| en.yts-official.mx/static/yts/image/default_avatar.jpg |  172.67.202.34 | 200 OK | 2.4 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/default_avatar.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 100", baseline, precision 8, 60x60, components 3 Hashe55b123ffd0b26cddf175715a76ff22d 0cbeba4643578c972bb79bf8e3b0b83a794df5bc 9412c68d8f2bad5e7abe0ca709a3258cf8c2b7a14bcc1654abf2316debf902cc
GET /static/yts/image/default_avatar.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/jpeg
content-length: 2449
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-991"
expires: Tue, 14 May 2024 07:11:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1087857
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KUITff61cySqTCSWGttaIW%2FFR29t9bI%2B%2F0LBiptIgxKsZsYnZpiScrWyIxwnmkeQuvPIiJtHndkD%2BXj1Xz5Mx8tIT%2BxEY3JMjmIajBzbGsXZi0FG%2BzlZFYjDjj7kSSKsItOJe9s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c45eb156ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext | 142.250.74.106 | 200 OK | 4.4 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext IP142.250.74.106:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typegzip compressed data, max compression Hashf9d6e4661d64c4db0752fdd5257bc3c9 12befad9d5128a6d1d9eba3670051c746f8395b9 9f5ffab81101913ea1fe7575a7f806707de44947c12e9ac13947353fcf42d906
GET /css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 21:22:24 GMT
date: Fri, 26 Apr 2024 21:22:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/style/minified.css | 172.67.202.34 | 200 OK | 21 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/style/minified.css IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeASCII text, with very long lines (57475) Hasha314b10e99529c56373ebff456f96618 89369052969ff4793a3c290593b5ded5d2d3e6d7 e043e009630de7fdb24141cd7e788e91a7978880af7730e0f8f97bf41c2cd549
GET /static/yts/style/minified.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 08:38:28 GMT
vary: Accept-Encoding
etag: W/"65d31384-1d423"
expires: Sat, 27 Apr 2024 00:40:37 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 31307
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sdv2t0VSAC%2BXp3rvUCK1Fgt%2BraC7dAgS2V6rLYcUZC7N7FmE35zDgx1e%2FbHh3nXtgVS7m1sKtDRwQ4SUarhZ%2FhKDZg%2FDw95Kai%2BZ1use0cqRihRbr6AeBvqBq4u%2FW152Zwya1e0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9a0c44e9256ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/screenshot/arrival-2016-medium-screenshot1.jpg | 172.67.202.34 | 200 OK | 12 kB |
URL GET HTTP/3en.yts-official.mx/movies/screenshot/arrival-2016-medium-screenshot1.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x146, components 3 Hash72cbdb80e98753365b07dfe13c2e020f 2fb5cb6e91e0e078c76651e7309bea299faf03cb a20957ceba5e2c4d1aeb92d4830e6dc1e6fae6a336d9d969ae6f999e29d0344d
GET /movies/screenshot/arrival-2016-medium-screenshot1.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/jpeg
content-length: 12024
last-modified: Thu, 28 Oct 2021 17:05:38 GMT
etag: "617ad862-2ef8"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tU0rXWzUY94JHXUeN61qfvGcv8WjQLu1wLEdQF1nmWIADW0SykFivlmxIF88NPhkESfP4qBvex%2B5RNs%2FW1pfBU%2B5qBwfAfTk0EB7OZy%2BoIkm43wml7ymm8Z6q6h4AfHiUoSJPwM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c45ea856ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/screenshot/arrival-2016-medium-screenshot3.jpg | 172.67.202.34 | 200 OK | 11 kB |
URL GET HTTP/3en.yts-official.mx/movies/screenshot/arrival-2016-medium-screenshot3.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x146, components 3 Hashdd0463059ac80780824f6710f730adb4 70f401ab79852546b2b8b1767e4f67511984d6b2 3e3f67b8b0705cac39db2666b13f33fd6e73268737c80a249e580a40c1d0a45f
GET /movies/screenshot/arrival-2016-medium-screenshot3.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/jpeg
content-length: 10918
last-modified: Thu, 28 Oct 2021 17:05:39 GMT
etag: "617ad863-2aa6"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2KqzRvzNV7M%2BN1kLYczrY5hKKTXnSTAtPJTJrpV%2FrVXvQWW3CSTabUBSKYLeUsdfLbsE73dno4yiVXL5ShCVsIdNOGbAget2FAa%2BwXRC%2FKplE8Upf%2BT2%2B1ODdaCZqFWhqAXuioI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c45eac56ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/screenshot/arrival-2016-medium-screenshot2.jpg | 172.67.202.34 | 200 OK | 12 kB |
URL GET HTTP/3en.yts-official.mx/movies/screenshot/arrival-2016-medium-screenshot2.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x146, components 3 Hashe7dae4adfb8b55213e40f6c93e751593 6a6731b391e7d4723c5b596eb76f86fef95fe5b7 6a6367e9a4ed9923261f7329a4d1bf654cb66541ca9750559bfe99c98e744611
GET /movies/screenshot/arrival-2016-medium-screenshot2.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/jpeg
content-length: 12325
last-modified: Thu, 28 Oct 2021 17:05:39 GMT
etag: "617ad863-3025"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SneDnHA%2B7%2Fg69xJu3kiQll%2Fy2a246RoPPe16d4%2FrpZy9zpdBEyRUcrBZXyxIvUL1utiN4a2Euy22RMfvyYcdZsv7PXBBNn8GWnLAFsxoGBCgnUGad7NKzVQYzmvKnE2PVML2TUI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c45ea956ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/css/loading.css | 172.67.202.34 | 200 OK | 20 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/css/loading.css IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeASCII text, with CRLF line terminators Hash735be481dc2ed59fcb501ab22457f945 8137bf7711e449275771a667fecf7a06809d4636 fb1f79ab8d1f04f5a35a51e754bb148d260e38c259fff037386b99e4f622da61
GET /static/yts/css/loading.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-b13"
expires: Sat, 27 Apr 2024 00:40:37 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 31307
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DOFzsWKQW%2BgPyw6UgEtPSOY1GrdzCd%2Bv5wIDAlkEPa5ZLHKCc6fcjlrBAND8mGdz6SZDNPew2c%2BkgNeGAbOIGsjOpxl5yQa4%2FysDh%2FV6dFzJjdXmUK3oWcoFKGNJA%2FmSV765ye4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9a0c44e9356ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 | 216.58.207.227 | 200 OK | 22 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 IP216.58.207.227:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22052, version 1.0 Hashf0e48ce2beda9e8cbd7d915bf1b1ae71 3dc1cfff1759b0959cc7fb17517651ec850d584d b2504b3c20c2feb37e78773b788dd09a9cc43c9f36086bc1e2f83a6366ebaa34
GET /s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:05:11 GMT
expires: Sat, 26 Apr 2025 06:05:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:00:24 GMT
content-type: font/woff2
age: 55033
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/fonts/fonts.css | 172.67.202.34 | 200 OK | 20 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/fonts/fonts.css IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeASCII text, with very long lines (1316), with no line terminators Hashb482ea655a7bad066f5aacbcbd1f8ff9 7b48d2275fc5356ae4528275502bb520244e8a4b 38fe96c34e2d963f298b4827f2ddc5a13fa1bcbe420cbbd0b5b907d5613ad1bf
GET /static/yts/fonts/fonts.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-524"
expires: Sat, 27 Apr 2024 00:40:37 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 31307
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BPcEOg7dKaGW5GTevua5Rg4C514G78%2Bt0ea6M85JgcJaQRoKt1GXiOoUL5lyWnsvwe9zSaX2lWAVsrf3xMIWe6PgjU9qxFmZ8vAZ769JZd%2FgK4NtyxFzhYnkKIJ4rlJAyJHIHw0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9a0c44e8f56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/fonts/glyphicons-halflings-regular.woff | 172.67.202.34 | 200 OK | 23 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/fonts/glyphicons-halflings-regular.woff IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeWeb Open Font Format, TrueType, length 23320, version 1.0 Hash68ed1dac06bf0409c18ae7bc62889170 22037a3455914e5662fa51a596677bdb329e2c5c fc969dc1c6ff531abcf368089dcbaf5775133b0626ff56b52301a059fc0f9e1e
GET /static/yts/fonts/glyphicons-halflings-regular.woff HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: font/woff
content-length: 23320
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: "65d2c88f-5b18"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YmRbU2uytG5U2yuWcZoteYQksUmHnXUv9RZqR%2Fx0ynv%2Bki3pKy%2Bc34%2Bb0LOljIR3rkaCDbvihxPuILgyqit%2F6x8QGw06SqE9mDGWz6KmmJbWL%2FrfXrn6wa7DbMgQc%2FJEdkeJjyc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c6186e56ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/arrival-2016.jpg | 172.67.202.34 | 200 OK | 27 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/arrival-2016.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash897c6a6348bbcfb8292bbdf0e8043dff fcb82abae7d63640b806f51855ca29dba125be0e f1a4060ee00afdb340114a6e24aca8a2809021cab5b96d59843d39d62297dba0
GET /movies/poster/arrival-2016.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/jpeg
content-length: 26956
last-modified: Thu, 28 Oct 2021 17:05:38 GMT
etag: "617ad862-694c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TXUU5G8hhcRDYcffAxczEHIaLIdoTaduM%2FUj4AlsO8xAjXMOnSLfSLc538ADN0p4XaGypXldOno88h5BrjuTq7z45SPuPzPQcOKcpDAn65iMM3oY7ot5yoQ6%2FIr2fTEcmvA7sfs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c44e9556ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/me-before-you-2016.jpg?v=1 | 172.67.202.34 | 200 OK | 28 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/me-before-you-2016.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashd18de63c55b5183e6b0edb9eafb935a0 54d019989bef558bb3bdc11ac1b4e27bcfb7f536 ebd648021a5e12aed36a4d1dfdcb4c18b59825b0c1f9013918fc0bf2a6666ac1
GET /movies/poster/me-before-you-2016.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/jpeg
content-length: 27451
last-modified: Thu, 28 Oct 2021 16:29:38 GMT
etag: "617acff2-6b3b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jX4UichZyrtAJMRbwP%2B%2BbOQxELws2jly1bGzpGww0eHelpwRXMvyNKTteyq4SGHh7L46HEyiV87rnt87osaLySuNgwnz9WaNgpr90YduCm2bP2aarZW%2FvQXxBzjVBBfjuxuJLSE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c45ea256ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/anonymous-2011.jpg?v=1 | 172.67.202.34 | 200 OK | 20 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/anonymous-2011.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash8f7af95b7be4fb30299e03e11e4fc3fb 54175833e4e774a7df2830f9bc08124a2cebeb0b c9887f0a034178887524c902d59caef29ade69516375870214bb24609ec207fe
GET /movies/poster/anonymous-2011.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/jpeg
content-length: 20225
last-modified: Thu, 28 Oct 2021 07:18:00 GMT
etag: "617a4ea8-4f01"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kfp1jC3787uO6aABVse89n%2F7lsJoUeQjl39wXvlNSWBN1tnXa7ltDdAYtD0iwWhY9x2SZHUoUdQOupql5DsLXikaUIZxIgNINzKlqckyCPhHvnpPmVIC7nY5M537A0ZXGOtgsIE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c45ea556ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/criminal-activities-2015.jpg?v=1 | 172.67.202.34 | 200 OK | 21 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/criminal-activities-2015.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash81b9119931070e8bb99de0a7a5df063f 82815fec9a7ea7f8b93845726b0b8915358e217a 6f9063ecbec4052c56bf91842c0e7228b8131f3ed6a32a520cf88d3b5a2e9178
GET /movies/poster/criminal-activities-2015.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/jpeg
content-length: 21211
last-modified: Tue, 02 Nov 2021 02:43:44 GMT
etag: "6180a5e0-52db"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1gQX6cVbMNINM8xHyt6QtoWC1IWh65yfjrPi0%2FurNbwb82zgvFZhqq4FJzccsoHpLagdaU5vcAUx0fE9JYkqLfR2%2FB%2BKW9GH4VFStT3OEflhAwOL7ZOZe5yyAHP1ol99U1ZFPG0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c45ea156ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/arrival-2016/ | 172.67.202.34 | 200 OK | 36 kB |
URL GET HTTP/3en.yts-official.mx/movies/arrival-2016/ IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1283), with CRLF line terminators Hash40e45592e1cc4bc00110a0a6ed3364f6 2686ec46b20c35cd13ca6a15f84b710e083882a7 94bc73f879bf8acaf502b9a5e8dfec1cfb647b594b433460b0d2f35248c5f978
GET /movies/arrival-2016/ HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:22:23 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BA%2BYA9Qg8wuUQB9UIuk83T56vQ24oHK67mPxjO9D98LpZOFkVenhcaNW3msOk2n7buecDs2oMeA7nk80lalZS%2BmfzlZvn29Pp2K9ZMidCRVBlvhMKS%2B2ZA3NRNRuJ6nMVou09og%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9a0c1a86c0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.2/js/bootstrap.bundle.min.js |  104.17.25.14 | 200 OK | 19 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.2/js/bootstrap.bundle.min.js IP104.17.25.14:443
Requested byhttps://vidsrc.to/embed/movie/tt2543164/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hasha0805bca912ec901f2a7096228b62d46 3233fd01d87fba457eaad8dcbc289f75b170f814 19126b874a32753d42c12dfa6c17892bfd93820a5a5100ba1b34da4d07599b49
GET /ajax/libs/bootstrap/4.6.2/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 19448
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62d72277-4bf8"
last-modified: Tue, 19 Jul 2022 21:30:31 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 66526
expires: Wed, 16 Apr 2025 21:22:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=loRiSnntSleqngZ8Oz7BnpD0QiwMiZxq%2B4x1HbO47HYuBZFokAeMVqGe1dSXZRaWNVFs7yGLQQKrQpD30dynNt%2FYpqOOyjIi44g7%2BF3cH0XcwR74UXkfJkWEMf7%2B0HGPhYidDwWg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a9a0c66c67b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css | 104.17.25.14 | 200 OK | 19 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css IP104.17.25.14:443
Requested byhttps://vidsrc.to/embed/movie/tt2543164/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (52276) Hashded1c367363e8b20bdc6a19b8350a737 8c06d82739d14b094ff6d9036021a252bd1d985d 1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf
GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: text/css; charset=utf-8
content-length: 18752
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6421d693-4940"
last-modified: Mon, 27 Mar 2023 17:46:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 61737
expires: Wed, 16 Apr 2025 21:22:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cNZqBMWBSuBs7mjR27GdxyPlmbJD45D5xriu691q9jZJ4l5QEO8kekzHG1i53bdpn8bcFlHV2R8K6ym5tjIxwSHDQ%2FimpFGTJxTqxqgbe44Q2OHICSO5t%2BGWxrxq%2BfvwL7LybzMG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a9a0c66c6cb4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js | 104.17.25.14 | 200 OK | 28 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js IP104.17.25.14:443
Requested byhttps://vidsrc.to/embed/movie/tt2543164/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 66927
expires: Wed, 16 Apr 2025 21:22:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vp2%2FhdIWbNm4wgzD1YyLvvjuIw0Ynf43cGrPMMfyaOEpmClQNA6OcRWVoA3NFTNXXaKmBAVZZ5%2Ftw39t0JROukbfL7KxYdxN27lkzhISfNQF7yAtSXlwYnpHrnBDYB3ZF3V%2FHR1U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a9a0c67c6fb4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| growingcastselling.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js | 172.240.108.68 | 200 OK | 30 kB |
URL GET HTTP/1.1growingcastselling.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectgrowingcastselling.com Fingerprint3E:B6:D3:62:BC:57:AD:19:9E:FA:67:C4:B3:FA:10:7C:98:4A:71:2B ValidityThu, 18 Apr 2024 13:01:11 GMT - Wed, 17 Jul 2024 13:01:10 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashb905442424ea3124391d2d71e7e74d38 f82708c348f9f3d5830a0755771c7bba6597bd87 20f283e13ec86ebcabfee0719120b77bb1308f349eec937194c383719625d143
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /b1/27/0e/b1270e96b85c3dd200807d09a940c676.js HTTP/1.1
Host: growingcastselling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 21:22:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-2931_layer=1; expires=Sun, 28 Apr 2024 21:22:24 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d5b65a498b31e36279cdfd0827c19380
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| growingcastselling.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js | 172.240.108.68 | 200 OK | 16 kB |
URL GET HTTP/1.1growingcastselling.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectgrowingcastselling.com Fingerprint3E:B6:D3:62:BC:57:AD:19:9E:FA:67:C4:B3:FA:10:7C:98:4A:71:2B ValidityThu, 18 Apr 2024 13:01:11 GMT - Wed, 17 Jul 2024 13:01:10 GMT
File typeJavaScript source, ASCII text, with very long lines (44084), with no line terminators Hash6ee4fe994a9b57162b51bce40fbba6ab 098433aa6d1feb4ec4cbe4f1677bf4d2895f084c 5fd9f98fac27d5a2b4ce39447f733642bf4e2254bd33e40229086f6d00346120
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js HTTP/1.1
Host: growingcastselling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 21:22:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9b93522e3e7528fa0ed0b996f713538b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| en.yts-official.mx/movies/cover/arrival-2016.jpg | 172.67.202.34 | 200 OK | 18 kB |
URL GET HTTP/3en.yts-official.mx/movies/cover/arrival-2016.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 896x374, components 3 Hash7872f0a254687f1daa4c24a3b11db6ee 2d574c0247c6ed69d6dd5d93fd7156990766b9d8 cc3d553f296b326e547988b8f91500146a6076cc4e6146df0b88f7f3bf302399
GET /movies/cover/arrival-2016.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/jpeg
content-length: 18505
last-modified: Thu, 28 Oct 2021 17:05:38 GMT
etag: "617ad862-4849"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gSe%2FmxUI3Pr4sqA35YAsa3V9sMVtOJLWxa%2F4WLKOyYEzYtCK3Pdv0qjl63HOcy7R7Sth3Eae5j%2FLBNgcxtdBJ5SxAHO36srr57l4FmSZpEzMrIGQJRtaTlGitHvJKIWdkZJPzMM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c5880356ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 | 216.58.207.227 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 IP216.58.207.227:443
Requested byhttps://vidsrc.to/embed/movie/tt2543164/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vidsrc.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:53:15 GMT
expires: Sat, 26 Apr 2025 05:53:15 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
age: 55749
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/style/modded1.js?yify=1 | 172.67.202.34 | 200 OK | 203 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/style/modded1.js?yify=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJavaScript source, ASCII text, with very long lines (65452) Size203 kB (203040 bytes) Hash60de675fcd2844a3ffbb68550d303076 8a53cc2f554a8ef1f58f3fd1996a3c3552ea5472 1c821bdab262418e3742bfa3c295c3b668724f7e8898b45638958a898bd93d33
GET /static/yts/style/modded1.js?yify=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: application/javascript
last-modified: Mon, 19 Feb 2024 03:18:38 GMT
vary: Accept-Encoding
etag: W/"65d2c88e-27b24"
expires: Sat, 27 Apr 2024 00:40:37 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 31307
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UMTnGCIRqbDvm081EomENtTAgP91L%2BvdE4AnD4d0APd3YjMHcNgB%2F5caQxlhxv7n%2BEBw715ywU63KkGMZ8BQdR3TKAIpdVxPE978gSON6wnkYo6hAMQ540BSUU73EMQIDZilwFU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9a0c45eb656ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/image/logo-imdb.svg | 172.67.202.34 | 200 OK | 1.0 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/logo-imdb.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash6b2f5fc8691f33a804fe6db49474a12e 1173e43d75348cf3a675aadfa9ea488838fcb19e 16d7e5b33ece4e844479e3b873bbb8842f73bd5083287559f7cc5895f4c973ec
GET /static/yts/image/logo-imdb.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: W/"65d33152-710"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0swS44hlCoSudT99rCJgKBnaHU74qWbYzwpvQqhLnURW8fLsOZW6FIEZ3or%2FNwvvWH%2FBhKf3lWUKQ4zx8gvo%2FiEy5id390Dyqwko296Gqy5Q%2BVqrbE16uN3YOm6NsIa3N0jTrH4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c44e9d56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| proftrafficcounter.com/stats |  18.159.11.169 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.159.11.169:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashc574e5d0e43497d0e3f9c9cf44e39ac0 9f384496f5f463de4f5c04f8dfe8d0f295486d32 32242053738ecc06189c85d76acdadf7d031ccbdfc792f57e6da338f863443f3
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://en.yts-official.mx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=6f1e5233-1bb7-4910-be3f-cf8f04511c20:2:1; expires=Mon, 24 Apr 2034 21:22:24 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| phoneboothsabledomesticated.com/pixel/purst?dl=0&th=0&sc=0&rs=1018&rd=1018&fd=541&bv=24.4.7925&tmpl=70 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1phoneboothsabledomesticated.com/pixel/purst?dl=0&th=0&sc=0&rs=1018&rd=1018&fd=541&bv=24.4.7925&tmpl=70 IP172.240.127.234:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectphoneboothsabledomesticated.com Fingerprint81:A6:75:3C:1E:48:C4:29:1D:C9:0F:59:D3:DC:9A:2C:C7:07:B1:A3 ValidityTue, 23 Apr 2024 10:42:36 GMT - Mon, 22 Jul 2024 10:42:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/purst?dl=0&th=0&sc=0&rs=1018&rd=1018&fd=541&bv=24.4.7925&tmpl=70 HTTP/1.1
Host: phoneboothsabledomesticated.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 21:22:24 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| en.yts-official.mx/movies/arrival-2016/ | 172.67.202.34 | 200 OK | 7.0 kB |
URL GET HTTP/3en.yts-official.mx/movies/arrival-2016/ IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1283), with CRLF line terminators Hash40e45592e1cc4bc00110a0a6ed3364f6 2686ec46b20c35cd13ca6a15f84b710e083882a7 94bc73f879bf8acaf502b9a5e8dfec1cfb647b594b433460b0d2f35248c5f978
GET /movies/arrival-2016/ HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=14kMxY%2FX94lawKUkSSUf%2B63NomizaDMBnt8guPCOmJGR3ai9yhWTHdrs4%2FWGF2QmMMWQpfdH7fcjF7gGQBuW4R7LLR1NkngWuccMoGre%2FvSj0fY3%2FoyRQVWPYOoMFtaoEFG5nDE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9a0c82a3056ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| downstairsnegotiatebarren.com/sfp.js |  188.114.97.1 | 200 OK | 28 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP188.114.97.1:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44 ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 7d11019e3cb96a82bcd4077a5314b0f6
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 26 Apr 2024 21:22:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ac7Opp0v8EVgcSCpTEHDxwfjX%2B988wALjldFpfvyDcdSsyBBlvYVKw8Bu8FIl0XnnU6KXMMcWrzXRb6FiiM3ZwTLQWMsLspM2H%2BLp8T52kXPUWqI1hS31K%2FLJ%2FeQkO86SD3HhDLJKulpweFNhdnwvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c84afc56c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| capaciousdrewreligion.com/advertisers.js | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com Fingerprint53:B6:ED:C6:B5:B6:60:3E:6D:02:5A:92:2E:C3:12:74:64:A1:23:DC ValidityWed, 06 Mar 2024 11:57:32 GMT - Tue, 04 Jun 2024 11:57:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 21:22:25 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1692b1bc8ebb677cbe19a67a71fe9ce7
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png | 172.67.202.34 | 200 OK | 7.0 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typePNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Hashf87afcf11d459620ff02da6112365db2 d09e6d4e7db706569474bfb7ec93f31ccbd6ed69 a70913fad67537f16d871e4c456c8f4484106f6d4ef3e12fa3c3b2eceefee508
GET /static/yts/image/apple-touch-icon-180x180.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=6f1e5233-1bb7-4910-be3f-cf8f04511c20%3A2%3A1; pp_main_b1270e96b85c3dd200807d09a940c676=1; sb_page_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_onpage_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_main_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_count_0a2f9bfefa2d59b6782f748beec9f30e=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:25 GMT
content-type: image/png
content-length: 6973
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-1b3d"
expires: Mon, 20 May 2024 16:27:29 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 536095
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B4MzqLeIZfG5sI6to1Qv9fsBLVTdZIxJGEQ0%2BnpguUbzQn7UYcGprYZtr8c5qEFa1i1mdH%2Fl6F029v9PoaQDRJA1brMAtdXISsKNxD1v4CO2YGIx19Ral6eoIx14tjleL%2FAMyp0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0cd2f8156ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/image/favicon-16x16.png | 172.67.202.34 | 200 OK | 619 B |
URL GET HTTP/3en.yts-official.mx/static/yts/image/favicon-16x16.png IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typePNG image data, 16 x 16, 8-bit/color RGB, non-interlaced Hashea830fdd4f9a6d19aa7455dabdac987a b0d567d6b4d40959e1bd44032f6bc2331057b319 71148160c085a70d1af7708c1d52cfcf39f8ef6e4ce13f0f20c080b2e19195db
GET /static/yts/image/favicon-16x16.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=6f1e5233-1bb7-4910-be3f-cf8f04511c20%3A2%3A1; pp_main_b1270e96b85c3dd200807d09a940c676=1; sb_page_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_onpage_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_main_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_count_0a2f9bfefa2d59b6782f748beec9f30e=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:25 GMT
content-type: image/png
content-length: 619
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-26b"
expires: Mon, 20 May 2024 20:01:08 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 523277
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7otmoJKyiENcSr3ctV7vnYb7XmlByHrNYBL46soGLVVlUA61unmaOR1FHQVdpjkIk1aTkLfxL0NayZGZSgI7DVUh2RsoerUT%2BkTPhrmzEsz%2BbBXrFzREshQcjOdBRJlpiwGN9GE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0cd2f8356ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| energypopulationpractical.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=6f1e5233-1bb7-4910-be3f-cf8f04511c20%3A2%3A1 | 172.240.127.234 | 200 OK | 6.0 kB |
URL GET HTTP/1.1energypopulationpractical.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=6f1e5233-1bb7-4910-be3f-cf8f04511c20%3A2%3A1 IP172.240.127.234:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectenergypopulationpractical.com Fingerprint94:C5:27:9D:BC:2E:20:2F:4E:B0:20:AD:FE:C9:15:3F:F1:78:5B:B2 ValidityWed, 24 Apr 2024 15:03:55 GMT - Tue, 23 Jul 2024 15:03:54 GMT
Hash2e76822c840c279e33cde55cf2dd4bca dd7bd5f0564ae397f3d34440b958a60e06c8183f 913b9609155c9bae9ffc002dc4f9e5f5e58e55427498f5b7b66d4bdd888e3fcc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=6f1e5233-1bb7-4910-be3f-cf8f04511c20%3A2%3A1 HTTP/1.1
Host: energypopulationpractical.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 21:22:25 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://en.yts-official.mx
Access-Control-Allow-Origin: https://en.yts-official.mx
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16587847; expires=Sat, 27 Apr 2024 21:22:25 GMT; secure; SameSite=None
uid_id2=6f1e5233-1bb7-4910-be3f-cf8f04511c20:2:1; expires=Fri, 03 May 2024 21:22:25 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 27 Apr 2024 21:22:25 GMT; secure; SameSite=None
uncs=1; expires=Sat, 27 Apr 2024 21:22:25 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sat, 27 Apr 2024 21:22:25 GMT; secure; SameSite=None
uncs29=1; expires=Sat, 27 Apr 2024 21:22:25 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b869d3eba4e678fea924a45b4aa70fb0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| energypopulationpractical.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQW8bRRSeNYELElJRD6CC5AMHQI2zu7bXNj0gSkkVGtqqBQEnNLMz6wwZ76xmdrxOThGVUI8mEup18zlpBFQILtyo0KYSh0pIMVxyIH8CqTcQsokwvMO8973vjeabb%2BbzPXdKQjh6cuU9vS2Voivthl9%2F9aMguFRfl6kb1Ufd6JOodaluhm%2F0oob%2FWv2qiDf1SugHvh%2F4QX1VGpHo0cqMhMwe9IJGz2%2B0wkbQbmFk%2Fo%2Bt82CpBz48Jc9D8unSI%2B88ZFwhHXx3RdjNXGcX3xk4RXNtMOSHH6SbqS5SDBZlYjwk6eHZNLQ9Xn0InR7M5UIP%2Fx1kckq8nx%2BCpYdnIsGG%2B3OdTEGkYPxZFMMKQlWQtEKs70DyYwLEHNdvIB3cv65NQbf%2BYemMnZKlJ39AFlOy9Pt5pINvLys5qt%2FWyuVSpxajpIQcVZD9Cpk7Qr5dgyyOEOefQfJfyMqTdaSD%2FRtWaUh%2B8kqUBKIdNpvLAWOd5VYv8JeZaCbLcdJN%2FFY7COLQnxskZQWZVFBiDGprcNaDkx5c4sFlHgb8pB4HQdDxeUz9bi%2BOm7wjWMT9gHaSgAZ%2B1IWLZ3cYI8%2FGiNUYsdlBZnawKb84br8L436C3ShhuQebEwx5iUIQFJagoASFJChygmJYHnBlQ1ve58o6Fpzl8Cw3y4nO%2B3v0QOd9kRJQM4bh5V52Ss7NPfzzpavYFCd1n4ZJjyUioSFv91jU6YZJp9VlQsS9pOkLWFlC2hqo9bAtp%2BTFtReQySl5%2Bt5fYPQIVh0hlh6oexm0KEE3Smynh1u5behUgOsSWb6EfMvbU6fkwvzwa%2Fd2IeLH5CwQmxKZKfGpfETQV3cnt3RB9m%2FpwpLvb2S5HMhtOnvc2znNxTNfXxNbhTZ87Yodf%2FVWPCNm5YP3hc3Xacpl2rfkm8uSc2FWtYkF%2BXHNfijYTWc3LjuTumz95tura4PMCGulTitQefzxLmI5Jc%2F9sD7%2Fta%2FXf4M0FYwrMXALpVJXiLMd2GzRs5rAqAVmmYfClRMTskVTSQIlFpiyEvY%2FmC3qiaGz3VSWe%2FYu%2BqYGmt9BOigxNCWGqgRVY1j31CTPzOM3f23OA0zVJkyZ2j5TRu3OTZ4tX8LKk3qn2fRp1GsHnQ4VHdYKu0kUcErDVhRGEW0it9Pk4oVzfwMAAP%2F%2FAQAA%2F%2F%2BjNcoQjwQAAA%3D%3D | 172.240.127.234 | 200 OK | 7 B |
URL GET HTTP/1.1energypopulationpractical.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQW8bRRSeNYELElJRD6CC5AMHQI2zu7bXNj0gSkkVGtqqBQEnNLMz6wwZ76xmdrxOThGVUI8mEup18zlpBFQILtyo0KYSh0pIMVxyIH8CqTcQsokwvMO8973vjeabb%2BbzPXdKQjh6cuU9vS2Voivthl9%2F9aMguFRfl6kb1Ufd6JOodaluhm%2F0oob%2FWv2qiDf1SugHvh%2F4QX1VGpHo0cqMhMwe9IJGz2%2B0wkbQbmFk%2Fo%2Bt82CpBz48Jc9D8unSI%2B88ZFwhHXx3RdjNXGcX3xk4RXNtMOSHH6SbqS5SDBZlYjwk6eHZNLQ9Xn0InR7M5UIP%2Fx1kckq8nx%2BCpYdnIsGG%2B3OdTEGkYPxZFMMKQlWQtEKs70DyYwLEHNdvIB3cv65NQbf%2BYemMnZKlJ39AFlOy9Pt5pINvLys5qt%2FWyuVSpxajpIQcVZD9Cpk7Qr5dgyyOEOefQfJfyMqTdaSD%2FRtWaUh%2B8kqUBKIdNpvLAWOd5VYv8JeZaCbLcdJN%2FFY7COLQnxskZQWZVFBiDGprcNaDkx5c4sFlHgb8pB4HQdDxeUz9bi%2BOm7wjWMT9gHaSgAZ%2B1IWLZ3cYI8%2FGiNUYsdlBZnawKb84br8L436C3ShhuQebEwx5iUIQFJagoASFJChygmJYHnBlQ1ve58o6Fpzl8Cw3y4nO%2B3v0QOd9kRJQM4bh5V52Ss7NPfzzpavYFCd1n4ZJjyUioSFv91jU6YZJp9VlQsS9pOkLWFlC2hqo9bAtp%2BTFtReQySl5%2Bt5fYPQIVh0hlh6oexm0KEE3Smynh1u5behUgOsSWb6EfMvbU6fkwvzwa%2Fd2IeLH5CwQmxKZKfGpfETQV3cnt3RB9m%2FpwpLvb2S5HMhtOnvc2znNxTNfXxNbhTZ87Yodf%2FVWPCNm5YP3hc3Xacpl2rfkm8uSc2FWtYkF%2BXHNfijYTWc3LjuTumz95tura4PMCGulTitQefzxLmI5Jc%2F9sD7%2Fta%2FXf4M0FYwrMXALpVJXiLMd2GzRs5rAqAVmmYfClRMTskVTSQIlFpiyEvY%2FmC3qiaGz3VSWe%2FYu%2BqYGmt9BOigxNCWGqgRVY1j31CTPzOM3f23OA0zVJkyZ2j5TRu3OTZ4tX8LKk3qn2fRp1GsHnQ4VHdYKu0kUcErDVhRGEW0it9Pk4oVzfwMAAP%2F%2FAQAA%2F%2F%2BjNcoQjwQAAA%3D%3D IP172.240.127.234:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectenergypopulationpractical.com Fingerprint94:C5:27:9D:BC:2E:20:2F:4E:B0:20:AD:FE:C9:15:3F:F1:78:5B:B2 ValidityWed, 24 Apr 2024 15:03:55 GMT - Tue, 23 Jul 2024 15:03:54 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSQW8bRRSeNYELElJRD6CC5AMHQI2zu7bXNj0gSkkVGtqqBQEnNLMz6wwZ76xmdrxOThGVUI8mEup18zlpBFQILtyo0KYSh0pIMVxyIH8CqTcQsokwvMO8973vjeabb%2BbzPXdKQjh6cuU9vS2Voivthl9%2F9aMguFRfl6kb1Ufd6JOodaluhm%2F0oob%2FWv2qiDf1SugHvh%2F4QX1VGpHo0cqMhMwe9IJGz2%2B0wkbQbmFk%2Fo%2Bt82CpBz48Jc9D8unSI%2B88ZFwhHXx3RdjNXGcX3xk4RXNtMOSHH6SbqS5SDBZlYjwk6eHZNLQ9Xn0InR7M5UIP%2Fx1kckq8nx%2BCpYdnIsGG%2B3OdTEGkYPxZFMMKQlWQtEKs70DyYwLEHNdvIB3cv65NQbf%2BYemMnZKlJ39AFlOy9Pt5pINvLys5qt%2FWyuVSpxajpIQcVZD9Cpk7Qr5dgyyOEOefQfJfyMqTdaSD%2FRtWaUh%2B8kqUBKIdNpvLAWOd5VYv8JeZaCbLcdJN%2FFY7COLQnxskZQWZVFBiDGprcNaDkx5c4sFlHgb8pB4HQdDxeUz9bi%2BOm7wjWMT9gHaSgAZ%2B1IWLZ3cYI8%2FGiNUYsdlBZnawKb84br8L436C3ShhuQebEwx5iUIQFJagoASFJChygmJYHnBlQ1ve58o6Fpzl8Cw3y4nO%2B3v0QOd9kRJQM4bh5V52Ss7NPfzzpavYFCd1n4ZJjyUioSFv91jU6YZJp9VlQsS9pOkLWFlC2hqo9bAtp%2BTFtReQySl5%2Bt5fYPQIVh0hlh6oexm0KEE3Smynh1u5behUgOsSWb6EfMvbU6fkwvzwa%2Fd2IeLH5CwQmxKZKfGpfETQV3cnt3RB9m%2FpwpLvb2S5HMhtOnvc2znNxTNfXxNbhTZ87Yodf%2FVWPCNm5YP3hc3Xacpl2rfkm8uSc2FWtYkF%2BXHNfijYTWc3LjuTumz95tura4PMCGulTitQefzxLmI5Jc%2F9sD7%2Fta%2FXf4M0FYwrMXALpVJXiLMd2GzRs5rAqAVmmYfClRMTskVTSQIlFpiyEvY%2FmC3qiaGz3VSWe%2FYu%2BqYGmt9BOigxNCWGqgRVY1j31CTPzOM3f23OA0zVJkyZ2j5TRu3OTZ4tX8LKk3qn2fRp1GsHnQ4VHdYKu0kUcErDVhRGEW0it9Pk4oVzfwMAAP%2F%2FAQAA%2F%2F%2BjNcoQjwQAAA%3D%3D HTTP/1.1
Host: energypopulationpractical.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=6f1e5233-1bb7-4910-be3f-cf8f04511c20:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 21:22:25 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 234e573c997ea32113a5bae4a44359d2
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| energypopulationpractical.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Findex.html&l=1553&fd=53 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1energypopulationpractical.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Findex.html&l=1553&fd=53 IP172.240.127.234:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectenergypopulationpractical.com Fingerprint94:C5:27:9D:BC:2E:20:2F:4E:B0:20:AD:FE:C9:15:3F:F1:78:5B:B2 ValidityWed, 24 Apr 2024 15:03:55 GMT - Tue, 23 Jul 2024 15:03:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Findex.html&l=1553&fd=53 HTTP/1.1
Host: energypopulationpractical.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=6f1e5233-1bb7-4910-be3f-cf8f04511c20:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 21:22:25 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/img/1.jpg | 188.114.97.1 | 200 OK | 36 kB |
URL GET HTTP/3cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/img/1.jpg IP188.114.97.1:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3 Hashfc90b66d3831faf345c0a6173f02746f 4f5310e4fb903bdd4dceaa5d4095e48a83673a69 a2b1cc40143d3a9c13f5ffb5040a72ad972bc7d285c7eceef8708efe369fdeb4
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/img/1.jpg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:25 GMT
content-type: image/jpeg
content-length: 36061
last-modified: Thu, 01 Feb 2024 14:48:15 GMT
etag: "65bbaf2f-8cdd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 6249639
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QRexHtAgqH4Fh8XCDo5%2BUSv6sCVfFJBou1Cbtgr4PhoF5ND5xhG7qphxQSdfWLvjYpYGR86MdXrASKjt2l9ufoDyL9Z8aEEjn4jvJT0dVjB1Y%2Bf4aN4tPMhCe8NuaRqDIqZFxKPN1c2N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0d03e37569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/style.css | 188.114.97.1 | 200 OK | 1.0 kB |
URL GET HTTP/2cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/style.css IP188.114.97.1:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash9b388680bb9d9cf0d8e7e4dad7b39ac5 393a2393f3b96b727a3114d249fffb35bf34d9f5 758934b1fbbad9e578664b4efbb5ee3303482d0d37ec7837b4bb2fa4915be70f
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:22:25 GMT
content-type: text/css
last-modified: Thu, 01 Feb 2024 14:48:12 GMT
etag: W/"65bbaf2c-e2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 447015
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nq16K%2Fw%2FIxvauBVOUl0sp6IwH5KWFgxGwwg0aSJEkJBboXINQ3CA9R8E89vnyJ2P6M5vVmgALDlxV0P17mtl%2FsMjdcKJM060ndv4xiJ0qocXdsAz57xWb%2FT1HvHaWms8BFXQrb%2BGYOv%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0cfbfc1b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| energypopulationpractical.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fanimate.css&l=79245&fd=81 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1energypopulationpractical.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fanimate.css&l=79245&fd=81 IP172.240.127.234:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectenergypopulationpractical.com Fingerprint94:C5:27:9D:BC:2E:20:2F:4E:B0:20:AD:FE:C9:15:3F:F1:78:5B:B2 ValidityWed, 24 Apr 2024 15:03:55 GMT - Tue, 23 Jul 2024 15:03:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fanimate.css&l=79245&fd=81 HTTP/1.1
Host: energypopulationpractical.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=6f1e5233-1bb7-4910-be3f-cf8f04511c20:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 21:22:26 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/animate.css | 188.114.97.1 | 200 OK | 5.5 kB |
URL GET HTTP/2cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/animate.css IP188.114.97.1:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash80047eaa13ebd50c50e8a9753621e430 9c503e07d130572a0eaf51f7c02cbd4cf6213fe3 3f831a59615f8d5d40b4340b2836f91438c876f8dbce75f78e38360d6fe0f429
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:22:25 GMT
content-type: text/css
last-modified: Thu, 01 Feb 2024 14:48:12 GMT
etag: W/"65bbaf2c-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 447015
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sOkfn57FU%2FEoFQ%2FtRzounDwo7phMXpV9k4nzXxs2HY3l3GXcNmB%2BSYTF4Po%2F9ppTQ7lPP%2BjLFBWiGZdC11IqMlsnF%2FL1W%2BsJX0R3XorYfrtnZhCSeeHx5Ii08uese%2B2I5zUsma3jew7h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0cfbfbeb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:02:10 GMT
expires: Sat, 26 Apr 2025 06:02:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 55216
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:55:49 GMT
expires: Sat, 26 Apr 2025 05:55:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 55597
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| energypopulationpractical.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuHlcvghDJQYnCHDyoZGe75%2FeYgxjjhjVrEhJFPUn96tlya7qaqq7p2T0tBiTHcUFy7f1mN4saRC%2FeDNIb8BAQdvSyB%2FefEHJTZMbF0Xeo9773vaK%2B%2Bqo%2B3%2FOnpA5PT668Z7aV1nSlVQurr34URZeq6yrxo%2Bqo2%2F6k3bxUtcM3eu1a%2BFr1quSbZqUeRmEYhVF1VVkZm9HKjIRKH%2FSiWi%2BsNeu1qNXEyP4fOx%2FA0QBieEqehxLTpUfBeSheIhl8d0W6zcykF98ZeE0zYzEUhx8km4nJEwwWZWwDxMnh2TSMO159CJMczOXCDP8dZGpKgp8fgiWHZyLBhvtznUxDJmDiWeTDElKXULQEN3egxDEBuMD1G0gG968bm9Otf1g6Y6dk6ckfUPmULP1%2BHsng28tajaq3jfaZMonDKC6gRiVUv0Tqj5BtV6DyI%2FDsMyjxC1l5so5ksH%2FDaQMlTl5px5Fs1RuN5YixznKzF4XLTDbiZR5347DZiiJeD%2BcGKVVCxSW0HIO6CrwL4FUAHwfwaYCBOKnyKIo6oeA07PY4b4iOZG0RRrQTRzQK2114PrvDGFk6BtdjcLuD1O5gU31x3HoX1v8Et1HAiQAuIxiKArkkyB1BTglyRZBnBPmwOBDa1V1xX2jnWXSW62e5UUxM1t%2BjBybry4SA2jGsKPbSU3Ju7uGfL13FpjyphrQe91gsY1oXrR5rd7r1uNPsMil5L26EEk4VUK4C6gJsqyl5ce0FpGpKnr73Fxg9gtNH4CoA9S%2BD5gXoRoHt5HArczWTSAhTIM2WkG0Fe%2FqUXJgffu3eLiR%2FTM4C3BZIbYFP1SOCvr47uWVysn%2FL5I58fyPN1EBt09nj3s5oJp%2F5%2Bprcyo0Va1fc%2BKu3%2BIyYlQ%2Fely5bp4lQSd%2BRby4rIaRdNZZL8uOa%2B1Cym95tXPY28en6zbdX1waplc4pk5Sg6vjjXXA1Jc%2F9sD7%2Fta9Xf4OyJawvMPALpcqU4OkOXLroOUNg9QKzNEDui4mts0VTKwItF5iyAu4%2FmC3qiaWz3VQVe%2B4u%2BrYCmt1BMigwtAWGugDVYzj%2F1CRL7eM3f23MA0xXJkzbyj7TVu%2FOTZ4tX8Kpk2ojFB0mY9lhstlqxpIL1mqxkMecNUS3y5G5aXzxwrm%2FAQAA%2F%2F8BAAD%2F%2FyPhH%2FiPBAAA | 172.240.127.234 | 200 OK | 7 B |
URL GET HTTP/1.1energypopulationpractical.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuHlcvghDJQYnCHDyoZGe75%2FeYgxjjhjVrEhJFPUn96tlya7qaqq7p2T0tBiTHcUFy7f1mN4saRC%2FeDNIb8BAQdvSyB%2FefEHJTZMbF0Xeo9773vaK%2B%2Bqo%2B3%2FOnpA5PT668Z7aV1nSlVQurr34URZeq6yrxo%2Bqo2%2F6k3bxUtcM3eu1a%2BFr1quSbZqUeRmEYhVF1VVkZm9HKjIRKH%2FSiWi%2BsNeu1qNXEyP4fOx%2FA0QBieEqehxLTpUfBeSheIhl8d0W6zcykF98ZeE0zYzEUhx8km4nJEwwWZWwDxMnh2TSMO159CJMczOXCDP8dZGpKgp8fgiWHZyLBhvtznUxDJmDiWeTDElKXULQEN3egxDEBuMD1G0gG968bm9Otf1g6Y6dk6ckfUPmULP1%2BHsng28tajaq3jfaZMonDKC6gRiVUv0Tqj5BtV6DyI%2FDsMyjxC1l5so5ksH%2FDaQMlTl5px5Fs1RuN5YixznKzF4XLTDbiZR5347DZiiJeD%2BcGKVVCxSW0HIO6CrwL4FUAHwfwaYCBOKnyKIo6oeA07PY4b4iOZG0RRrQTRzQK2114PrvDGFk6BtdjcLuD1O5gU31x3HoX1v8Et1HAiQAuIxiKArkkyB1BTglyRZBnBPmwOBDa1V1xX2jnWXSW62e5UUxM1t%2BjBybry4SA2jGsKPbSU3Ju7uGfL13FpjyphrQe91gsY1oXrR5rd7r1uNPsMil5L26EEk4VUK4C6gJsqyl5ce0FpGpKnr73Fxg9gtNH4CoA9S%2BD5gXoRoHt5HArczWTSAhTIM2WkG0Fe%2FqUXJgffu3eLiR%2FTM4C3BZIbYFP1SOCvr47uWVysn%2FL5I58fyPN1EBt09nj3s5oJp%2F5%2Bprcyo0Va1fc%2BKu3%2BIyYlQ%2Fely5bp4lQSd%2BRby4rIaRdNZZL8uOa%2B1Cym95tXPY28en6zbdX1waplc4pk5Sg6vjjXXA1Jc%2F9sD7%2Fta9Xf4OyJawvMPALpcqU4OkOXLroOUNg9QKzNEDui4mts0VTKwItF5iyAu4%2FmC3qiaWz3VQVe%2B4u%2BrYCmt1BMigwtAWGugDVYzj%2F1CRL7eM3f23MA0xXJkzbyj7TVu%2FOTZ4tX8Kpk2ojFB0mY9lhstlqxpIL1mqxkMecNUS3y5G5aXzxwrm%2FAQAA%2F%2F8BAAD%2F%2FyPhH%2FiPBAAA IP172.240.127.234:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectenergypopulationpractical.com Fingerprint94:C5:27:9D:BC:2E:20:2F:4E:B0:20:AD:FE:C9:15:3F:F1:78:5B:B2 ValidityWed, 24 Apr 2024 15:03:55 GMT - Tue, 23 Jul 2024 15:03:54 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuHlcvghDJQYnCHDyoZGe75%2FeYgxjjhjVrEhJFPUn96tlya7qaqq7p2T0tBiTHcUFy7f1mN4saRC%2FeDNIb8BAQdvSyB%2FefEHJTZMbF0Xeo9773vaK%2B%2Bqo%2B3%2FOnpA5PT668Z7aV1nSlVQurr34URZeq6yrxo%2Bqo2%2F6k3bxUtcM3eu1a%2BFr1quSbZqUeRmEYhVF1VVkZm9HKjIRKH%2FSiWi%2BsNeu1qNXEyP4fOx%2FA0QBieEqehxLTpUfBeSheIhl8d0W6zcykF98ZeE0zYzEUhx8km4nJEwwWZWwDxMnh2TSMO159CJMczOXCDP8dZGpKgp8fgiWHZyLBhvtznUxDJmDiWeTDElKXULQEN3egxDEBuMD1G0gG968bm9Otf1g6Y6dk6ckfUPmULP1%2BHsng28tajaq3jfaZMonDKC6gRiVUv0Tqj5BtV6DyI%2FDsMyjxC1l5so5ksH%2FDaQMlTl5px5Fs1RuN5YixznKzF4XLTDbiZR5347DZiiJeD%2BcGKVVCxSW0HIO6CrwL4FUAHwfwaYCBOKnyKIo6oeA07PY4b4iOZG0RRrQTRzQK2114PrvDGFk6BtdjcLuD1O5gU31x3HoX1v8Et1HAiQAuIxiKArkkyB1BTglyRZBnBPmwOBDa1V1xX2jnWXSW62e5UUxM1t%2BjBybry4SA2jGsKPbSU3Ju7uGfL13FpjyphrQe91gsY1oXrR5rd7r1uNPsMil5L26EEk4VUK4C6gJsqyl5ce0FpGpKnr73Fxg9gtNH4CoA9S%2BD5gXoRoHt5HArczWTSAhTIM2WkG0Fe%2FqUXJgffu3eLiR%2FTM4C3BZIbYFP1SOCvr47uWVysn%2FL5I58fyPN1EBt09nj3s5oJp%2F5%2Bprcyo0Va1fc%2BKu3%2BIyYlQ%2Fely5bp4lQSd%2BRby4rIaRdNZZL8uOa%2B1Cym95tXPY28en6zbdX1waplc4pk5Sg6vjjXXA1Jc%2F9sD7%2Fta9Xf4OyJawvMPALpcqU4OkOXLroOUNg9QKzNEDui4mts0VTKwItF5iyAu4%2FmC3qiaWz3VQVe%2B4u%2BrYCmt1BMigwtAWGugDVYzj%2F1CRL7eM3f23MA0xXJkzbyj7TVu%2FOTZ4tX8Kpk2ojFB0mY9lhstlqxpIL1mqxkMecNUS3y5G5aXzxwrm%2FAQAA%2F%2F8BAAD%2F%2FyPhH%2FiPBAAA HTTP/1.1
Host: energypopulationpractical.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=6f1e5233-1bb7-4910-be3f-cf8f04511c20:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 21:22:26 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 457e7dfa1975aa28bd83c9fadad60236
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| energypopulationpractical.com/pixel/sbs?c=1 | 192.243.59.13 | 200 OK | 0 B |
URL GET HTTP/1.1energypopulationpractical.com/pixel/sbs?c=1 IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectenergypopulationpractical.com Fingerprint94:C5:27:9D:BC:2E:20:2F:4E:B0:20:AD:FE:C9:15:3F:F1:78:5B:B2 ValidityWed, 24 Apr 2024 15:03:55 GMT - Tue, 23 Jul 2024 15:03:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: energypopulationpractical.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=6f1e5233-1bb7-4910-be3f-cf8f04511c20:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 21:22:26 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| vidsrc.to/assets/embed/min/all.css?v=661252ea | 172.67.181.24 | 200 OK | 21 kB |
URL GET HTTP/3vidsrc.to/assets/embed/min/all.css?v=661252ea IP172.67.181.24:443
Requested byhttps://vidsrc.to/embed/movie/tt2543164/ CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.to Fingerprint1D:91:BF:0E:81:D2:1C:22:D3:9C:9C:8D:88:3E:B4:E5:E2:68:DE:FC ValidityFri, 22 Mar 2024 12:30:27 GMT - Thu, 20 Jun 2024 12:30:26 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashf1324118f0fb608e711acd4ad716b776 f47b8e053b4eb43556a1645eee13eee24e185a5f 9bba11d379f87fd61d8fbe66ee318f39a86f0dc796c67e1418043f63732c4487
GET /assets/embed/min/all.css?v=661252ea HTTP/1.1
Host: vidsrc.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.to/embed/movie/tt2543164/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: text/css
last-modified: Mon, 31 Jul 2023 07:18:46 GMT
etag: W/"64c76056-139ba"
e-cache: HIT
access-control-allow-origin: *, *
expires: Tue, 07 May 2024 08:02:31 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1689593
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zvDuaw7shZGc%2BRaTUxJOGxK8EiCyu%2BinFZtjzZMRzm3x3HLltFID21UoLy3LL2wQPU3c%2Bduv5oJZ97EuM3jkhT8QCcpyz3WXZzP5dSa6msteirRBwwyv%2BuMck54%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c61f601bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 IP216.58.207.227:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20040, version 1.0 Hasha61c670a24d6794a95a9712f0d12b656 c9b3114b27790109ec51508f51f1a033ccfe0812 a4f5230d39a7a21971fe62ccde2443345638d2beaa369b752820390a687b91b6
GET /s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:52:28 GMT
expires: Sat, 26 Apr 2025 05:52:28 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:51:46 GMT
content-type: font/woff2
age: 55796
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/images/website/2160p-quality.svg | 172.67.202.34 | 200 OK | 3.7 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/2160p-quality.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash3d521f26d131c50dbabc5c505d444bb9 87c316b3478e3318a950421a8c2d7ba22aea8374 d836009ea876ed2f895ee254a0d7645242506b5026ba4f1c93f0d8bd378d06ba
GET /static/yts/images/website/2160p-quality.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 08:33:37 GMT
etag: W/"65d31261-e52"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5473
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SrDEiPJ0y71yDOFHkRjHupXTHuKbm7U2sjWmT4o6S%2Fhfy3TQbDFbr7P%2B%2FxdjY51U0jOH%2FEv74Ks0eMAOmGHCrc%2B2XieCHIm7UkM9%2FZeGDv8xFKJh%2BrTbeUy35Ll5t6Wz1yJgyUE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c5981656ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vidsrc.to/assets/embed/min/all.js?v=661252ea | 172.67.181.24 | 200 OK | 89 kB |
URL GET HTTP/3vidsrc.to/assets/embed/min/all.js?v=661252ea IP172.67.181.24:443
Requested byhttps://vidsrc.to/embed/movie/tt2543164/ CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.to Fingerprint1D:91:BF:0E:81:D2:1C:22:D3:9C:9C:8D:88:3E:B4:E5:E2:68:DE:FC ValidityFri, 22 Mar 2024 12:30:27 GMT - Thu, 20 Jun 2024 12:30:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/embed/min/all.js?v=661252ea HTTP/1.1
Host: vidsrc.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.to/embed/movie/tt2543164/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: application/javascript
last-modified: Sun, 07 Apr 2024 08:02:12 GMT
etag: W/"66125304-15a1e"
e-cache: HIT
access-control-allow-origin: *, *
expires: Tue, 07 May 2024 08:02:31 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1689593
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UxXjdNLPvijUy83CpBq5a85GiFxjEWLHGn7Dqsl%2BLEvFhx5qs8UmYkjMbHjQSQ2k0y9XLizSv9MYeCNVPLhAbJPQXWDEohQrcqfYRz9ninoczxAfvMxcpl4RA24%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c61f611bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vidsrc.to/lm/com/annulmentequitycereals/88/1d/c4/881dc4c310ba96ddca859431babfc89b.js | 172.67.181.24 | 200 OK | 85 kB |
URL GET HTTP/3vidsrc.to/lm/com/annulmentequitycereals/88/1d/c4/881dc4c310ba96ddca859431babfc89b.js IP172.67.181.24:443
Requested byhttps://vidsrc.to/embed/movie/tt2543164/ CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.to Fingerprint1D:91:BF:0E:81:D2:1C:22:D3:9C:9C:8D:88:3E:B4:E5:E2:68:DE:FC ValidityFri, 22 Mar 2024 12:30:27 GMT - Thu, 20 Jun 2024 12:30:26 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashe4b8bcb38347c56ed51cd7ef3ddd5acd 823de077cfa9d07caab937ce47718a49fb4ed79f 4fe123debbbf375ffd8810a9f1070f5d1235ce51840fc92e058e49a61beacf9a
GET /lm/com/annulmentequitycereals/88/1d/c4/881dc4c310ba96ddca859431babfc89b.js HTTP/1.1
Host: vidsrc.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.to/embed/movie/tt2543164/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: application/javascript
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-request-id: bb3ead36d8cfbb7becd8d1eb3f942dfb
strict-transport-security: max-age=0; includeSubdomains
x-cache: HIT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1397
last-modified: Fri, 26 Apr 2024 20:59:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P5K25oaG8bbtjZco1toXsCOvo%2B2XHvsW5140kWdgxgUR7LCNdSbPWhJOlX%2BoCIt3y2ULXRCKDX0GP9O83TUdGlbuxPYDc12DBZHJ8otfthwTco3N%2BNEMBVDXgdI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c61f631bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/play-trailer.svg | 172.67.202.34 | 200 OK | 4.7 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/play-trailer.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash0242c3a16be471023ee4e484a76cb850 811c46ab5800fc814b427e9469b5b55e7f41a35c 6f014889db48c67c7e651a9377b0415007ef9766fbf2ba90a1180b9e539c176a
GET /static/yts/images/website/play-trailer.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-122a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R7TTMJCFdN0%2BID5WGNo8NWrt4HtuFogSCAwOf3bTgmH9GCBUb3BlTzT%2FZRsQvACeEQHpdIRWuRU6DwHdC%2FFFnG9t6YX283pb81HvGVk14Y%2Fk9oBvi7SD9yOOd6tPw%2F9oU2QiUAk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c5981856ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/image/logo-YTS.svg | 172.67.202.34 | 200 OK | 23 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/logo-YTS.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hashfdd85bfbf80d872ea41b942cf21d1db9 6a2d54565cbffa3af342a63931e412ad8837f92d 2234cb288342eab0edfb65ebda4189cf47b40a4b639a25af62c57c03f7ace459
GET /static/yts/image/logo-YTS.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Feb 2024 02:51:28 GMT
etag: W/"65d413b0-5b34"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hUNldnSzKxgdN4nAY3iqCyDIyCEFWpbCQUMEnSQUusRT96piEJSl%2FRYh1BBdmwTFZRVj1AvtaamjEoZelli2tYm62Oax7f2BO%2BPMK%2BKHgVSMhujZn%2BXbfXIr8%2F%2B3%2BzXkTWAMKsk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c44e9456ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2 | 172.67.202.34 | 200 OK | 3.6 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeWeb Open Font Format, CFF, length 3560, version 0.0 Hash4e54891305c71736de2da03f14b57434 fbf29db32b5514cad7a908167ce63c76a91a2f12 332ec1d337a38ad421deff49f3585da56563253756da3870b26b46bd025f96e4
GET /static/yts/fonts/icomoon.woff?fmg7s2 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: font/woff
content-length: 3560
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: "65d2c88f-de8"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4LGihPQeYVRmZeWzaqqxJrRSw8eCtSahgagWDpryYM0Rl8p53kERajjTr6IQ8jqbwacoi8tUT3vyqxgyprMlkY3MPeua1e0IG%2Bq3%2FX29Y9XRCuJcu9saLyyAyfm9jRsLWuDleog%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c5a82256ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 IP216.58.207.227:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20040, version 1.0 Hasha61c670a24d6794a95a9712f0d12b656 c9b3114b27790109ec51508f51f1a033ccfe0812 a4f5230d39a7a21971fe62ccde2443345638d2beaa369b752820390a687b91b6
GET /s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:52:28 GMT
expires: Sat, 26 Apr 2025 05:52:28 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:51:46 GMT
content-type: font/woff2
age: 55796
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| energypopulationpractical.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fstyle.css&l=3630&fd=79 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1energypopulationpractical.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fstyle.css&l=3630&fd=79 IP172.240.127.234:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectenergypopulationpractical.com Fingerprint94:C5:27:9D:BC:2E:20:2F:4E:B0:20:AD:FE:C9:15:3F:F1:78:5B:B2 ValidityWed, 24 Apr 2024 15:03:55 GMT - Tue, 23 Jul 2024 15:03:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fstyle.css&l=3630&fd=79 HTTP/1.1
Host: energypopulationpractical.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=6f1e5233-1bb7-4910-be3f-cf8f04511c20:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 21:22:26 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| en.yts-official.mx/static/yts/images/website/1080p-quality.svg | 172.67.202.34 | 200 OK | 2.9 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/1080p-quality.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash3bcafca097344993580b747f088e7715 c2d58a3d4ae585c470489fd1f41d20f29ff266ca 59119beab43729f25cd7387785275dee4b80fffb59d1cdfa9bf778066b1ab3b6
GET /static/yts/images/website/1080p-quality.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-b77"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dm4Dz%2FURmZuuL3ARbDFr2hoKIdzWnJ42SJ1pV4HZmktJOTKou1QVYiautqImlAEX6DeqileH0DcHL%2FqUqPeo%2BR5hMau2YYMxEvFBv0EPM7MLo45KiMJZ9WFx4U5IbWee0afIf5Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c5880756ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/magnet.svg | 172.67.202.34 | 200 OK | 982 B |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/magnet.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hashb1f2c0a1384b292d61d6ccdb9b4de056 24cb951e1e6da31c99ba0c45638e9d210de60a62 a1339a5f93ce740459f0ef5967f57827ecf0a708e3504146a401d4968650c854
GET /static/yts/images/website/magnet.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-3d6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G7fY0pH2L5qkKTmX8DT2tgEm3Vei%2Bgv8DsTLoaTyy15wXEdAI0Kdh%2F%2BBJDZ4crs%2F7tqCMkuZnAf0BYelgg1E%2BHmWmTSpF7LmTMOj9qHsDUgp838dhz3tENs9Y4B4Axb4%2F7kLZTI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c5881056ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/js/script.js | 188.114.97.1 | 200 OK | 386 B |
URL GET HTTP/2cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/js/script.js IP188.114.97.1:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (399), with no line terminators Hash022602a468da44628060800173771da2 9be813fbfebbcb2aa46d8c6b8abec68b3d16c89c 6742c376e658c34d09b2dc5772bd798e3cd52bb265758bac5bce184f8ee7b5cc
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:22:25 GMT
content-type: application/javascript
last-modified: Thu, 01 Feb 2024 14:48:15 GMT
etag: W/"65bbaf2f-182"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 447015
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=txC5krx%2BNOyTNZ6dH0vQHG7YirqW7pOC%2B29XhEGhPnsdqUWNEogLXGQltlduw5tpgQ94oP9s4if2nxI%2B9uB4OyusskGCW%2BDo0yre7%2BbYqnMsPWjp%2FuYtt1Gji8aGj%2FNUkqwMa0RT%2B%2BT0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0cfbfbfb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| energypopulationpractical.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fjs%2Fscript.js&l=386&fd=77 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1energypopulationpractical.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fjs%2Fscript.js&l=386&fd=77 IP172.240.127.234:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerLet's Encrypt Subjectenergypopulationpractical.com Fingerprint94:C5:27:9D:BC:2E:20:2F:4E:B0:20:AD:FE:C9:15:3F:F1:78:5B:B2 ValidityWed, 24 Apr 2024 15:03:55 GMT - Tue, 23 Jul 2024 15:03:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fjs%2Fscript.js&l=386&fd=77 HTTP/1.1
Host: energypopulationpractical.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=6f1e5233-1bb7-4910-be3f-cf8f04511c20:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 21:22:26 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| vidsrc.to/embed/movie/tt2543164/ | 172.67.181.24 | 200 OK | 4.5 kB |
URL GET HTTP/2vidsrc.to/embed/movie/tt2543164/ IP172.67.181.24:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.to Fingerprint1D:91:BF:0E:81:D2:1C:22:D3:9C:9C:8D:88:3E:B4:E5:E2:68:DE:FC ValidityFri, 22 Mar 2024 12:30:27 GMT - Thu, 20 Jun 2024 12:30:26 GMT
File typeHTML document, ASCII text, with very long lines (4601), with no line terminators Hash5da6c7fe75c3fcf55b390dd0ceec4e3d a99c67a7187a07e13cb7da03cb2dcc06da0b3133 0674583e6706e93604db6757a7d21b306c38ec64c68c6b03aa558cda21397f01
GET /embed/movie/tt2543164/ HTTP/1.1
Host: vidsrc.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: text/html; charset=UTF-8
e-cache: HIT
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zmpj5aMfqpOfxUKJ5bTlChkAyYub%2BbsxzyCHtjvN3HLnrJMzjQZn0DqKKrPdgCdQ7fvKt%2FrD36YFbmI%2Btr6hoy94hxGXNZhfd8yUkm7sMRp%2B40J6FIWSIHiXAFA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9a0c49e761bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/js/jquery.min.js?v=1 | 172.67.202.34 | 200 OK | 84 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/js/jquery.min.js?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators Hashb0dc11d0a434aafe88908c7f33d71095 1327f754ff87d26bced46568543207e9df190aaa de4b3c3d1dc2506b6693f0f98884e1dc074cda9d66cab39b7b48a115fdfc4c0f
GET /static/yts/js/jquery.min.js?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: application/javascript
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-1497d"
expires: Sat, 27 Apr 2024 00:40:37 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 31307
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BTz8tufoMql13AYeWpcFTrgoPZb%2F%2BB%2F2KNg2hQ0bmCdrXil4FpUIM8lE0iC%2FCNCA8Ja2RQ%2BuenyUS1Fpk%2FCaSfwJjqc5YYJx0YbY0NZzLTvUPLlALyMwktYnPJfMlwK7JbYmU8o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9a0c45eaf56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.106 | 200 OK | 7.0 kB |
URL GET HTTP/3fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.106:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeASCII text, with very long lines (7193), with no line terminators Hash16b49a99486594c0b42d9bd7821deb2c 2fb46e5e86d6b37d4497cc04bfd89b3cb33a276a 3f3540952441e06ef81189cf63d46bac242804e386779dbb0cdd78ed10025c21
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 21:22:25 GMT
date: Fri, 26 Apr 2024 21:22:25 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 | 104.17.25.14 | 200 OK | 150 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 IP104.17.25.14:443
Requested byhttps://vidsrc.to/embed/movie/tt2543164/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 150124, version 772.256 Size150 kB (150124 bytes) Hashc64278386c2bbb5e293e11b94ca2f6d1 6b99aa650bd12a36caa14e0127435d8f4cd3ba73 7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880
GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vidsrc.to
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 150124
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "6421d693-24a6c"
last-modified: Mon, 27 Mar 2023 17:46:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 201541
expires: Wed, 16 Apr 2025 21:22:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oOmmhsFwgG6yUHhBdzq8jqIUItown19z1KDbO7cW5Ngv5W4JFT4d%2Bpw75ANleG%2BqSSjsdFpc1Lnx9FxcuAWs%2FtB1WAUzjAsGdnHKhoMl5KqOIqaOI9L8cZPtT0QjlGEmCqm1RP1m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a9a0c7f87d7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/icon-search.svg | 172.67.202.34 | 200 OK | 894 B |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/icon-search.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash9caad64a555d10c835c1e121b53743b0 5db8cc1d36d939a65725c4869ebec8cc0b5ce9e3 fa70e1614aed8ae3b0463b4d9884de60fd528951a068e6a13a60a329ef93face
GET /static/yts/images/website/icon-search.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-37e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ltmALtyrvTp5wuMzVChuvtDeUx4p1onPmIn2BmFEDaudFI%2FNIW%2BinTdQzwycZ%2BtejRMXRr6cVS43McEieN5qg%2Bi%2Bft1lxjD5mvfOvXsbI5kYBfCi40lULC6HbtlmyJYGkHIqQus%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c5880256ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/720p-quality.svg | 172.67.202.34 | 200 OK | 2.3 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/720p-quality.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash0243315d20763efcf6b17f0d6b2ffb67 ab981c0c8a34d72f8f714be0eae96f404e434dd4 d7cccf166cfb73bded63e922e00ff99805a3ddbf0024a00904e39bdb3994f33c
GET /static/yts/images/website/720p-quality.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-8e1"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aYgBu%2FbHzvRhSULhwgnO%2BIhSt%2Fl1AoYycOlH%2FIuUCBmEneWPyoXGGZKYMmyJG7YSPKNcBRgZkW7nn3ZWgA9KIB4mQtLOmMFuB7oR50aHV7aARy%2F34%2F8LCIvUE0yxXvC83R52AJI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c5881456ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/index.html | 104.26.7.19 | 200 OK | 1.6 kB |
URL GET HTTP/2cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/index.html IP104.26.7.19:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint84:82:6E:35:03:D4:C4:FC:BA:08:CD:C8:E6:A3:97:A9:20:2F:F5:49 ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (1642), with no line terminators Hashd086ac98379bfeb8250336ab371ad609 92031b5a736cd9ccd82410e38f51e9931b63cd2d ce2f2bb21f09fde1d48a137d2982c497595fae100b1258328b839a713340e6b9
GET /sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:22:25 GMT
content-type: text/html
last-modified: Thu, 01 Feb 2024 14:48:10 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 169941
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vLMGpr5koELmCm8aM2DVsK%2BHlgd8DJt9e9CzFsI3ZeGbFNWZjmDyw5JQC3CwxE1b5fR58BD0vqXcz6g4GBS2Oe01QvvwoUhZjSWe7vMVnMCXmytjhv7HVxA0PQTNUi1xyy%2FHzEY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0cf0cbb7127-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/movies/poster/october-gale-2014.jpg?v=1 | 172.67.202.34 | 200 OK | 30 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/october-gale-2014.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/arrival-2016/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash1c9a647bd71c1e2d69eb7ff730dbea0f 692c30709879cc8a5208ee508180e4df998750ed 4879d1b246370888525e829215646c29d6c2ea6554a3cbb70a14893ec54d8814
GET /movies/poster/october-gale-2014.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/arrival-2016/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:22:24 GMT
content-type: image/jpeg
content-length: 29613
last-modified: Thu, 28 Oct 2021 06:20:26 GMT
etag: "617a412a-73ad"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0hik7dg2Sn5tRG%2FYcyoOOdBOJz4c%2FP5uRPxwC5DCLwyVpPtfUuyk%2BJOMUTni3r260fQ%2FgjW%2Buk6dC4DndbG%2F5bAFYkbr9HEv%2B4%2BaT%2BO82gar5NI7NcB6b3aLUBD1GthcTTBxx9g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a0c45ea656ab-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Poppins:wght@400;500&display=swap | 142.250.74.106 | 200 OK | 1.6 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Poppins:wght@400;500&display=swap IP142.250.74.106:443
Requested byhttps://vidsrc.to/embed/movie/tt2543164/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeASCII text, with very long lines (1606), with no line terminators Hashaf52a7e30ecc42e4484ea19a9adf765d c4db1da944d399dbab91e367ac2a8724c31cd57f f795d20ee3721e15c2fa2568b74a6d39cd16329e91d7026cd7b4aa79f45fea44
GET /css2?family=Poppins:wght@400;500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 21:22:24 GMT
date: Fri, 26 Apr 2024 21:22:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|