| en.yts-official.mx/static/yts/image/default_avatar.jpg |  172.67.202.34 | 200 OK | 2.4 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/default_avatar.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 100", baseline, precision 8, 60x60, components 3 Hashe55b123ffd0b26cddf175715a76ff22d 0cbeba4643578c972bb79bf8e3b0b83a794df5bc 9412c68d8f2bad5e7abe0ca709a3258cf8c2b7a14bcc1654abf2316debf902cc
GET /static/yts/image/default_avatar.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/jpeg
content-length: 2449
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-991"
expires: Thu, 30 May 2024 16:20:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 662065
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ibv3vB5TXduMhinEuosJ2u%2BdvL%2FgpT4QjXmvV%2BUOmhNy44YR8BqSKP0%2FfqE667BPVP6%2BxQhDCQaylY6U10wf4ptM7QHUvEC%2B0tQa%2B891mKx%2FGVv0ezyA3tehyNioh2dZnuk%2Bx%2Fs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88080011b8d55684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/jerusalem-2013/ | 172.67.202.34 | 200 OK | 40 kB |
URL GET HTTP/3en.yts-official.mx/movies/jerusalem-2013/ IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeHTML document, ASCII text, with very long lines (1137), with CRLF line terminators Hashc181bec004a39aae0816bebc2006a2b1 46452cc103c6aff35cc3dd2b61bc555a573ee166 3bcdb5189b73bcb843ea1ab5d7d767429b8d3e9bc260bd3e62ce7d8e573301e6
GET /movies/jerusalem-2013/ HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 08:15:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2BGqW3OKASty5IOxgdjWV3ce9XRhdH5m9ljwUnz2Mj%2FQ7vc2b7DGN5gyThw%2FPMXu5n1EHd0GM8oIUqdez5eR3KHCr7YnbLiTiWIsQNYGBKmC9qkJQIQJqPRqpMQhw4gNceSoKWc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8808000d9c54569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/movies/screenshot/jerusalem-2013-medium-screenshot1.jpg | 172.67.202.34 | 200 OK | 25 kB |
URL GET HTTP/3en.yts-official.mx/movies/screenshot/jerusalem-2013-medium-screenshot1.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 350x197, components 3 Hash81f9133b1b39e2c25781c73a4c768683 ff07dba52dab368832d19725e2ad2790751eb7b1 344a3ba2c5d4d92ea71368087f2eff58db1173928762db0c5404b4e773cffcd1
GET /movies/screenshot/jerusalem-2013-medium-screenshot1.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/jpeg
content-length: 24560
last-modified: Thu, 28 Oct 2021 14:10:13 GMT
etag: "617aaf45-5ff0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wpi4y6KmaSyJK4G%2BTi36nSFTa9%2FuM49UjpdPynJIUI3mFNN3IC9dCdhW1jsrhmYpiPgokcJgjytwOXy7PuNpR%2FK6dbUMb7X9Q8kHsnY2O%2FEP6wDIzSy79xP3vgohJxvdEgZwsh4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808001198be5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/a-woman-under-the-influence-1974.jpg?v=1 | 172.67.202.34 | 200 OK | 22 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/a-woman-under-the-influence-1974.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash265f92a816eb1624f8dd7d01e534a3c3 006a69f95661dff1e614ae0e6fd868b97d467a4b 425af3c591435397ef5b1221746c4a3b786e4aa97c4f37c19798ee81a69bf262
GET /movies/poster/a-woman-under-the-influence-1974.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/jpeg
content-length: 21979
last-modified: Thu, 28 Oct 2021 16:10:53 GMT
etag: "617acb8d-55db"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cx%2FxtdW7%2F3YV10TctMpefZsublrLSiWo5v8Azi%2BqzrzJUY0Me4ivLIf9de745hm3ql3tlwXCKnbr5DoeN3hrBW8QWcJoNK26Lp6WD57hnlaScJmiOL0%2BeFCcnoi5k8ZxhnTbUEs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808001198ba5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/love-rosie-2014.jpg?v=1 | 172.67.202.34 | 200 OK | 34 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/love-rosie-2014.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash8f0613bbcf533ea365a05eae4d83b363 0774dda5f4f3ae0d65d68540b981e7ea315561c1 46d84fda7d7e2e887c06abacce5c87593028b80008406010b4d6cc7c509d643b
GET /movies/poster/love-rosie-2014.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/jpeg
content-length: 34372
last-modified: Thu, 28 Oct 2021 13:03:13 GMT
etag: "617a9f91-8644"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SKj%2B9UKO3qVcF35JEC618VpJieNjsp812IPAgAmxHv%2FtJMinQCYofo3ks4Hkd5GwUMWmZbixVN2IkXUtWp3VHmQxstqGnlMzbWdMhb4wFYNkeVaqUR7fHgtpJTAIv%2FKDNmuJxOk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808001198bc5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/the-count-of-monte-cristo-2002.jpg?v=1 | 172.67.202.34 | 200 OK | 20 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/the-count-of-monte-cristo-2002.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashfb01e3c1cead59e4f9230942483c1cd6 16cbfe435419e65e999ffb43616a93a4c8b4e08d 7b75fdc43d87bc60cefa73ea530f55c137023bf45ff322dd9d12fb835923c115
GET /movies/poster/the-count-of-monte-cristo-2002.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/jpeg
content-length: 19618
last-modified: Thu, 28 Oct 2021 08:24:46 GMT
etag: "617a5e4e-4ca2"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=magLUvKBqohVLjbJaLkO%2F%2BpPxvYiT6%2BaZGk2vZyWEZGWe6%2BRhdZHfLEEr%2BtsT4bJoe4ik5YT%2F%2F62ocsN%2F4P4KeAnflJ2ErNk25n12UFxDw%2FLZ4q21IvwSBW%2BfMjPBxadsD9x%2BX4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808001198bd5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/screenshot/jerusalem-2013-medium-screenshot2.jpg | 172.67.202.34 | 200 OK | 24 kB |
URL GET HTTP/3en.yts-official.mx/movies/screenshot/jerusalem-2013-medium-screenshot2.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 350x197, components 3 Hash9fc1acad38755bb7664f8b503ebfd6b8 18db332e9dd8b966ae7c8a0dfe227641ff562531 68a98312c3657f435a0e34589c82c2792b573ae56f2f2ae59404d2fcff5dd179
GET /movies/screenshot/jerusalem-2013-medium-screenshot2.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/jpeg
content-length: 24158
last-modified: Thu, 28 Oct 2021 14:10:14 GMT
etag: "617aaf46-5e5e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vXW%2FoPpLia1uO%2FPe%2B2ZKJYk6wGV2tEwX84y5%2B4a89UjZtWnbIQZFPDpeh8o6%2FrOyi6WZHWv14LmVQkqoy4ORHth043xK7I2ApgwdE6si58DqK6GglSJKrS9oHjKA1jNhryhwakk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808001198bf5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/screenshot/jerusalem-2013-medium-screenshot3.jpg | 172.67.202.34 | 200 OK | 29 kB |
URL GET HTTP/3en.yts-official.mx/movies/screenshot/jerusalem-2013-medium-screenshot3.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 350x197, components 3 Hashf38a03eba131909828d4fec8d85ecb05 e30ce3027460c7b46fb8f6c4407b61a266f07a59 eaf8d4c35b8d4dd5518a986909e1db92f1f31eb2008cf283d4bbad203c678256
GET /movies/screenshot/jerusalem-2013-medium-screenshot3.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/jpeg
content-length: 28623
last-modified: Thu, 28 Oct 2021 14:10:16 GMT
etag: "617aaf48-6fcf"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=toLaQMmZbw8zrMRchLvnCy1JcsNmuIArjXp9ywTXQCbCa2bbVM5YXrheFf6XUnfpVKrFP3mmmnlsFJvMejN%2F%2BWKNWBgOQxoXxt4RnTN1rG0epu6HSRIvHe9Om1fDo%2BD2g0UYsmY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88080011b8d25684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/jerusalem-2013.jpg | 172.67.202.34 | 200 OK | 44 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/jerusalem-2013.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash001fa2df60d89d639cd045c2593e2a93 eb18c1421d60f4e83196c149d4dde0cecc1ed3ed 1082b6802f65f6ae021b5b94857006260fc1602ee487e5c268f3139adfdfe35c
GET /movies/poster/jerusalem-2013.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/jpeg
content-length: 44491
last-modified: Thu, 28 Oct 2021 14:10:10 GMT
etag: "617aaf42-adcb"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nxPAmua2mVbxCpPka64RYJ7u2o%2FTWaJcGkcZgfh6DlRwZZUKGzt6m3i7TkjyjK%2F0cCsYw7qD2rElRAYZernMYFk%2BdxVqbKo8NLlGULE35KXaxDK5knTYHOcWQellTz9LZkpSQy4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808001198ad5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2 | 172.67.202.34 | 200 OK | 3.6 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeWeb Open Font Format, CFF, length 3560, version 0.0 Hash4e54891305c71736de2da03f14b57434 fbf29db32b5514cad7a908167ce63c76a91a2f12 332ec1d337a38ad421deff49f3585da56563253756da3870b26b46bd025f96e4
GET /static/yts/fonts/icomoon.woff?fmg7s2 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: font/woff
content-length: 3560
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: "65d2c88f-de8"
cache-control: max-age=14400
cf-cache-status: HIT
age: 799
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zHy6%2BFsycD0MQdLO08U29MjQd0oyGeIj9mq9uF1o1qin%2F2%2BYFhPiWA1sTuAFnMC2osN1s0Y6q%2FUn7UDOhI5EpsP3BZfXKQLKvcz7epi%2BlTPT9JWC1qymUsX5MBDvpuXMdMyAUAU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800146b935684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/fonts/glyphicons-halflings-regular.woff | 172.67.202.34 | 200 OK | 23 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/fonts/glyphicons-halflings-regular.woff IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeWeb Open Font Format, TrueType, length 23320, version 1.0 Hash68ed1dac06bf0409c18ae7bc62889170 22037a3455914e5662fa51a596677bdb329e2c5c fc969dc1c6ff531abcf368089dcbaf5775133b0626ff56b52301a059fc0f9e1e
GET /static/yts/fonts/glyphicons-halflings-regular.woff HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: font/woff
content-length: 23320
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: "65d2c88f-5b18"
cache-control: max-age=14400
cf-cache-status: HIT
age: 425
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fnfw%2FtjRVfWoV1QUbdSwOJucbMRHURbICRusXwKbCvOstmn5uSl0LR%2B6bd%2FZXLWNUMC3WLSdqWUQd24rOzdNoYoOs7PVthiQSR1L8vadCr%2FM9J2mWkfZ7MQjhac4lP8vbz552fg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88080014dc085684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/style/modded1.js?yify=1 | 172.67.202.34 | 200 OK | 72 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/style/modded1.js?yify=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJavaScript source, ASCII text, with very long lines (65452) Hash60de675fcd2844a3ffbb68550d303076 8a53cc2f554a8ef1f58f3fd1996a3c3552ea5472 1c821bdab262418e3742bfa3c295c3b668724f7e8898b45638958a898bd93d33
GET /static/yts/style/modded1.js?yify=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: application/javascript
last-modified: Mon, 19 Feb 2024 03:18:38 GMT
vary: Accept-Encoding
etag: W/"65d2c88e-27b24"
expires: Wed, 08 May 2024 20:01:48 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 801
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fUYXPpgXsH81plmJOZgw4E767FeGuJfylfu3lKJh385ZauxUYPuic%2FimeT50M%2BMS7UEgEDI0pw0PQLrJeq%2FqkLZc1RWadnudwKdIBd95yZOd3A7gUX%2BsEq5fW0bQiDzVhGcjipI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88080011b8d65684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 | 142.250.74.163 | 200 OK | 22 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 IP142.250.74.163:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22052, version 1.0 Hashf0e48ce2beda9e8cbd7d915bf1b1ae71 3dc1cfff1759b0959cc7fb17517651ec850d584d b2504b3c20c2feb37e78773b788dd09a9cc43c9f36086bc1e2f83a6366ebaa34
GET /s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 16:38:06 GMT
expires: Fri, 02 May 2025 16:38:06 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:00:24 GMT
content-type: font/woff2
age: 488223
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext | 142.250.74.74 | 200 OK | 21 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext IP142.250.74.74:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash5661e72ce0d8600fcfad0421090fdc36 ccb350470965d3d3cbe54ac7b5bb8b1e054ec9a1 0bcde5323d64b21bbc3a22638c2cce5ee4b3c34a6efe16e6b30ee196fc69e402
GET /css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 08:15:09 GMT
date: Wed, 08 May 2024 08:15:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cawadversityinheritance.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js | 172.240.253.132 | 200 OK | 28 kB |
URL GET HTTP/1.1cawadversityinheritance.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js IP172.240.253.132:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectcawadversityinheritance.com Fingerprint98:A5:90:6F:84:77:92:A9:84:C5:F4:B2:1A:32:B6:38:4A:43:F7:E9 ValidityTue, 30 Apr 2024 14:56:47 GMT - Mon, 29 Jul 2024 14:56:46 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash65c3301510493f8c0346339b2adc0252 d1c80edce00bd138f84a7c5638ef15b898d9a203 07b233ba07d01aef0ec1e4fc1abfeb08d7eae7319a2ca5000096fbf47fd010f6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /b1/27/0e/b1270e96b85c3dd200807d09a940c676.js HTTP/1.1
Host: cawadversityinheritance.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 08:15:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 85b3578e332903a604ea6438d585b88e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| cawadversityinheritance.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js | 172.240.253.132 | 200 OK | 16 kB |
URL GET HTTP/1.1cawadversityinheritance.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js IP172.240.253.132:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectcawadversityinheritance.com Fingerprint98:A5:90:6F:84:77:92:A9:84:C5:F4:B2:1A:32:B6:38:4A:43:F7:E9 ValidityTue, 30 Apr 2024 14:56:47 GMT - Mon, 29 Jul 2024 14:56:46 GMT
File typeJavaScript source, ASCII text, with very long lines (44044), with no line terminators Hash08d99313408abfb19428702ec344aec7 a2fce1f071503764f0dcdfb806efed89ed893429 fa716ae5346722485bfed4f8f20c6d4e1f893f1681af61e67c002c1c87fd4a3a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js HTTP/1.1
Host: cawadversityinheritance.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 08:15:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 421fb31ecb4542b3c67e380d62a2e32b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| en.yts-official.mx/movies/cover/jerusalem-2013.jpg | 172.67.202.34 | 200 OK | 62 kB |
URL GET HTTP/3en.yts-official.mx/movies/cover/jerusalem-2013.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=96ths 27rns, software=Video Thumbnails Maker v8.0.0.0a, copyright=SUU Design], baseline, precision 8, 896x504, components 3 Hash82045ed3b6787f0f13fe0e370e6b507e 55ba0bdbaa2ee99f71c48fa83b6ef70fd8795a11 0e5d0ae84c1ac4a7ddf371cc114289ed7c99be144d336985ab492b2cfefcc870
GET /movies/cover/jerusalem-2013.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/jpeg
content-length: 61943
last-modified: Thu, 28 Oct 2021 14:10:11 GMT
etag: "617aaf43-f1f7"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V0cdcAl5uMoX8AHaXjXfUz141jqfOqd3DW2Vwp43uRFn17aJdmUc%2FKEXyIBkxEsRDOMmquHAW9sPvHtwnqv7vDEnpmSFPsh9pS2dmP53tNXHEXEZykUERzRhGCigFFlpm4XGI1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800141b445684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ocsp.r2m03.amazontrust.com/ | 3.164.222.26 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP3.164.222.26:0
Hash3a1e61864f6877260287982fa7e36085 6d426b2327915af4f120ff6b18ebd20ed03c2a2b 9ee2ee3f0b60937becb4aa057c348332dd277e32b268f5c0ea260c0d2a2af498
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 08:15:10 GMT
Last-Modified: Wed, 08 May 2024 07:18:25 GMT
Server: ECAcc (ska/F7A7)
X-Cache: Miss from cloudfront
Via: 1.1 0369688214835f42c0769e35bb5bc592.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN53-P1
X-Amz-Cf-Id: Uke6GFyQfZxE_qgEg2XLYrz-JKTQsk9frXXLB1Qb1pJy-wdouRf6Zw==
Age: 3405
|
|
| ocsp.r2m03.amazontrust.com/ | 3.164.222.26 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP3.164.222.26:0
Hash3a1e61864f6877260287982fa7e36085 6d426b2327915af4f120ff6b18ebd20ed03c2a2b 9ee2ee3f0b60937becb4aa057c348332dd277e32b268f5c0ea260c0d2a2af498
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 08:15:10 GMT
Last-Modified: Wed, 08 May 2024 07:32:07 GMT
Server: ECAcc (ska/F75B)
X-Cache: Miss from cloudfront
Via: 1.1 2641ce37a88af457fa707094ebf66736.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN53-P1
X-Amz-Cf-Id: uu0r74p2K5FmkG7E50DOFMtV4g76YpzlddnCLWYpTMKf0bPAHFXLZg==
Age: 2583
|
|
| proftrafficcounter.com/stats |  18.192.70.27 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.192.70.27:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashfe59f2118e1adc2e926e678035b63ead 4070f1076238abb4696591e296ca39264f305027 89bcd463d1b1a93ef0aac19e14c5dfc94e6288c073bcfed032e1909b4306e787
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 08:15:10 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://en.yts-official.mx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=4b7c4392-68d7-4095-9124-9ea06d6409f5:2:1; expires=Sat, 06 May 2034 08:15:10 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 18.192.70.27 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.192.70.27:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashc4214450c611a75c50b3db2f23475dcc c4e063668146c4a770e50cfedd8d565b6aca3df8 1973412dfb05f164b190f0c3c91917cca2428c9f4e9040bf43669ca023ae11ff
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 08:15:10 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://en.yts-official.mx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=4ce10bc8-a722-44da-bc6a-6a7444ae9387:3:1; expires=Sat, 06 May 2034 08:15:10 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/css/loading.css | 172.67.202.34 | 200 OK | 962 B |
URL GET HTTP/3en.yts-official.mx/static/yts/css/loading.css IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeASCII text, with CRLF line terminators Hash735be481dc2ed59fcb501ab22457f945 8137bf7711e449275771a667fecf7a06809d4636 fb1f79ab8d1f04f5a35a51e754bb148d260e38c259fff037386b99e4f622da61
GET /static/yts/css/loading.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-b13"
expires: Wed, 08 May 2024 17:00:14 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 11695
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JNwWbl%2FtWOT%2BwL58P11%2FctwOO3MP4gdL38FO5DC%2BwEAVk86Mo0nae8I1pl1f7Nrqqi9milbgHcWL9y6%2BT%2Fl9R6ksU2IchLoh27F39V6RwBa0iQjTHRWJvKAkUuP3ukP4opu6%2BC4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8808001198aa5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| downstairsnegotiatebarren.com/sfp.js | 172.67.180.87 | 200 OK | 34 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP172.67.180.87:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 08:15:10 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 9f63f8e8efe320f9ff75b0d8dc1bf728
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 08 May 2024 08:15:09 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zQ%2BJ1riasNWWu%2BPqfSkPq3BwrdlRqKSTkz79HsDPbUGeBK6vRZvedZSt63vc8GfWOG5NLIu1l7h92SM3SrJnl10tV3QVVOr2j1TuoJ1a5jKn5yUrq0CZE1CLEV%2FLW5XXAa%2FWeLGioEJdEmpr18WjMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800173e6356b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/image/favicon-16x16.png | 172.67.202.34 | 200 OK | 619 B |
URL GET HTTP/3en.yts-official.mx/static/yts/image/favicon-16x16.png IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typePNG image data, 16 x 16, 8-bit/color RGB, non-interlaced Hashea830fdd4f9a6d19aa7455dabdac987a b0d567d6b4d40959e1bd44032f6bc2331057b319 71148160c085a70d1af7708c1d52cfcf39f8ef6e4ce13f0f20c080b2e19195db
GET /static/yts/image/favicon-16x16.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=4ce10bc8-a722-44da-bc6a-6a7444ae9387%3A3%3A1; pp_main_b1270e96b85c3dd200807d09a940c676=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:10 GMT
content-type: image/png
content-length: 619
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-26b"
expires: Thu, 30 May 2024 22:27:04 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 640086
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TtU3XBxVd6OSLaxz0M3PiVDjVLek%2BVq6GAQ7KwcRG2FTyLkcyt%2BANgs0GXYmrNsUKZAo5U8mEA1cSZS3O9jU0Hvw%2FHVcqOepFhq4%2FFmSmIO0R05TNp7bD7cFq9CxsfIj%2FdRMgu8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88080019e9585684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| capaciousdrewreligion.com/advertisers.js | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com FingerprintBB:9C:12:88:24:43:D4:47:71:3F:F0:A4:BB:E1:85:65:CE:E7:92:E4 ValidityMon, 06 May 2024 02:35:23 GMT - Sun, 04 Aug 2024 02:35:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 08:15:10 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5e3c7b01876df17ca00362686dbbe977
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| en.yts-official.mx/static/yts/fonts/fonts.css | 172.67.202.34 | 200 OK | 2.5 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/fonts/fonts.css IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeASCII text, with very long lines (1316), with no line terminators Hashb482ea655a7bad066f5aacbcbd1f8ff9 7b48d2275fc5356ae4528275502bb520244e8a4b 38fe96c34e2d963f298b4827f2ddc5a13fa1bcbe420cbbd0b5b907d5613ad1bf
GET /static/yts/fonts/fonts.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-524"
expires: Wed, 08 May 2024 17:00:13 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 11695
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7JwGZYVk9fcBzW4RXxdXLXIu0IQq3SsN5CNdD1NmwaVbrX4RdO%2FgC4K7Wrl%2FdPffMuJI96UFlBnX2FFqijQd%2BvgazVhLfd3DnnGyVO6%2BVe%2FNz7j2jsvJnmrPB23Xp4P3c5bxOks%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8808001178975684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/image/logo-YTS.svg | 172.67.202.34 | 200 OK | 8.5 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/logo-YTS.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hashfdd85bfbf80d872ea41b942cf21d1db9 6a2d54565cbffa3af342a63931e412ad8837f92d 2234cb288342eab0edfb65ebda4189cf47b40a4b639a25af62c57c03f7ace459
GET /static/yts/image/logo-YTS.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Feb 2024 02:51:28 GMT
etag: W/"65d413b0-5b34"
cache-control: max-age=14400
cf-cache-status: HIT
age: 801
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IiDQ1cyk8TOnUYR7conWjuTJyM93q5SiMKbmuLXD2h1TEBqoAXfgCRmd6Jm7ymeV%2B9k4pYH8YEoa6d2O%2FVr%2FK1ZRp7b8ySq%2Fq3WHcgarUxVFDUQsJCFGovLKQtGGVwja4BSAvlU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808001198ab5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| footprintsfurnish.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=4b7c4392-68d7-4095-9124-9ea06d6409f5%3A2%3A1 | 192.243.59.20 | 200 OK | 8.3 kB |
URL GET HTTP/1.1footprintsfurnish.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=4b7c4392-68d7-4095-9124-9ea06d6409f5%3A2%3A1 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectfootprintsfurnish.com FingerprintC0:7D:8B:CA:31:11:00:D0:03:02:79:93:9F:DE:2E:1C:76:8D:3D:72 ValidityMon, 06 May 2024 08:04:59 GMT - Sun, 04 Aug 2024 08:04:58 GMT
Hashdbe7ea20221d125a23e8379061a8f322 3c980514fdfaf3811f73546f23d32be3c9371afa d71787395690a66d00226706559878ce47f1a8c5b18206dd90cb7314235a375b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=4b7c4392-68d7-4095-9124-9ea06d6409f5%3A2%3A1 HTTP/1.1
Host: footprintsfurnish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 08:15:11 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://en.yts-official.mx
Access-Control-Allow-Origin: https://en.yts-official.mx
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16587847; expires=Thu, 09 May 2024 08:15:11 GMT; secure; SameSite=None
uid_id2=4b7c4392-68d7-4095-9124-9ea06d6409f5:2:1; expires=Wed, 15 May 2024 08:15:11 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 09 May 2024 08:15:11 GMT; secure; SameSite=None
uncs=1; expires=Thu, 09 May 2024 08:15:11 GMT; secure; SameSite=None
pdhtkv29=true; expires=Thu, 09 May 2024 08:15:11 GMT; secure; SameSite=None
uncs29=1; expires=Thu, 09 May 2024 08:15:11 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bcabdad947a6d6dde215c5a6ff9f58d2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| footprintsfurnish.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwW8bxReedfM7%2FSQkUA%2BgguQDhyIRZ3e9XnvpoaKEVIHQRG0R3NDszqwzZLyzmtnxOjlFVEK9Ybhw3XxOGgEVaq9IVMipxCESUswpB3LhPwCpNxCysTC8w7z35vtG880379MDe0F8WHq%2B%2Bp7aE1LSlVbDrV%2F90POu1TdEZgf1QSf8KAyu1XX%2FjShsuK%2FVb%2FJkR634rue6nuvV14TmqRqsTEGI%2FGHkNSK3EfgNrxVgoP%2FbG%2BvAUAesf0FegGCTpafOZYhkjKz3aJWbnULlr7%2Fds5IWSqPPjt%2FPdjJVZugtylQ7SLPjORvKnK09gcqOZnKh%2Bv8QYzEhzo9PEGfHc5GI%2B4cznbEEzxCz%2F6Psj8HlGIKOkah7EOyMAAnDrU1kvQe3lC7p7t8onaITsvTsd4hyQpZ%2BuYys9%2B0NKQb1O0raQqjMYJBWEIMxRHeM3J6g2KtBlCdIik8g2E9k5dkGst7hppEKgp2%2FGsTtJGhG%2FnLYYe3lwI1ay5HnB8sRp27IwsCN0tbMICHGEOkYkg9BTQ3WOLDCgU0d2NxBj53XE8%2Fz2i5LqNuJkqTJ2jwOmevRdupRzw07sMn0DUMU%2BRCJHCLR%2B8j1PnbE52etd6DtDzDbFQxzYAqCPqtQcoLSEJSUoBQEZUFQ9qsjJo1vqgdMGht78%2BzPc7MaqaJ7QI9U0eUZAdVDaFYd5Bfk%2BZmHf7x8Ezv8vO5SP43ilKfUZ60oDtsdP20HnZjzJEqbLocRFYSpgRoHe2JCXlp%2FEbmYkP99%2BSdiegIjT5AIB9S%2BAlpWoNsV9rLj3cI0VMbBVIW8WEKx6xzIC3Jldvn65mPw5PT6r81ZINEVcl3hY%2FGUoCvvj26rkhzeVqUhjzfzQvTEHp1%2B7p2CFvzS1%2B%2Fy3VJptr5qhl%2B9mUyBafnwLjfFBs2YyLqGfHNDMMb1mtIJJ9%2Bvmw94vGXN9g2rM5tvbL21tt7LNTdGqGwMOp3T3zQSMSHPXbk7m9ur321B6DG0rdCzp2QeEGqMJN%2BHyRf6jSLQcsGJcwelrUbajxebUhBIvuhpXMH8q48X9UjT6WkqqgNzH11dAy3uIetV6OsKfVmByiGMvTQqcn16%2Fee5jFjWRrHUtcNYavnFzObp8ghGnNfbzaZLw6jltduUt%2BPA76Shxyj1g9APQ9pEYSbpteCzvwAAAP%2F%2FAQAA%2F%2F%2FhYy%2BikQQAAA%3D%3D | 192.243.59.20 | 200 OK | 7 B |
URL GET HTTP/1.1footprintsfurnish.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwW8bxReedfM7%2FSQkUA%2BgguQDhyIRZ3e9XnvpoaKEVIHQRG0R3NDszqwzZLyzmtnxOjlFVEK9Ybhw3XxOGgEVaq9IVMipxCESUswpB3LhPwCpNxCysTC8w7z35vtG880379MDe0F8WHq%2B%2Bp7aE1LSlVbDrV%2F90POu1TdEZgf1QSf8KAyu1XX%2FjShsuK%2FVb%2FJkR634rue6nuvV14TmqRqsTEGI%2FGHkNSK3EfgNrxVgoP%2FbG%2BvAUAesf0FegGCTpafOZYhkjKz3aJWbnULlr7%2Fds5IWSqPPjt%2FPdjJVZugtylQ7SLPjORvKnK09gcqOZnKh%2Bv8QYzEhzo9PEGfHc5GI%2B4cznbEEzxCz%2F6Psj8HlGIKOkah7EOyMAAnDrU1kvQe3lC7p7t8onaITsvTsd4hyQpZ%2BuYys9%2B0NKQb1O0raQqjMYJBWEIMxRHeM3J6g2KtBlCdIik8g2E9k5dkGst7hppEKgp2%2FGsTtJGhG%2FnLYYe3lwI1ay5HnB8sRp27IwsCN0tbMICHGEOkYkg9BTQ3WOLDCgU0d2NxBj53XE8%2Fz2i5LqNuJkqTJ2jwOmevRdupRzw07sMn0DUMU%2BRCJHCLR%2B8j1PnbE52etd6DtDzDbFQxzYAqCPqtQcoLSEJSUoBQEZUFQ9qsjJo1vqgdMGht78%2BzPc7MaqaJ7QI9U0eUZAdVDaFYd5Bfk%2BZmHf7x8Ezv8vO5SP43ilKfUZ60oDtsdP20HnZjzJEqbLocRFYSpgRoHe2JCXlp%2FEbmYkP99%2BSdiegIjT5AIB9S%2BAlpWoNsV9rLj3cI0VMbBVIW8WEKx6xzIC3Jldvn65mPw5PT6r81ZINEVcl3hY%2FGUoCvvj26rkhzeVqUhjzfzQvTEHp1%2B7p2CFvzS1%2B%2Fy3VJptr5qhl%2B9mUyBafnwLjfFBs2YyLqGfHNDMMb1mtIJJ9%2Bvmw94vGXN9g2rM5tvbL21tt7LNTdGqGwMOp3T3zQSMSHPXbk7m9ur321B6DG0rdCzp2QeEGqMJN%2BHyRf6jSLQcsGJcwelrUbajxebUhBIvuhpXMH8q48X9UjT6WkqqgNzH11dAy3uIetV6OsKfVmByiGMvTQqcn16%2Fee5jFjWRrHUtcNYavnFzObp8ghGnNfbzaZLw6jltduUt%2BPA76Shxyj1g9APQ9pEYSbpteCzvwAAAP%2F%2FAQAA%2F%2F%2FhYy%2BikQQAAA%3D%3D IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectfootprintsfurnish.com FingerprintC0:7D:8B:CA:31:11:00:D0:03:02:79:93:9F:DE:2E:1C:76:8D:3D:72 ValidityMon, 06 May 2024 08:04:59 GMT - Sun, 04 Aug 2024 08:04:58 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSwW8bxReedfM7%2FSQkUA%2BgguQDhyIRZ3e9XnvpoaKEVIHQRG0R3NDszqwzZLyzmtnxOjlFVEK9Ybhw3XxOGgEVaq9IVMipxCESUswpB3LhPwCpNxCysTC8w7z35vtG880379MDe0F8WHq%2B%2Bp7aE1LSlVbDrV%2F90POu1TdEZgf1QSf8KAyu1XX%2FjShsuK%2FVb%2FJkR634rue6nuvV14TmqRqsTEGI%2FGHkNSK3EfgNrxVgoP%2FbG%2BvAUAesf0FegGCTpafOZYhkjKz3aJWbnULlr7%2Fds5IWSqPPjt%2FPdjJVZugtylQ7SLPjORvKnK09gcqOZnKh%2Bv8QYzEhzo9PEGfHc5GI%2B4cznbEEzxCz%2F6Psj8HlGIKOkah7EOyMAAnDrU1kvQe3lC7p7t8onaITsvTsd4hyQpZ%2BuYys9%2B0NKQb1O0raQqjMYJBWEIMxRHeM3J6g2KtBlCdIik8g2E9k5dkGst7hppEKgp2%2FGsTtJGhG%2FnLYYe3lwI1ay5HnB8sRp27IwsCN0tbMICHGEOkYkg9BTQ3WOLDCgU0d2NxBj53XE8%2Fz2i5LqNuJkqTJ2jwOmevRdupRzw07sMn0DUMU%2BRCJHCLR%2B8j1PnbE52etd6DtDzDbFQxzYAqCPqtQcoLSEJSUoBQEZUFQ9qsjJo1vqgdMGht78%2BzPc7MaqaJ7QI9U0eUZAdVDaFYd5Bfk%2BZmHf7x8Ezv8vO5SP43ilKfUZ60oDtsdP20HnZjzJEqbLocRFYSpgRoHe2JCXlp%2FEbmYkP99%2BSdiegIjT5AIB9S%2BAlpWoNsV9rLj3cI0VMbBVIW8WEKx6xzIC3Jldvn65mPw5PT6r81ZINEVcl3hY%2FGUoCvvj26rkhzeVqUhjzfzQvTEHp1%2B7p2CFvzS1%2B%2Fy3VJptr5qhl%2B9mUyBafnwLjfFBs2YyLqGfHNDMMb1mtIJJ9%2Bvmw94vGXN9g2rM5tvbL21tt7LNTdGqGwMOp3T3zQSMSHPXbk7m9ur321B6DG0rdCzp2QeEGqMJN%2BHyRf6jSLQcsGJcwelrUbajxebUhBIvuhpXMH8q48X9UjT6WkqqgNzH11dAy3uIetV6OsKfVmByiGMvTQqcn16%2Fee5jFjWRrHUtcNYavnFzObp8ghGnNfbzaZLw6jltduUt%2BPA76Shxyj1g9APQ9pEYSbpteCzvwAAAP%2F%2FAQAA%2F%2F%2FhYy%2BikQQAAA%3D%3D HTTP/1.1
Host: footprintsfurnish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=4b7c4392-68d7-4095-9124-9ea06d6409f5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 08:15:11 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bf35dc0262ebe4fce6789c91261ff404
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unseenreport.com/pxf.gif?uuid=4ce10bc8-a722-44da-bc6a-6a7444ae9387&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=8 | 192.243.59.12 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=4ce10bc8-a722-44da-bc6a-6a7444ae9387&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=8 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=4ce10bc8-a722-44da-bc6a-6a7444ae9387&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=8 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 08:15:11 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 349e9fbe0758768ce32c1641c5b9f85c
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| en.yts-official.mx/movies/jerusalem-2013/ | 172.67.202.34 | 200 OK | 6.3 kB |
URL GET HTTP/3en.yts-official.mx/movies/jerusalem-2013/ IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeHTML document, ASCII text, with very long lines (1137), with CRLF line terminators Hashc181bec004a39aae0816bebc2006a2b1 46452cc103c6aff35cc3dd2b61bc555a573ee166 3bcdb5189b73bcb843ea1ab5d7d767429b8d3e9bc260bd3e62ce7d8e573301e6
GET /movies/jerusalem-2013/ HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:10 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5d%2BXoW2EoYYB%2BcmI6h5d0axQMAwuBBtvVpv00u%2F4FfAemj7Fhpo5ZiF1dusEg2j%2B8p4c4QTwCyzvU2x5hJ3jHD3E8t90pS7oJzXg9fWCj4UfIl37TBGnA4xWFdY%2FX9JflkQMEVA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88080016fe335684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| footprintsfurnish.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html&l=1325&fd=348 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1footprintsfurnish.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html&l=1325&fd=348 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectfootprintsfurnish.com FingerprintC0:7D:8B:CA:31:11:00:D0:03:02:79:93:9F:DE:2E:1C:76:8D:3D:72 ValidityMon, 06 May 2024 08:04:59 GMT - Sun, 04 Aug 2024 08:04:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html&l=1325&fd=348 HTTP/1.1
Host: footprintsfurnish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=4b7c4392-68d7-4095-9124-9ea06d6409f5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 08:15:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/img/close.png |  104.21.70.253 | 200 OK | 591 B |
URL GET HTTP/3cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/img/close.png IP104.21.70.253:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced Hash9fd5bcb6103d86e317bd1eb019bcbe71 6b5a52ea669dcb74946f2bed4bdd7ec985026113 0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae
GET /sb/ssp/vpn/classic-push/small/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:11 GMT
content-type: image/png
content-length: 591
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: "65aa84fe-24f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 662247
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nekgJhoAUx9KNrHx6t1pLb4zf4AU56wOvcf%2Fgro6fCGS5goMas3p5f3vwDCEIcthglTZ6r6yE8eDQLAobgqcTZzzLbQn7Moz7wzEkOs5a78tlF2o0s4wEhUFk6n6OS7nrVFS3s3etMoK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800229d1db50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| footprintsfurnish.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css&l=78689&fd=57 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1footprintsfurnish.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css&l=78689&fd=57 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectfootprintsfurnish.com FingerprintC0:7D:8B:CA:31:11:00:D0:03:02:79:93:9F:DE:2E:1C:76:8D:3D:72 ValidityMon, 06 May 2024 08:04:59 GMT - Sun, 04 Aug 2024 08:04:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css&l=78689&fd=57 HTTP/1.1
Host: footprintsfurnish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=4b7c4392-68d7-4095-9124-9ea06d6409f5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 08:15:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.cloudimagesb.com/si/07/9c/1b/079c1b9b48633e3ef398faef0739f24f/1701651986.png | 45.133.44.10 | 200 OK | 16 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/07/9c/1b/079c1b9b48633e3ef398faef0739f24f/1701651986.png IP45.133.44.10:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash14cf262fabfd850855c42847d14fe775 2fafa28f167f018a0fb1f261f47380c8810803c9 972004ebada4077c3a4d03dcb45175ea467faf54da72be727a1c5c75e688b8af
GET /si/07/9c/1b/079c1b9b48633e3ef398faef0739f24f/1701651986.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 08:15:11 GMT
content-type: image/png
content-length: 16093
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:06:35 GMT
etag: "656d261b-3edd"
expires: Fri, 10 May 2024 08:15:11 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| footprintsfurnish.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css&l=3355&fd=62 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1footprintsfurnish.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css&l=3355&fd=62 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectfootprintsfurnish.com FingerprintC0:7D:8B:CA:31:11:00:D0:03:02:79:93:9F:DE:2E:1C:76:8D:3D:72 ValidityMon, 06 May 2024 08:04:59 GMT - Sun, 04 Aug 2024 08:04:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css&l=3355&fd=62 HTTP/1.1
Host: footprintsfurnish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=4b7c4392-68d7-4095-9124-9ea06d6409f5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 08:15:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.barscreative1.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html | 45.133.44.4 | 200 OK | 2.1 kB |
URL GET HTTP/2cdn.barscreative1.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html IP45.133.44.4:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectcdn.barscreative1.com FingerprintF6:54:F4:B9:EB:AD:1E:FA:8F:76:B9:75:20:9B:41:57:32:37:94:E3 ValiditySun, 10 Mar 2024 03:01:32 GMT - Sat, 08 Jun 2024 03:01:31 GMT
File typegzip compressed data, from Unix Hash22e76dcf51f144a1c73e83d6507482e7 2c1c780146f4b1dcfbf96eebc1d601fdafcff3c7 1091609f57a1c2d3f228ee51a4a51907008e3cb0d18731b82bc5042cd29fde48
GET /sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 08:15:11 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Mon, 27 Sep 2021 07:43:24 GMT
etag: W/"6151761c-52d"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Wed, 08 May 2024 09:15:11 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.163:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 10:46:32 GMT
expires: Wed, 07 May 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 77320
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| vidsrc.to/embed/movie/tt2385006/ | 172.67.181.24 | 404 Not Found | 17 kB |
URL GET HTTP/2vidsrc.to/embed/movie/tt2385006/ IP172.67.181.24:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.to Fingerprint1D:91:BF:0E:81:D2:1C:22:D3:9C:9C:8D:88:3E:B4:E5:E2:68:DE:FC ValidityFri, 22 Mar 2024 12:30:27 GMT - Thu, 20 Jun 2024 12:30:26 GMT
File typeHTML document, ASCII text, with very long lines (807), with no line terminators Hash81bd0a52a2031f6e26401124f3feda31 d72a3ce30177cfea9ed3768b3bb554b1ecb7cc77 c80e7713c7c127396ac12c579183df13cbcd9ab27c9fd2067d6b8ba0c987f108
GET /embed/movie/tt2385006/ HTTP/1.1
Host: vidsrc.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 08 May 2024 08:15:09 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KLUIJdza393B8AdkEshew0jdbc4BRPId7AuQifzbi%2BjoD%2Fxt72bB%2FJgbuGWLulT7C20wy1iqHMjxssmC1WhfiYlsra3IlslmQb76UjzAG%2BFq9TCg3Z9qAZOzdkw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880800116a12b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/script.js | 104.21.70.253 | 200 OK | 341 B |
URL GET HTTP/3cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/script.js IP104.21.70.253:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash0013fbb3bd9e7300fa1bc9f62501dcf0 447e4a8994979e2e158b9beff79b94e7d1b29508 4cf18df81115ddab6967dc82096077ee024223dac3c6ffc9b810bffb7780a20e
GET /sb/ssp/vpn/classic-push/small/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:11 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-3c2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 654779
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sawV%2FLsdQ3EfSSVx8QzgskkxxRTEoSDkVXRswqZV4bTIVS0raWLwE%2Bhr7hSOS%2F9amUfN2oAakXloOM8DT%2F5ajQt0%2F2mDUQWVIOdQyid7oRcCk1vGbUg6VqL4ombzvD8gE3C0BxqI0oO4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88080022fd7fb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| footprintsfurnish.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuuns3v9ANB2YOyCnPwsIKZdM%2F0fLR7WFxjlmjchN0VvUl99aRMTVdT1T09ySm4IHtz9OK180yyQV1k9yq4yGTBQ0DIeMrBXPwPFPamyIyDo%2B%2Bh3vet5ynqqafeTw%2FyC1JHTs9X3zN7Smu60qz51asfBsG16oZK8kF10Gl91AqvVW3%2FjahV81%2Br3pR8x6zU%2FcD3Az%2BorikrYzNYmYJQ6cMoqEV%2BLazXgmaIgf1v73IPjnoQ%2FQvyApSYLD31LkPxMZLeo1XpdjKTvv52L9c0MxZ9cfx%2BspOYIkFvUcbWQ5wcz9kw7mztCUxyNJML0%2F%2BHyNSEeD8%2BAUuO5yLB%2BocznUxDJmDi%2Fyj6Y0g9hqJjcHMPSpwRgAvc2kTSe3DL2ILu%2Fo3SKTohS89%2BhyomZOmXy0h6397QalC9Y3SeKZM4DOISajCG6o6R5ifI9ipQxQl49gmU%2BImsPNtA0jvcdNpAifNXQ9bmYSOqL7c6or0c%2BlFzOQrq4XIkqd8SrdCP4ubMIKXGUPEYWg5BXQW585ArD3nsIU899MR5lQdB0PYFp34n4rwh2pK1hB%2FQdhzQwG91kPPpG4bI0iG4HoLbfaR2Hzvq87PmO7D5D3DbJZzw4DKCvihRSILCERSUoFAERUZQ9MsjoV3dlQ%2BEdjkL5rk%2Bz41yZLLuAT0yWVcmBNQOYUV5kF6Q52ce%2FvHyTezI86pP63HEYhnTumhGrNXu1ON22GFS8ihu%2BBJOlVCuAuo87KkJeWn9RaRqQv735Z9g9AROn4ArDzR%2FBbQoQbdL7CXHu5mrmURCmBJptoRs1zvQF%2BTK7PL1zceQ%2FPT6r41ZgNsSqS3xsXpK0NX3R7dNQQ5vm8KRx5tppnpqj04%2F905GM3np63flbmGsWF91w6%2Fe5FNgWj68K122QROhkq4j39xQQki7ZiyX5Pt194FkW7nbvpHbJE83tt5aW%2B%2BlVjqnTDIGnc7pbxZcTchzV%2B7O5vbqd1tQdgybl%2Bjlp2QeUGYMnu7DpQv9zhBYveCw1EORlyNbZ4tNrQi0XPSUlXD%2F6tmiHlk6PU1VeeDuo2sroNk9JL0SfVuir0tQPYTLL42y1J5e%2F3kug%2BnKiGlbOWTa6i9mNk%2BXR3DqvNrwRZvJWLaZDJthLLlgzSbzecxZQ3Q6HJmbxNfCz%2F4CAAD%2F%2FwEAAP%2F%2FYbf6SpEEAAA%3D | 192.243.59.20 | 200 OK | 7 B |
URL GET HTTP/1.1footprintsfurnish.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuuns3v9ANB2YOyCnPwsIKZdM%2F0fLR7WFxjlmjchN0VvUl99aRMTVdT1T09ySm4IHtz9OK180yyQV1k9yq4yGTBQ0DIeMrBXPwPFPamyIyDo%2B%2Bh3vet5ynqqafeTw%2FyC1JHTs9X3zN7Smu60qz51asfBsG16oZK8kF10Gl91AqvVW3%2FjahV81%2Br3pR8x6zU%2FcD3Az%2BorikrYzNYmYJQ6cMoqEV%2BLazXgmaIgf1v73IPjnoQ%2FQvyApSYLD31LkPxMZLeo1XpdjKTvv52L9c0MxZ9cfx%2BspOYIkFvUcbWQ5wcz9kw7mztCUxyNJML0%2F%2BHyNSEeD8%2BAUuO5yLB%2BocznUxDJmDi%2Fyj6Y0g9hqJjcHMPSpwRgAvc2kTSe3DL2ILu%2Fo3SKTohS89%2BhyomZOmXy0h6397QalC9Y3SeKZM4DOISajCG6o6R5ifI9ipQxQl49gmU%2BImsPNtA0jvcdNpAifNXQ9bmYSOqL7c6or0c%2BlFzOQrq4XIkqd8SrdCP4ubMIKXGUPEYWg5BXQW585ArD3nsIU899MR5lQdB0PYFp34n4rwh2pK1hB%2FQdhzQwG91kPPpG4bI0iG4HoLbfaR2Hzvq87PmO7D5D3DbJZzw4DKCvihRSILCERSUoFAERUZQ9MsjoV3dlQ%2BEdjkL5rk%2Bz41yZLLuAT0yWVcmBNQOYUV5kF6Q52ce%2FvHyTezI86pP63HEYhnTumhGrNXu1ON22GFS8ihu%2BBJOlVCuAuo87KkJeWn9RaRqQv735Z9g9AROn4ArDzR%2FBbQoQbdL7CXHu5mrmURCmBJptoRs1zvQF%2BTK7PL1zceQ%2FPT6r41ZgNsSqS3xsXpK0NX3R7dNQQ5vm8KRx5tppnpqj04%2F905GM3np63flbmGsWF91w6%2Fe5FNgWj68K122QROhkq4j39xQQki7ZiyX5Pt194FkW7nbvpHbJE83tt5aW%2B%2BlVjqnTDIGnc7pbxZcTchzV%2B7O5vbqd1tQdgybl%2Bjlp2QeUGYMnu7DpQv9zhBYveCw1EORlyNbZ4tNrQi0XPSUlXD%2F6tmiHlk6PU1VeeDuo2sroNk9JL0SfVuir0tQPYTLL42y1J5e%2F3kug%2BnKiGlbOWTa6i9mNk%2BXR3DqvNrwRZvJWLaZDJthLLlgzSbzecxZQ3Q6HJmbxNfCz%2F4CAAD%2F%2FwEAAP%2F%2FYbf6SpEEAAA%3D IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectfootprintsfurnish.com FingerprintC0:7D:8B:CA:31:11:00:D0:03:02:79:93:9F:DE:2E:1C:76:8D:3D:72 ValidityMon, 06 May 2024 08:04:59 GMT - Sun, 04 Aug 2024 08:04:58 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuuns3v9ANB2YOyCnPwsIKZdM%2F0fLR7WFxjlmjchN0VvUl99aRMTVdT1T09ySm4IHtz9OK180yyQV1k9yq4yGTBQ0DIeMrBXPwPFPamyIyDo%2B%2Bh3vet5ynqqafeTw%2FyC1JHTs9X3zN7Smu60qz51asfBsG16oZK8kF10Gl91AqvVW3%2FjahV81%2Br3pR8x6zU%2FcD3Az%2BorikrYzNYmYJQ6cMoqEV%2BLazXgmaIgf1v73IPjnoQ%2FQvyApSYLD31LkPxMZLeo1XpdjKTvv52L9c0MxZ9cfx%2BspOYIkFvUcbWQ5wcz9kw7mztCUxyNJML0%2F%2BHyNSEeD8%2BAUuO5yLB%2BocznUxDJmDi%2Fyj6Y0g9hqJjcHMPSpwRgAvc2kTSe3DL2ILu%2Fo3SKTohS89%2BhyomZOmXy0h6397QalC9Y3SeKZM4DOISajCG6o6R5ifI9ipQxQl49gmU%2BImsPNtA0jvcdNpAifNXQ9bmYSOqL7c6or0c%2BlFzOQrq4XIkqd8SrdCP4ubMIKXGUPEYWg5BXQW585ArD3nsIU899MR5lQdB0PYFp34n4rwh2pK1hB%2FQdhzQwG91kPPpG4bI0iG4HoLbfaR2Hzvq87PmO7D5D3DbJZzw4DKCvihRSILCERSUoFAERUZQ9MsjoV3dlQ%2BEdjkL5rk%2Bz41yZLLuAT0yWVcmBNQOYUV5kF6Q52ce%2FvHyTezI86pP63HEYhnTumhGrNXu1ON22GFS8ihu%2BBJOlVCuAuo87KkJeWn9RaRqQv735Z9g9AROn4ArDzR%2FBbQoQbdL7CXHu5mrmURCmBJptoRs1zvQF%2BTK7PL1zceQ%2FPT6r41ZgNsSqS3xsXpK0NX3R7dNQQ5vm8KRx5tppnpqj04%2F905GM3np63flbmGsWF91w6%2Fe5FNgWj68K122QROhkq4j39xQQki7ZiyX5Pt194FkW7nbvpHbJE83tt5aW%2B%2BlVjqnTDIGnc7pbxZcTchzV%2B7O5vbqd1tQdgybl%2Bjlp2QeUGYMnu7DpQv9zhBYveCw1EORlyNbZ4tNrQi0XPSUlXD%2F6tmiHlk6PU1VeeDuo2sroNk9JL0SfVuir0tQPYTLL42y1J5e%2F3kug%2BnKiGlbOWTa6i9mNk%2BXR3DqvNrwRZvJWLaZDJthLLlgzSbzecxZQ3Q6HJmbxNfCz%2F4CAAD%2F%2FwEAAP%2F%2FYbf6SpEEAAA%3D HTTP/1.1
Host: footprintsfurnish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=4b7c4392-68d7-4095-9124-9ea06d6409f5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 08:15:12 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 75f95c4c21e6f256e8938b398f3a0017
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/animate.css | 104.21.70.253 | 200 OK | 15 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/animate.css IP104.21.70.253:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash3d4123dbfb33d27a5cfdfcfa91df6783 e7d0eeeec54b848f0bc3da8685fa3bc88429d660 cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887
GET /sb/ssp/vpn/classic-push/small/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 08:15:11 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-13361"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 654780
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cn0d5mik9BlQz6K2y7kc57NJqsfvVjJI%2BnIWvCw0p0TaHttp%2Baa6t5Mv%2FiBKBDzNVIp2CHwyiGojeQeCD7scQCfAGnyeH8mIAIeUx%2B4heI62WlHhKOvkeqf61yyGfplG%2Fzs2jdejRnRz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88080021fa17b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/movies/poster/at-middleton-2013.jpg?v=1 | 172.67.202.34 | 200 OK | 33 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/at-middleton-2013.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashdf9a5ca56fd9f6ca1bcef032541c8438 06c1ac63a44c7c6ef1d4f136e34a86800780c777 31aad1fed086ca09f68ae8a78457104133dd0281bbd8b5229a365a9978f9fecc
GET /movies/poster/at-middleton-2013.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/jpeg
content-length: 33276
last-modified: Tue, 02 Nov 2021 02:40:44 GMT
etag: "6180a52c-81fc"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iLNbpIgpxAPs1eWNa8FZNRXhwVHGZqm8SK2P5f41qhtlf6k2yX0Oysi3lX1aGFgpgwgidoVigvVXY2DJ6zCRDbJQ5XOMH5MflerHIealOLbPuzGfNTNrD%2B60eEFRswWn1n5wmIU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808001198b95684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/720p-quality.svg | 172.67.202.34 | 200 OK | 2.3 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/720p-quality.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash0243315d20763efcf6b17f0d6b2ffb67 ab981c0c8a34d72f8f714be0eae96f404e434dd4 d7cccf166cfb73bded63e922e00ff99805a3ddbf0024a00904e39bdb3994f33c
GET /static/yts/images/website/720p-quality.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-8e1"
cache-control: max-age=14400
cf-cache-status: HIT
age: 431
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2HL2sOxAZi42CNkMv84gbryv9bLywkpkdVPaofT%2BSku%2BZlv3WxEt3%2BEpfBvksTNzx6%2FSoIuLbMMmcRHAxeH10rGWqQmbK0f21tLZevA5CL2GpiLdc%2FKZLmL6UL%2F59OGgqzgBmUM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800144b895684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/play-trailer.svg | 172.67.202.34 | 200 OK | 4.7 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/play-trailer.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash0242c3a16be471023ee4e484a76cb850 811c46ab5800fc814b427e9469b5b55e7f41a35c 6f014889db48c67c7e651a9377b0415007ef9766fbf2ba90a1180b9e539c176a
GET /static/yts/images/website/play-trailer.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-122a"
cache-control: max-age=14400
cf-cache-status: HIT
age: 426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2t0vCYp%2BP66qTBaWhSu%2BhBCjcsxszIcMWFChrwtnR8Y3Wu8fhGWGFd4ma9Aq8%2FYIFvSklwMVuVz4TJEcxfyqgg3BuOi%2BiI8fF7EJdmpbOl8DQoXXdau9CqJe9q%2BP4HVz%2FX5VLdA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800144b8b5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/style.css | 104.21.70.253 | 200 OK | 3.4 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/style.css IP104.21.70.253:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (3537), with no line terminators Hashb8a277e051f047a41d3229377460f0c9 596b934114e1b6e3cee15ef19925c7f2ff5607e7 9cf981fe6d59b72cb9d12e4bc958983bac07f16b8f1b40bb1c6ced0bf2d6b2d0
GET /sb/ssp/vpn/classic-push/small/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 08:15:11 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-d1b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 8467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e6uGpOW8w%2BDpqOV2NNlA3hE%2BiF48umtbkyka6Up0v3C2Zwg3HY3nCXmO530hXzR1Smo27Zh1kEkH0T093Me4aip4ufsIAiqbukJiA2%2Fk5YINLyZH5xaLeP8ErkirCKUHDmoOytRByrFy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800220a29b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png | 172.67.202.34 | 200 OK | 7.0 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typePNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Hashf87afcf11d459620ff02da6112365db2 d09e6d4e7db706569474bfb7ec93f31ccbd6ed69 a70913fad67537f16d871e4c456c8f4484106f6d4ef3e12fa3c3b2eceefee508
GET /static/yts/image/apple-touch-icon-180x180.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=4ce10bc8-a722-44da-bc6a-6a7444ae9387%3A3%3A1; pp_main_b1270e96b85c3dd200807d09a940c676=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:10 GMT
content-type: image/png
content-length: 6973
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-1b3d"
expires: Thu, 30 May 2024 16:30:16 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 661494
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ztwstO5BUFLehFKM9c4Ry7WmHCJ81MjXvghO6mJ%2FZwUv%2FsMYbYb1N%2BT%2BKUQCxnfdFWIv5bnoNMOICejLLRkzLqxhDXC4jmFWWBmL2UqMwfq90%2FIFhUczSCi6d6eXmv300kwGNME%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88080019e9565684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/3D-quality.svg | 172.67.202.34 | 200 OK | 2.1 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/3D-quality.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hashbeb245ea371d0e5988bf9c995f2dd643 04681640553567aecf8c0631c679a83b95f3ff50 8abe225e92f6c370ad634f574a936592ded57d5693c1f5dc1ca0fd78eacd9e11
GET /static/yts/images/website/3D-quality.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 08:34:20 GMT
etag: W/"65d3128c-844"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eYYfInzwM9nWyfAmp5LqECdj%2BNayn0MEFpfUJzkjo8aGypzGqFSVWBcLftwKEoTAskhHlOJnWoFyWX0ddsrgx171F1XqE%2BnfaREAlSLpnP1zPkz6jv%2BEGhWAnxQutv2r4TcHTaQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800144b875684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| unseenreport.com/pxf.gif?uuid=4ce10bc8-a722-44da-bc6a-6a7444ae9387&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=8 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=4ce10bc8-a722-44da-bc6a-6a7444ae9387&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=8 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=4ce10bc8-a722-44da-bc6a-6a7444ae9387&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=8 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 08:15:11 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9310ea1bdfbf42a24f8d9cba7440dd0b
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| en.yts-official.mx/static/yts/js/jquery.min.js?v=1 | 172.67.202.34 | 200 OK | 84 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/js/jquery.min.js?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators Hashb0dc11d0a434aafe88908c7f33d71095 1327f754ff87d26bced46568543207e9df190aaa de4b3c3d1dc2506b6693f0f98884e1dc074cda9d66cab39b7b48a115fdfc4c0f
GET /static/yts/js/jquery.min.js?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: application/javascript
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-1497d"
expires: Wed, 08 May 2024 17:54:02 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 8467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tDZJgJqWuzftnvObFCtBtYZiWH%2BRkPOnQtG6RM38hIX5yocSHNXKfImKNATAUR6lkDPm6xWcuojmPHBmaefKTL%2FlnSgG%2Bo2sIuUSMb6dWGi9HA0t6YqBQA4OcIsm56h03DGtOOc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88080011b8d35684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.163:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:08:19 GMT
expires: Sat, 03 May 2025 06:08:19 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 439613
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| footprintsfurnish.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js&l=962&fd=13 | 172.240.108.84 | 200 OK | 0 B |
URL GET HTTP/1.1footprintsfurnish.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js&l=962&fd=13 IP172.240.108.84:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectfootprintsfurnish.com FingerprintC0:7D:8B:CA:31:11:00:D0:03:02:79:93:9F:DE:2E:1C:76:8D:3D:72 ValidityMon, 06 May 2024 08:04:59 GMT - Sun, 04 Aug 2024 08:04:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js&l=962&fd=13 HTTP/1.1
Host: footprintsfurnish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=4b7c4392-68d7-4095-9124-9ea06d6409f5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 08:15:12 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| en.yts-official.mx/static/yts/images/website/icon-search.svg | 172.67.202.34 | 200 OK | 894 B |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/icon-search.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash9caad64a555d10c835c1e121b53743b0 5db8cc1d36d939a65725c4869ebec8cc0b5ce9e3 fa70e1614aed8ae3b0463b4d9884de60fd528951a068e6a13a60a329ef93face
GET /static/yts/images/website/icon-search.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-37e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 799
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4gFEIN4FmVe0gu9o3VlmhaFRg%2BWU0xSL08YunYt%2FL1dyZiWD2%2BljEhVyOew3ro1540JHxB44bXCp7J%2FvTkinFUEIIKDGLPYenb22njIOXsTNOiNJcgz%2Bg5vsoQyLRayPxOEsd4E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800141b345684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 | 142.250.74.163 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 IP142.250.74.163:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20040, version 1.0 Hasha61c670a24d6794a95a9712f0d12b656 c9b3114b27790109ec51508f51f1a033ccfe0812 a4f5230d39a7a21971fe62ccde2443345638d2beaa369b752820390a687b91b6
GET /s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:52:40 GMT
expires: Fri, 02 May 2025 01:52:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:51:46 GMT
content-type: font/woff2
age: 541349
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.74 | 200 OK | 7.0 kB |
URL GET HTTP/3fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.74:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (7193), with no line terminators Hash16b49a99486594c0b42d9bd7821deb2c 2fb46e5e86d6b37d4497cc04bfd89b3cb33a276a 3f3540952441e06ef81189cf63d46bac242804e386779dbb0cdd78ed10025c21
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 08:15:11 GMT
date: Wed, 08 May 2024 08:15:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js | 104.21.70.253 | 200 OK | 84 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js IP104.21.70.253:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJavaScript source, ASCII text, with very long lines (32025) Hash4a356126b9573eb7bd1e9a7494737410 8258d046f17dd3c15a5d3984e1868b7b5d1db329 22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5
GET /sb/ssp/vpn/classic-push/small/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:11 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-1499c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 658115
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tcLO7cXFRrEcSLHpc%2F%2F0mvo4pq4oTo7ytIjY684lNZo5AlgAjRc3pTa%2BSgugQ8x66ESYzT0ZKIFIum1p9PsAyDcQ4lRdLtQHiyxr2LlF%2FGIt1D9a5j%2F7apSRAGnIkY%2BJrOWDu4yfojFw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800229d1fb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/image/logo-imdb.svg | 172.67.202.34 | 200 OK | 1.8 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/logo-imdb.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash5cd012116b0d0e653f8e53e813f57ce1 ce512c7a43e9361790d42723f6742856ea546225 48cd81eac0d91d7302265418beeba17e24df75334487e7fa83111ec861b9398a
GET /static/yts/image/logo-imdb.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: W/"65d33152-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 432
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LOZBESqr0%2FDZcrbeGXZL%2BheVpvamQOw7dKyxzuglBE5hwLqjHjrt%2FZ0w04ga7AQc%2By8IDfOSfDqC%2BIh0Xp5TYu89LJM4OVMwZPA%2B%2BAo5Lys%2FebY2oLdQIQ7h5eXE3wfJfC3HXc0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808001198af5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/1080p-quality.svg | 172.67.202.34 | 200 OK | 2.9 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/1080p-quality.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash3bcafca097344993580b747f088e7715 c2d58a3d4ae585c470489fd1f41d20f29ff266ca 59119beab43729f25cd7387785275dee4b80fffb59d1cdfa9bf778066b1ab3b6
GET /static/yts/images/website/1080p-quality.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-b77"
cache-control: max-age=14400
cf-cache-status: HIT
age: 431
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ogHPRP3z%2FtScWTkjPLHwkFdn1HbPY8KALO8rFAOqCeU3u3i5ATzTGv9IFAvmA0E43IkkTTBJO4L12c0cXAizx1dyc%2FbSrtbgFR%2FHqFZ96H4Oc3EXeGEgJO%2BcTkOW1pMqhejE%2BCA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800142b555684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/magnet.svg | 172.67.202.34 | 200 OK | 982 B |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/magnet.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hashb1f2c0a1384b292d61d6ccdb9b4de056 24cb951e1e6da31c99ba0c45638e9d210de60a62 a1339a5f93ce740459f0ef5967f57827ecf0a708e3504146a401d4968650c854
GET /static/yts/images/website/magnet.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-3d6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 431
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pDQB2B3758bf9HkTVu4%2FOY4DNWQcA%2B%2BNf8oTz9wgoD8PtgYbrfecdsJAHlwqc3%2FR3wmYnMr5BYEwin2hA88C2VdBz%2FyLlFD9KaS5iuSHcASIqAYGEzaqZB4YCZzhWlxrr%2FtO2Yk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880800144b865684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/style/minified.css | 172.67.202.34 | 200 OK | 120 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/style/minified.css IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeASCII text, with very long lines (57475) Size120 kB (119843 bytes) Hasha314b10e99529c56373ebff456f96618 89369052969ff4793a3c290593b5ded5d2d3e6d7 e043e009630de7fdb24141cd7e788e91a7978880af7730e0f8f97bf41c2cd549
GET /static/yts/style/minified.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/jerusalem-2013/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 08:15:09 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 08:38:28 GMT
vary: Accept-Encoding
etag: W/"65d31384-1d423"
expires: Wed, 08 May 2024 20:01:48 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 801
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hWVX8D2YQgy%2Fo3AbXeqMhW6EiFtECs9s8p1Xpv6XnwUcm4uXEucc3i3ItTwNCmjzZ4xDeA21qkG3s%2FMuZIcIlOnjAP%2FUrx7ol%2BggJmwg%2BkVmd71bDdqhXL2cmplem1UCL%2BuuuMw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8808001198a85684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 | 142.250.74.163 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 IP142.250.74.163:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20040, version 1.0 Hasha61c670a24d6794a95a9712f0d12b656 c9b3114b27790109ec51508f51f1a033ccfe0812 a4f5230d39a7a21971fe62ccde2443345638d2beaa369b752820390a687b91b6
GET /s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:52:40 GMT
expires: Fri, 02 May 2025 01:52:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:51:46 GMT
content-type: font/woff2
age: 541349
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| footprintsfurnish.com/pixel/sbs?c=1 | 172.240.108.84 | 200 OK | 0 B |
URL GET HTTP/1.1footprintsfurnish.com/pixel/sbs?c=1 IP172.240.108.84:443
Requested byhttps://en.yts-official.mx/movies/jerusalem-2013/ CertificateIssuerLet's Encrypt Subjectfootprintsfurnish.com FingerprintC0:7D:8B:CA:31:11:00:D0:03:02:79:93:9F:DE:2E:1C:76:8D:3D:72 ValidityMon, 06 May 2024 08:04:59 GMT - Sun, 04 Aug 2024 08:04:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: footprintsfurnish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=4b7c4392-68d7-4095-9124-9ea06d6409f5:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 08:15:12 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|