTP/1.1
Host: waterfallchequeomnipotent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=f18d50e8-2534-44c2-adf8-e21d50631e92:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 15:59:28 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/script.js

188.114.97.1

200 OK

962 B

URL GET HTTP/3
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/script.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
ASCII text, with very long lines (1015), with no line terminators
Size
962 B (962 bytes)
Hash
88523e22d10f0cbad31aa1d8276764fa
9238cd9499e01abdbeb33e68c550d26cfb6eaba5
d553390acb639c765cb6aaa4fbb72529e4005227d190f53108aec87ccec411c2

HTTP Headers

GET /sb/ssp/vpn/classic-push/small/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:59:28 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-3c2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 561763
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9sM%2BUYLv92xK%2BTkxsTn3VV5KUpeNNDv6220DhERJi6KDtuWGz6j03ZV40aZn%2BSj7mnOHXDmfLKM%2FJvTSqexr8klk%2FrII%2F908kNog85JWEW9QWFusrAMAp1rR2E1%2BfYH9wU%2Fes9UvkETp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87974cfab99c56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdn.barscreative1.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html

45.133.44.3

200 OK

1.3 kB

URL GET HTTP/2
cdn.barscreative1.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html
IP
45.133.44.3:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/browse-movies?genre=horror&keyword=ma&order_by=latest&page=4&quality=all&rating=0&year=2019
Certificate
IssuerLet's Encrypt
Subjectcdn.barscreative1.com
FingerprintF6:54:F4:B9:EB:AD:1E:FA:8F:76:B9:75:20:9B:41:57:32:37:94:E3
ValiditySun, 10 Mar 2024 03:01:32 GMT - Sat, 08 Jun 2024 03:01:31 GMT

File type
HTML document, ASCII text, with very long lines (1405), with no line terminators
Size
1.3 kB (1325 bytes)
Hash
5373f3c4843345dde67db670323b2d54
666b2db9872196e52a2bc902111de5e37aa1ae28
e398fbdac28494dec6505fb0143d4cd41cee83989517e12c13ea113fef006fda

HTTP Headers

GET /sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:59:28 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Mon, 27 Sep 2021 07:43:24 GMT
etag: W/"6151761c-52d"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Wed, 24 Apr 2024 16:59:28 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (61)