| en.yts-official.mx/static/yts/image/default_avatar.jpg |  172.67.202.34 | 200 OK | 2.4 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/default_avatar.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 100", baseline, precision 8, 60x60, components 3 Hashe55b123ffd0b26cddf175715a76ff22d 0cbeba4643578c972bb79bf8e3b0b83a794df5bc 9412c68d8f2bad5e7abe0ca709a3258cf8c2b7a14bcc1654abf2316debf902cc
GET /static/yts/image/default_avatar.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/jpeg
content-length: 2449
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-991"
expires: Thu, 30 May 2024 16:20:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 366391
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q24McXiZX0UeUz7glUWUBU9K8ZQoUbn%2Fbkw5YZxhGMIm9w%2FVci4o3KBicGcLt3mBnh7rrv%2BILq7NlSuxbTtI41nHXtQDvt6hudzAbmEIF%2B7M68fQT8LKJsILeXMJv7MIoKUQayY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd789d6656be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/scenes-of-a-sexual-nature-2006.jpg?v=1 | 172.67.202.34 | 200 OK | 33 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/scenes-of-a-sexual-nature-2006.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashac1643f9fe9ab982fb9bef158044d0aa f35bae55b4c6e421d4090ab77fe95a27d901cd2c 2e024b783cd4df9f413890f2f8797bb8dba77c8c81334416bd9abcac9fffe7b3
GET /movies/poster/scenes-of-a-sexual-nature-2006.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/jpeg
content-length: 32764
last-modified: Sat, 30 Oct 2021 05:45:59 GMT
etag: "617cdc17-7ffc"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZIp93FkiVExmv46R17%2B2fh%2FCPFatYMNhiXk8ZanYHdcWCmACydGZxdm%2FKfVsFocgIDko1S4wsL38wz42AmMPUgwJ6%2FCs0n9jrVrInCc0CfOFw9zCAcvr4KJcYvR3tQHKHOanlKo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd788d5456be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/screenshot/sexual-drive-2021-medium-screenshot3.jpg | 172.67.202.34 | 200 OK | 22 kB |
URL GET HTTP/3en.yts-official.mx/movies/screenshot/sexual-drive-2021-medium-screenshot3.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x189, components 3 Hashbcab4432e5a5725c3e720842d32f030e 196e753ceb3e1bbc25bc09d21d22a06460861849 2011ba464e407f7954dd39c58f3b8460f93f3fd86b49bb3e6a3256fb980efeb4
GET /movies/screenshot/sexual-drive-2021-medium-screenshot3.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/jpeg
content-length: 22037
last-modified: Wed, 28 Sep 2022 01:27:45 GMT
etag: "6333a311-5615"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qafVK5tFQLP6N%2BsD28Q9TJhyQxULkr4OSm3x3aCep0HynHNf8%2F5b58NBsbhlcKIlS0jfbBGRMCobdJH1pZcQACQ5SGg5mRCSJDW3NG3x7uXYaoUwps0KMvVxo%2Fy3yfhBy8zg76I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd789d6056be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2 | 172.67.202.34 | 200 OK | 3.6 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeWeb Open Font Format, CFF, length 3560, version 0.0 Hash4e54891305c71736de2da03f14b57434 fbf29db32b5514cad7a908167ce63c76a91a2f12 332ec1d337a38ad421deff49f3585da56563253756da3870b26b46bd025f96e4
GET /static/yts/fonts/icomoon.woff?fmg7s2 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: font/woff
content-length: 3560
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: "65d2c88f-de8"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3311
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Bc8eB8byAbI1BLGD7TxO2nD6VQqy%2F9UCgkD%2FID41j966BcFxvxMEO7gCpQ5WGKGhvE1w6DFjotaoq5%2F%2BI0syKSmmFxezcj0yde5jEVlLhH4lzXzMfmKxJrOO6KyTkXxX4sOEtY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd7a8ef156be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/sexual-drive-2021.jpg | 172.67.202.34 | 200 OK | 32 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/sexual-drive-2021.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash28d5b40bbd424071b87cc5737d9fabe5 d0672617bfb54e5bce100872d93c908cbcae629c 308c5150d15ac98038e1828c5d8748290e81ad50cd505d815fb89d93bc09846f
GET /movies/poster/sexual-drive-2021.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/jpeg
content-length: 31727
last-modified: Wed, 28 Sep 2022 01:27:45 GMT
etag: "6333a311-7bef"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G6C01vRFQF6x5mY12%2FYebrKWlShVvBRtM9A%2BY2l05NVXYdaYnoIcxN9HSUv5voIR2bA%2BPTv2weImrCLL7Uwqw5V0SYm1%2BZPzv2Q5g5yJKyGaiMnokfL8sjk2ZBJO5CMW0BeFE98%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd787d5156be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/strictly-sexual-2008.jpg?v=1 | 172.67.202.34 | 200 OK | 17 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/strictly-sexual-2008.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash81f508e40f014e2a2e472ca392de615a 2b1a332a643781a289ac5beed5385577b80bda7c 4b0a66364bd901f44646e56574e8bbff9ce52fe3fcc2fbaf33fe5145bb5a39ee
GET /movies/poster/strictly-sexual-2008.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/jpeg
content-length: 17063
last-modified: Tue, 02 Nov 2021 04:39:24 GMT
etag: "6180c0fc-42a7"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fo1fB6seNj3Cttq%2F9O%2FY3wUYMCtswFMRqRwJ5AxnXLHRB1fPxRLl96%2BVvVVRk3VE1CqZPeCyf4%2B0eYcPPJ0NNvA8R58WeKGvpdC313c0qA0hvqJ0fUx%2BoC8%2Fp65leNMcA09KcRE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd788d5356be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/sexual-drive-2021/ | 172.67.202.34 | 200 OK | 37 kB |
URL GET HTTP/3en.yts-official.mx/movies/sexual-drive-2021/ IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1065), with CRLF line terminators Hashc43a292ab76c431f043ac3ce8ee5bbbe cd8625e03576c6b82555a2f0889292a4e6b58c00 8fd7eda612f0ba6ed8332a1757d4b824981225300fbd2555e8b2bdd0bea13dd1
GET /movies/sexual-drive-2021/ HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 22:07:14 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R6nvXSJzgFlWRwLmNgenvwTOtFI%2BdXuysRhjiHc7tDaj4SGM7JLlYS7NUfLHoiilrm28vI93f1qa6q5OUYNsMr7kUCnOA4iI1ZTvZZKot3YU5kUP4trgO3Qx2Diev1eUAhJ%2FCrI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ebcd746cf71bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/movies/poster/sexual-animals-2019.jpg?v=1 | 172.67.202.34 | 200 OK | 29 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/sexual-animals-2019.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 230x345, components 3 Hash40fd0ab62fa81396a7813db271ab504c cd4656fc516c9ac0d1de6530ebaaa02bdc8d41a6 fd0c5b9711a4f81a5da128e4775eea1590bd683cd221458f6a053c0f03563a06
GET /movies/poster/sexual-animals-2019.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/jpeg
content-length: 29190
last-modified: Sat, 30 Oct 2021 03:16:22 GMT
etag: "617cb906-7206"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f7typi2Z1oQQYd1y5%2Bq2wNjaCmBLoHqdR7vhA4NkUwmXewfCezbkgSaGp5W6Nt0XAwiPaM5Usi7wa45CaF0wyOkPUYLb30RADBJBFg8%2F4vXEx%2FqdVhhMYchiBoAIQY%2FXILvCdqI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd788d5c56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/screenshot/sexual-drive-2021-medium-screenshot2.jpg | 172.67.202.34 | 200 OK | 23 kB |
URL GET HTTP/3en.yts-official.mx/movies/screenshot/sexual-drive-2021-medium-screenshot2.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x189, components 3 Hash86cd746ffe715dbf44751830adfcddae 5e4b69a8c8e969e2c96b0854dcc4bbfc8c66b49d 73003e81223feae482e8f14e3633fc9a6c83a7799dd9cb5afa669d1fd5cec00d
GET /movies/screenshot/sexual-drive-2021-medium-screenshot2.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/jpeg
content-length: 22684
last-modified: Wed, 28 Sep 2022 01:27:45 GMT
etag: "6333a311-589c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H%2Fzm8anjb5WYIivmo10TIdpKgsKSMrOtxixNQl8zFPDg01%2FT6wa5x9PbJdv2FF10gWxYhHFCpcu5mSgMPFnL%2Fa%2Fopv%2F8jFTgl%2FQAZLIMu7iCf1SoIv7BEMjo8QfpmYeYEZOJG50%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd789d5f56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/screenshot/sexual-drive-2021-medium-screenshot1.jpg | 172.67.202.34 | 200 OK | 23 kB |
URL GET HTTP/3en.yts-official.mx/movies/screenshot/sexual-drive-2021-medium-screenshot1.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x189, components 3 Hashee5313b0b88fa51bb89d38c24bf46c0e ae3610eae91645c557107f53d7392bbb54c20c10 cb2622d7b33d8b0502dbad70047db6a4a6ced3ce4b4ed094baef372914166568
GET /movies/screenshot/sexual-drive-2021-medium-screenshot1.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/jpeg
content-length: 22571
last-modified: Wed, 28 Sep 2022 01:27:45 GMT
etag: "6333a311-582b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yg6MHD%2B8o7rUWVpBvgadjaR6MpS5%2BSfL0C%2BRIgQOQW5sur07Jtntulpk74SD6nXzHZi6uUKxmiAH72mxi5AWCqrtocbLEYH6yc33ajSoxetxOB2EayU%2BWsQPs7QJhhQ9uYNKnSQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd788d5e56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/1080p-quality.svg | 172.67.202.34 | 200 OK | 25 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/1080p-quality.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash634e5a7bc26a159347b0467a54722675 579c580fb208d3b38725dc4a14d1dc52dea203fc 42e51d1c340334256885e2518dddfe787bc86afafa7f91bc9074f5a01ab41ff9
GET /static/yts/images/website/1080p-quality.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-b77"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4454
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=goJ33Vmq1WsNiya6DJYPqfZBpyHnNS4TUJrsrFcgd01MU6itGPWo00%2BAI%2FhAZI2CF%2FouZMvfCFWDaIFd9%2F%2FxcDuUUPFVCv4aslidF9GaivxhXfEoz6KlM2LyejScarf0Y%2BQeChQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd7a5ed556be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vidsrc.to/embed/movie/tt13886770/ |  104.21.64.103 | 404 Not Found | 868 B |
URL GET HTTP/2vidsrc.to/embed/movie/tt13886770/ IP104.21.64.103:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.to Fingerprint1D:91:BF:0E:81:D2:1C:22:D3:9C:9C:8D:88:3E:B4:E5:E2:68:DE:FC ValidityFri, 22 Mar 2024 12:30:27 GMT - Thu, 20 Jun 2024 12:30:26 GMT
File typeHTML document, ASCII text, with very long lines (807), with no line terminators Hash81bd0a52a2031f6e26401124f3feda31 d72a3ce30177cfea9ed3768b3bb554b1ecb7cc77 c80e7713c7c127396ac12c579183df13cbcd9ab27c9fd2067d6b8ba0c987f108
GET /embed/movie/tt13886770/ HTTP/1.1
Host: vidsrc.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 04 May 2024 22:07:15 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fg03mqwA4bfIrQismnPujXH0CUfnvRtVoiFkfVaJQb%2BHQ%2B2iS6wlmZhOSPrXIo60PayNWLiF8PtKcTaaQqekFp6PUrnyfM26j2Yg%2B4EN3cBK0YTQux3vB3ASeIY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ebcd78cb4956c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 | 142.250.74.131 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 IP142.250.74.131:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20040, version 1.0 Hasha61c670a24d6794a95a9712f0d12b656 c9b3114b27790109ec51508f51f1a033ccfe0812 a4f5230d39a7a21971fe62ccde2443345638d2beaa369b752820390a687b91b6
GET /s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:52:40 GMT
expires: Fri, 02 May 2025 01:52:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:51:46 GMT
content-type: font/woff2
age: 245675
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 | 142.250.74.131 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 IP142.250.74.131:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20040, version 1.0 Hasha61c670a24d6794a95a9712f0d12b656 c9b3114b27790109ec51508f51f1a033ccfe0812 a4f5230d39a7a21971fe62ccde2443345638d2beaa369b752820390a687b91b6
GET /s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:52:40 GMT
expires: Fri, 02 May 2025 01:52:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:51:46 GMT
content-type: font/woff2
age: 245675
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 | 142.250.74.131 | 200 OK | 22 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 IP142.250.74.131:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22052, version 1.0 Hashf0e48ce2beda9e8cbd7d915bf1b1ae71 3dc1cfff1759b0959cc7fb17517651ec850d584d b2504b3c20c2feb37e78773b788dd09a9cc43c9f36086bc1e2f83a6366ebaa34
GET /s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 16:38:06 GMT
expires: Fri, 02 May 2025 16:38:06 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:00:24 GMT
content-type: font/woff2
age: 192549
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/movies/cover/sexual-drive-2021.jpg | 172.67.202.34 | 200 OK | 40 kB |
URL GET HTTP/3en.yts-official.mx/movies/cover/sexual-drive-2021.jpg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 896x483, components 3 Hash6f47afbe9479e13a1a4885e4d0b0b918 26ad9d515662ffee098f13235fb25e9b54b9452b d39a1dc63b938f1b1ba8a3ff7c88f0beb6ffb9c06e64e30388a853cc0eab4980
GET /movies/cover/sexual-drive-2021.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/jpeg
content-length: 40419
last-modified: Wed, 28 Sep 2022 01:27:45 GMT
etag: "6333a311-9de3"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OzHuY2HJUbzcDKJzJrV1N%2BpH50lUQ1xXGxD2MymHkms9Bf%2BgtiltHrF3cVJcglol6DM2DHkEot9%2FYTuWMDHLvuKldhLtyMiYtiAQn6OPGbtndVSGYAdyZ8L0y0W5MnkV412I3uQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd7a5ed256be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| growingcastselling.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js | 172.240.253.132 | 200 OK | 28 kB |
URL GET HTTP/1.1growingcastselling.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js IP172.240.253.132:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectgrowingcastselling.com Fingerprint3E:B6:D3:62:BC:57:AD:19:9E:FA:67:C4:B3:FA:10:7C:98:4A:71:2B ValidityThu, 18 Apr 2024 13:01:11 GMT - Wed, 17 Jul 2024 13:01:10 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash77eb379fc544cdc16160f53a557edb65 1ee216219c0f22702d964c019d8c46dc3a179890 7a7e8e42728fdf395a3a592039ae812ec92b2c0f3e673102e60fce3622699363
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /b1/27/0e/b1270e96b85c3dd200807d09a940c676.js HTTP/1.1
Host: growingcastselling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 22:07:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d637fb2aef385f26ae77b2c5b02ace8b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| growingcastselling.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js | 172.240.253.132 | 200 OK | 16 kB |
URL GET HTTP/1.1growingcastselling.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js IP172.240.253.132:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectgrowingcastselling.com Fingerprint3E:B6:D3:62:BC:57:AD:19:9E:FA:67:C4:B3:FA:10:7C:98:4A:71:2B ValidityThu, 18 Apr 2024 13:01:11 GMT - Wed, 17 Jul 2024 13:01:10 GMT
File typeJavaScript source, ASCII text, with very long lines (45287), with no line terminators Hashd5a4e86bc3ec9f23e084c8f2b46cae4a cd36e6d1d452fbd3c5854841a2d23f3b5735c78c 20bf5d7d35501d964918e98c777a607431794be521e9eccda209da90086e04e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js HTTP/1.1
Host: growingcastselling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 22:07:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-3448=1; expires=Wed, 08 May 2024 01:07:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d5e23fa042292cf221f9dc1543e7854f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.r2m03.amazontrust.com/ | 3.164.222.26 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP3.164.222.26:0
Hash691c3f87e4fe41a736328d3c71e2dbdc fd76f455b38ba18f00a6fb81e3585201eb3c43f6 8ac709de568d48e4c9e64b75afa6cd3fed58e2cf0c21e823af01ab342e6794b9
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 22:07:16 GMT
Last-Modified: Sat, 04 May 2024 20:34:02 GMT
Server: ECAcc (ska/F73A)
X-Cache: Miss from cloudfront
Via: 1.1 f1bda97b4845eb7587991873d45a7e7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN53-P1
X-Amz-Cf-Id: BvXtsnJbS1OvCj3VCAGiMXAWqvsy2hVeTU2_RQlVtwfQN8L7Wg5RGA==
Age: 5594
|
|
| ocsp.r2m03.amazontrust.com/ | 3.164.222.26 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP3.164.222.26:0
Hash691c3f87e4fe41a736328d3c71e2dbdc fd76f455b38ba18f00a6fb81e3585201eb3c43f6 8ac709de568d48e4c9e64b75afa6cd3fed58e2cf0c21e823af01ab342e6794b9
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 22:07:16 GMT
Last-Modified: Sat, 04 May 2024 20:41:47 GMT
Server: ECAcc (ska/F776)
X-Cache: Miss from cloudfront
Via: 1.1 d8e3cf5bd1920030dc8c93a51ff16092.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN53-P1
X-Amz-Cf-Id: A1caoLXdlVQYcW-jUjAZAxEF2qPaK_mQqGE1yTJJ01EFpueEvR1GUQ==
Age: 5129
|
|
| proftrafficcounter.com/stats |  52.29.105.35 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.29.105.35:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashc8e314361a7c9edf3ed42e68df074460 044fbd4539f76b987eec7537a97a8d7116861d84 c43f0004d607494ca6eeea61c90270f83a5bdaf8388e923cbd32dd3dc151f97c
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 22:07:16 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://en.yts-official.mx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=6e00e424-5eaf-41fc-a224-ec478a329cf2:3:1; expires=Tue, 02 May 2034 22:07:16 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 52.29.105.35 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.29.105.35:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashd5e42e3a943c6e777f1a608a5d145a05 afd8c3e71d39baf2a0295911186d69870d4db34b 83b65846c732627132a31678670f278e28b8dd193252b4162512ae152399686a
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 22:07:16 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://en.yts-official.mx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=9999f827-104e-4bc5-8dcf-f4188dc6ddbc:2:1; expires=Tue, 02 May 2034 22:07:16 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png | 172.67.202.34 | 200 OK | 7.0 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typePNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Hashf87afcf11d459620ff02da6112365db2 d09e6d4e7db706569474bfb7ec93f31ccbd6ed69 a70913fad67537f16d871e4c456c8f4484106f6d4ef3e12fa3c3b2eceefee508
GET /static/yts/image/apple-touch-icon-180x180.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=9999f827-104e-4bc5-8dcf-f4188dc6ddbc%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:16 GMT
content-type: image/png
content-length: 6973
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-1b3d"
expires: Thu, 30 May 2024 16:30:16 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 365820
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vDQkZYHcFSkNFP9K5C%2BOOU2xA7IHQXkGYE4RMvTFwh93Bs7LsXJ7karxXdMowDLzbURWMgmXKKwrZW9CtK46S%2FHUFN%2BIscY5A9Nn7t05dNBML2Ug41GmnjRRXmoThYT%2BEWs4HS8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd818d4256be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/image/favicon-16x16.png | 172.67.202.34 | 200 OK | 619 B |
URL GET HTTP/3en.yts-official.mx/static/yts/image/favicon-16x16.png IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typePNG image data, 16 x 16, 8-bit/color RGB, non-interlaced Hashea830fdd4f9a6d19aa7455dabdac987a b0d567d6b4d40959e1bd44032f6bc2331057b319 71148160c085a70d1af7708c1d52cfcf39f8ef6e4ce13f0f20c080b2e19195db
GET /static/yts/image/favicon-16x16.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=9999f827-104e-4bc5-8dcf-f4188dc6ddbc%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:16 GMT
content-type: image/png
content-length: 619
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-26b"
expires: Thu, 30 May 2024 22:27:04 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 344412
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pu3KmA%2Fd7EyPgrWRtW1vSZMhpsoUEjAtFid9vbdDr4a4M9pr5Yrd0r8t3ygeL8gn%2BC7caXQ69c%2FfjW3qMpd2Rek9aQN4hvbVWWiLKkmXxrCrZHHwJimCGAEkH6Ciz7m7g177pdU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd818d4e56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| capaciousdrewreligion.com/advertisers.js | 172.240.108.76 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP172.240.108.76:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com Fingerprint53:B6:ED:C6:B5:B6:60:3E:6D:02:5A:92:2E:C3:12:74:64:A1:23:DC ValidityWed, 06 Mar 2024 11:57:32 GMT - Tue, 04 Jun 2024 11:57:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 22:07:16 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9d5117d4df6cfd7b178dd829cc23eedb
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| dudleynutmeg.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&psid=CF-3448_1&uuid=9999f827-104e-4bc5-8dcf-f4188dc6ddbc%3A2%3A1 | 172.240.108.68 | 200 OK | 8.0 kB |
URL GET HTTP/1.1dudleynutmeg.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&psid=CF-3448_1&uuid=9999f827-104e-4bc5-8dcf-f4188dc6ddbc%3A2%3A1 IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hash93ee5df098dd377000ccf3a986932dae 54bc430df237e7965d70a783939ed6f17b9ea115 221a62066da9bac7f577f02235bc56c64e308fbf38553ccd166ec97b20972fd5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&psid=CF-3448_1&uuid=9999f827-104e-4bc5-8dcf-f4188dc6ddbc%3A2%3A1 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 22:07:17 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://en.yts-official.mx
Access-Control-Allow-Origin: https://en.yts-official.mx
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16587847; expires=Sun, 05 May 2024 22:07:17 GMT; secure; SameSite=None
uid_id2=9999f827-104e-4bc5-8dcf-f4188dc6ddbc:2:1; expires=Sat, 11 May 2024 22:07:17 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 05 May 2024 22:07:17 GMT; secure; SameSite=None
uncs=1; expires=Sun, 05 May 2024 22:07:17 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sun, 05 May 2024 22:07:17 GMT; secure; SameSite=None
uncs29=1; expires=Sun, 05 May 2024 22:07:17 GMT; secure; SameSite=None
slec0a2f9bfefa2d59b6782f748beec9f30e=[5210995,5210997]; expires=Sat, 04 May 2024 22:07:22 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9c7eff76fdcc36fa0481c8da87c18b1f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| dudleynutmeg.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQW8bRRSeNeHEAYF6AAGSDxxAapzdtb320kNFmqYKDU3VgkACqZqdmXWGjHdWM7teJ6eISKjcDBLqdfM5aVSoEP0BtMip4BAJKeaUA7n1XgmpNxCyG2HxDvPe97430jffvK9281PiI6cnSx%2FqLakUXWjW3Oo7n3reheqqTPJ%2Btd8ObgWNC1XTey8Mau671SuCbegF3%2FVc13O96rI0Itb9hQkJmd4PvVro1hp%2BzWs20Df%2FxzZ3YKkD3jslr0Ly8dxj5xwkGyHp%2FrQk7Eam0%2FOXu7mimTbo8YOPk41EFwm6szI2DuLk4Gwa2h4vP4RO9qdyoXv%2FDUZyTJzfHiJKDs5EIurtTXVGCiJBxF9C0RtBqBEkHYHpHUh%2BTADGcW0NSffuNW0KuvmcpRN2TOae%2FQVZjMncn%2BeQdH9cVLJfvalVnkmdWPTjErI%2FguyMkOaHyLYqkMUhWPYlJP%2BdLDxbRdLdW7NKQ%2FKTt8MwDOO235r33IaYb0SsOd%2FmLJ6PG167zVnAecSmBkk5goxHUGIAaivIrYNcOshjB3nqoMtPqszzvJbLGXXbIWN13hJRwF2PtmKPem7QRs4mbxggSwdgagBmtpGabWzIb46bH8Dkv8Cul7Dcgc0IerxEIQgKS1BQgkISFBlB0Sv3ubK%2BLe9yZfPIO8v%2BWa6XQ511dum%2BzjoiIaBmAMPL3fSUvDL18O83r2BDnFRd6sdhFIuY%2BrwZRkGr7cetRjsSgoVx3RWw8t6l5fl6o9G%2B5UHaCqh1sCXH5PWV15DKMXnxzj%2BI6CGsOgSTDmj%2BFmhRgq6X2EoONjNb04kA1yXSbA7ZprOrTskbUxVrOxaCHZGzADMlUlPiC%2FmYoKNuD2%2Foguzd0IUlD9bSTHblFp388s2MZsL5%2FqrYLLThK0t2cO99NiEm5f2PhM1WacJl0rHkh0XJuTDL2jBBfl6xn4joem7XF3OT5Onq9UvLK93UCGulTkag8vjyHTA5Ji8%2F%2Bny6vuc%2FewJpRjB5iW4%2BUyr1IVi6DZvOelYTGDXDUeqgyMuh8aNZU0kCJWaYRiWsOLr45OvW1V8PniISR4%2BePueGhk5uU1nu2tvomApotoOkW6JnSvRUCaoGsPkLwyw1Rxf%2FqE8DkaoMI2Uqe5Ey6tupyZMjh5Un1Va97tIgbHqtFhWtqOG348DjlPqNwA8CWkdmx3Hw4Lt%2FAQAA%2F%2F8BAAD%2F%2F%2FCUr0OYBAAA | 172.240.108.68 | 200 OK | 7 B |
URL GET HTTP/1.1dudleynutmeg.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQW8bRRSeNeHEAYF6AAGSDxxAapzdtb320kNFmqYKDU3VgkACqZqdmXWGjHdWM7teJ6eISKjcDBLqdfM5aVSoEP0BtMip4BAJKeaUA7n1XgmpNxCyG2HxDvPe97430jffvK9281PiI6cnSx%2FqLakUXWjW3Oo7n3reheqqTPJ%2Btd8ObgWNC1XTey8Mau671SuCbegF3%2FVc13O96rI0Itb9hQkJmd4PvVro1hp%2BzWs20Df%2FxzZ3YKkD3jslr0Ly8dxj5xwkGyHp%2FrQk7Eam0%2FOXu7mimTbo8YOPk41EFwm6szI2DuLk4Gwa2h4vP4RO9qdyoXv%2FDUZyTJzfHiJKDs5EIurtTXVGCiJBxF9C0RtBqBEkHYHpHUh%2BTADGcW0NSffuNW0KuvmcpRN2TOae%2FQVZjMncn%2BeQdH9cVLJfvalVnkmdWPTjErI%2FguyMkOaHyLYqkMUhWPYlJP%2BdLDxbRdLdW7NKQ%2FKTt8MwDOO235r33IaYb0SsOd%2FmLJ6PG167zVnAecSmBkk5goxHUGIAaivIrYNcOshjB3nqoMtPqszzvJbLGXXbIWN13hJRwF2PtmKPem7QRs4mbxggSwdgagBmtpGabWzIb46bH8Dkv8Cul7Dcgc0IerxEIQgKS1BQgkISFBlB0Sv3ubK%2BLe9yZfPIO8v%2BWa6XQ511dum%2BzjoiIaBmAMPL3fSUvDL18O83r2BDnFRd6sdhFIuY%2BrwZRkGr7cetRjsSgoVx3RWw8t6l5fl6o9G%2B5UHaCqh1sCXH5PWV15DKMXnxzj%2BI6CGsOgSTDmj%2BFmhRgq6X2EoONjNb04kA1yXSbA7ZprOrTskbUxVrOxaCHZGzADMlUlPiC%2FmYoKNuD2%2Foguzd0IUlD9bSTHblFp388s2MZsL5%2FqrYLLThK0t2cO99NiEm5f2PhM1WacJl0rHkh0XJuTDL2jBBfl6xn4joem7XF3OT5Onq9UvLK93UCGulTkag8vjyHTA5Ji8%2F%2Bny6vuc%2FewJpRjB5iW4%2BUyr1IVi6DZvOelYTGDXDUeqgyMuh8aNZU0kCJWaYRiWsOLr45OvW1V8PniISR4%2BePueGhk5uU1nu2tvomApotoOkW6JnSvRUCaoGsPkLwyw1Rxf%2FqE8DkaoMI2Uqe5Ey6tupyZMjh5Un1Va97tIgbHqtFhWtqOG348DjlPqNwA8CWkdmx3Hw4Lt%2FAQAA%2F%2F8BAAD%2F%2F%2FCUr0OYBAAA IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSQW8bRRSeNeHEAYF6AAGSDxxAapzdtb320kNFmqYKDU3VgkACqZqdmXWGjHdWM7teJ6eISKjcDBLqdfM5aVSoEP0BtMip4BAJKeaUA7n1XgmpNxCyG2HxDvPe97430jffvK9281PiI6cnSx%2FqLakUXWjW3Oo7n3reheqqTPJ%2Btd8ObgWNC1XTey8Mau671SuCbegF3%2FVc13O96rI0Itb9hQkJmd4PvVro1hp%2BzWs20Df%2FxzZ3YKkD3jslr0Ly8dxj5xwkGyHp%2FrQk7Eam0%2FOXu7mimTbo8YOPk41EFwm6szI2DuLk4Gwa2h4vP4RO9qdyoXv%2FDUZyTJzfHiJKDs5EIurtTXVGCiJBxF9C0RtBqBEkHYHpHUh%2BTADGcW0NSffuNW0KuvmcpRN2TOae%2FQVZjMncn%2BeQdH9cVLJfvalVnkmdWPTjErI%2FguyMkOaHyLYqkMUhWPYlJP%2BdLDxbRdLdW7NKQ%2FKTt8MwDOO235r33IaYb0SsOd%2FmLJ6PG167zVnAecSmBkk5goxHUGIAaivIrYNcOshjB3nqoMtPqszzvJbLGXXbIWN13hJRwF2PtmKPem7QRs4mbxggSwdgagBmtpGabWzIb46bH8Dkv8Cul7Dcgc0IerxEIQgKS1BQgkISFBlB0Sv3ubK%2BLe9yZfPIO8v%2BWa6XQ511dum%2BzjoiIaBmAMPL3fSUvDL18O83r2BDnFRd6sdhFIuY%2BrwZRkGr7cetRjsSgoVx3RWw8t6l5fl6o9G%2B5UHaCqh1sCXH5PWV15DKMXnxzj%2BI6CGsOgSTDmj%2BFmhRgq6X2EoONjNb04kA1yXSbA7ZprOrTskbUxVrOxaCHZGzADMlUlPiC%2FmYoKNuD2%2Foguzd0IUlD9bSTHblFp388s2MZsL5%2FqrYLLThK0t2cO99NiEm5f2PhM1WacJl0rHkh0XJuTDL2jBBfl6xn4joem7XF3OT5Onq9UvLK93UCGulTkag8vjyHTA5Ji8%2F%2Bny6vuc%2FewJpRjB5iW4%2BUyr1IVi6DZvOelYTGDXDUeqgyMuh8aNZU0kCJWaYRiWsOLr45OvW1V8PniISR4%2BePueGhk5uU1nu2tvomApotoOkW6JnSvRUCaoGsPkLwyw1Rxf%2FqE8DkaoMI2Uqe5Ey6tupyZMjh5Un1Va97tIgbHqtFhWtqOG348DjlPqNwA8CWkdmx3Hw4Lt%2FAQAA%2F%2F8BAAD%2F%2F%2FCUr0OYBAAA HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=9999f827-104e-4bc5-8dcf-f4188dc6ddbc:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec0a2f9bfefa2d59b6782f748beec9f30e=[5210995,5210997]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 22:07:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c8ef2f24c1fd4e62a3ad75912b07d07b
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.yourwebbars.com/sb/notifications/gambling/default/android-btn/8/index.html | 172.67.74.218 | 200 OK | 983 B |
URL GET HTTP/2cdn.yourwebbars.com/sb/notifications/gambling/default/android-btn/8/index.html IP172.67.74.218:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint84:82:6E:35:03:D4:C4:FC:BA:08:CD:C8:E6:A3:97:A9:20:2F:F5:49 ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File typeHTML document, ASCII text Hash988cd00695890a395de736ef1f43180a fc35045adb5a0bb89e9150574db517cffb44b0c9 100f83963832c14a85c4d7095f0279b0962b83ee6323481ece9b1b2b39515036
GET /sb/notifications/gambling/default/android-btn/8/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 22:07:17 GMT
content-type: text/html
last-modified: Fri, 19 Jan 2024 14:25:08 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 16864
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pKGgOGihHsHhfyAi%2BmJs4mcrWgss1GVqCuz%2BarkTEigTzHkPfqVh6yEujk9iKekMGRsxwALl5ahXersteKpvQMzEbXvzrY54lpu1DW%2Bd3S8yc5dHvHEnCvF21RcUe%2FSjy7N3Nlw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd867fd50b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| downstairsnegotiatebarren.com/sfp.js | 104.21.35.227 | 200 OK | 28 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP104.21.35.227:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 22:07:16 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 745f825a0e27445c38845d7fc9f57d6f
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sat, 04 May 2024 22:07:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FjWBWHjCG30JyzFHj4zksqvo%2FuwRTL8tpzxneaVCvTDvN37oVe%2BykgVfNkO%2BqwIsEqcNUdfF1CZuk39%2FP%2B%2BDujUI6KJQ51lmq37gpU8A%2FvaQwtGakeTX3%2BCqGl0wfhV7m3PL7oKkr32C%2FQTH87Dnhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd7f08987129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Findex.html&l=1444&fd=81 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Findex.html&l=1444&fd=81 IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Findex.html&l=1444&fd=81 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=9999f827-104e-4bc5-8dcf-f4188dc6ddbc:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec0a2f9bfefa2d59b6782f748beec9f30e=[5210995,5210997]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 22:07:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| unseenreport.com/pxf.gif?uuid=9999f827-104e-4bc5-8dcf-f4188dc6ddbc&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22 | 192.243.59.20 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=9999f827-104e-4bc5-8dcf-f4188dc6ddbc&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=9999f827-104e-4bc5-8dcf-f4188dc6ddbc&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 04 May 2024 22:07:17 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d7ebef02735013036aa29821134b6122
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unseenreport.com/pxf.gif?uuid=9999f827-104e-4bc5-8dcf-f4188dc6ddbc&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22 | 192.243.59.20 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=9999f827-104e-4bc5-8dcf-f4188dc6ddbc&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=9999f827-104e-4bc5-8dcf-f4188dc6ddbc&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 04 May 2024 22:07:17 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 54bd6c4f98ba1db9c6436c379bfca528
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/img/confetti.gif |  188.114.96.1 | 200 OK | 206 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/img/confetti.gif IP188.114.96.1:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeGIF image data, version 89a, 480 x 360 Size206 kB (206291 bytes) Hash0b33face774f2203446507ce5f075538 1dd3522529bce7739df0687f47f5bc84356698a0 ac345899461d5634d25c47281b10e3c1886abb33019e2ce8140573a79e9f52f2
GET /sb/notifications/gambling/default/android-btn/8/img/confetti.gif HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:17 GMT
content-type: image/gif
content-length: 206291
last-modified: Fri, 19 Jan 2024 14:25:08 GMT
etag: "65aa8644-325d3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 358064
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t7sc3lFaCKWNCsmDWl7xS8WhFAU%2Bzr31%2BqIvkDeJfuNwXcC4S%2BIYMBR8T0kmWgMjiG0pZsTO1mltHAAQhHgKAQk6uiCbSLs%2FQy9zKP%2BDBkL5UScN9x5Zw%2F6KyE0IibIwiw4NaY4RaLQE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd87fc2f5690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/img/bonus-stars-6593305-5446274.mp4 | 188.114.96.1 | 206 Partial Content | 34 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/img/bonus-stars-6593305-5446274.mp4 IP188.114.96.1:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003] Hash69e52ff16a779d8ab66a1156cc50ab23 27f8897a2acc3bcfd319c267d137aaa4650fb3c5 2048e8325f6d17e0fefb2226c4191a9e300c562f2bc46543ac616d49ff971d61
GET /sb/notifications/gambling/default/android-btn/8/img/bonus-stars-6593305-5446274.mp4 HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sat, 04 May 2024 22:07:17 GMT
content-type: video/mp4
content-length: 34238
last-modified: Fri, 19 Jan 2024 14:25:08 GMT
etag: "65aa8644-85be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 358055
content-range: bytes 0-34237/34238
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ww1L2WdiQQyKH8w5hK8gqapd79jrDmtCHHEUCZGKktz0er6jVPt%2BzA2HaguS5IV8epbc8Ab%2B5BxNKmRE7gTxV5Yw9Sl9lNLUa2Yz6nc3gCcI4EHn%2B4KqZ3A9ev1N%2Fg7%2BMFFRPwp06TF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd880c345690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/sexual-drive-2021/ | 172.67.202.34 | 200 OK | 5.9 kB |
URL GET HTTP/3en.yts-official.mx/movies/sexual-drive-2021/ IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1065), with CRLF line terminators Hashc43a292ab76c431f043ac3ce8ee5bbbe cd8625e03576c6b82555a2f0889292a4e6b58c00 8fd7eda612f0ba6ed8332a1757d4b824981225300fbd2555e8b2bdd0bea13dd1
GET /movies/sexual-drive-2021/ HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vn54yoafWaVwzccnK0uBDmISqIGWkdNqr%2Fboc%2BUYwCC1ESEYBKyuYyCT%2BaBM4GJP7Ae8kWs3ZNq8si%2B3rN5Amb1M4eTIMp9yd5XY26R1v3LsxhSOyGpbBxENdUcGvgScJOoY2v4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ebcd7e8a4556be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Fcss%2Fstyle.css&l=3348&fd=87 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Fcss%2Fstyle.css&l=3348&fd=87 IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Fcss%2Fstyle.css&l=3348&fd=87 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=9999f827-104e-4bc5-8dcf-f4188dc6ddbc:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec0a2f9bfefa2d59b6782f748beec9f30e=[5210995,5210997]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 22:07:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.131 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.131:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Apr 2024 10:46:32 GMT
expires: Wed, 30 Apr 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 386446
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.131 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.131:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:08:19 GMT
expires: Sat, 03 May 2025 06:08:19 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 143939
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/css/animate.css | 188.114.96.1 | 200 OK | 4.9 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/css/animate.css IP188.114.96.1:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash49a38187f94418e173e4bcc50c96dc4b b64e899d0c6bbb13e6f63e191b77b3eb5e5a6293 92db03d6a48c8756e15b1b2ffb9d1ea5aae5e2d9a706b630f93f73e3debbb3b0
GET /sb/notifications/gambling/default/android-btn/8/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 22:07:17 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:25:08 GMT
etag: W/"65aa8644-13365"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 201557
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cP7VRbR%2FxJ6b0OZiXWZlG84p6xo%2BzzQdW%2FoFaIXGMPG%2FYKNe2oMX4b6NHPnLrqbT5nF1Q6w2AW%2FMBl6%2Fhm3Y%2FA55NojFJoHeDVj3lTMuMEMpdSqiq6%2BEv%2FUGVpB8pBft3y9lvZ8sjSGg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd875f05568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dudleynutmeg.com/pixel/sbs?c=1 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1dudleynutmeg.com/pixel/sbs?c=1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=9999f827-104e-4bc5-8dcf-f4188dc6ddbc:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec0a2f9bfefa2d59b6782f748beec9f30e=[5210995,5210997]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 04 May 2024 22:07:18 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Fjs%2Fscript.js&l=7986&fd=78 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Fjs%2Fscript.js&l=7986&fd=78 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Fjs%2Fscript.js&l=7986&fd=78 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=9999f827-104e-4bc5-8dcf-f4188dc6ddbc:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec0a2f9bfefa2d59b6782f748beec9f30e=[5210995,5210997]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 04 May 2024 22:07:18 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| en.yts-official.mx/static/yts/images/website/720p-quality.svg | 172.67.202.34 | 200 OK | 9.7 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/720p-quality.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash5aeb94417ec4ea45df9073b018e55c37 d4e0e83ab37437aa33dcd7a1c9a0e45527eb3792 e45d8d73fe1d94b36bc4296363ecb3eb37de6c5c2201962fda5a8ed38f005f7c
GET /static/yts/images/website/720p-quality.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-8e1"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4454
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g9IppEsMVyih3yXUERrQIW5ekv5NpoOsvP6M5vN3l64bT8Nopgyd5TlHdzdDSR56v1wga%2B3P8HXvuZKSTahjcPILODj6hwJVDxjKgUkEM3I6j1Fy%2BKaoqS3P1d2ZONEMv2O%2BvWQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd7a6edb56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/magnet.svg | 172.67.202.34 | 200 OK | 982 B |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/magnet.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hashb1f2c0a1384b292d61d6ccdb9b4de056 24cb951e1e6da31c99ba0c45638e9d210de60a62 a1339a5f93ce740459f0ef5967f57827ecf0a708e3504146a401d4968650c854
GET /static/yts/images/website/magnet.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-3d6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4454
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oMdR8EKvXmaq5noosBJnQqXbdbF90d3mpGe4u45vikMQB0PZ5nh3iB9qUdISnHvmsMeYsAymk5I9tBGAQM40pX0EFV8K2hKqil1QLNcDNHRw8xV5SyTW%2FqMhht%2BA%2Bde0aoYXW4Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd7a5ed656be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/js/script.js | 188.114.96.1 | 200 OK | 9.5 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/js/script.js IP188.114.96.1:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeUnicode text, UTF-8 text, with very long lines (8821), with no line terminators Hashd0707ac5d95047febbb8f131cc7a9af4 65021f149e99900eeaf7d298d2303160872b43f3 3e2e7ab351d401339df520fbd7ce4f177643dca01cad22bf59dd4b3e14853810
GET /sb/notifications/gambling/default/android-btn/8/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 22:07:17 GMT
content-type: application/javascript
last-modified: Tue, 20 Feb 2024 10:37:31 GMT
etag: W/"65d480eb-24fa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 201557
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Udz3xovLn1%2BuH5MmtecmzuBTF7AAxS%2BohUyW8wmxACEV4jXekVsz6SRk0CrytT%2FMIZuHccrE7OYlPm%2FCAICIJAeaRoDDSbKcQpFoAXRetKAv7hEraDnm2k3MSqYI3PBBMi2WaVb4pXc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd875f0d568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/images/website/play-trailer.svg | 172.67.202.34 | 200 OK | 4.7 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/play-trailer.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash0242c3a16be471023ee4e484a76cb850 811c46ab5800fc814b427e9469b5b55e7f41a35c 6f014889db48c67c7e651a9377b0415007ef9766fbf2ba90a1180b9e539c176a
GET /static/yts/images/website/play-trailer.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-122a"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4454
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dy9J2pARP2khH9LddwhD%2B1WZzBFDCgveZqJ0nQv%2F0Qjoi%2F%2FASZ%2FBUSnovK9zwIGCzWz4WT25LFsI%2FdetJdMClbsuQk3kuUW7st8BF56laOIE7w8RW%2BPuk8YvztSr%2FXQTSA16K9Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd7a6edc56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Fcss%2Fanimate.css&l=78693&fd=88 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Fcss%2Fanimate.css&l=78693&fd=88 IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgambling%2Fdefault%2Fandroid-btn%2F8%2Fcss%2Fanimate.css&l=78693&fd=88 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=9999f827-104e-4bc5-8dcf-f4188dc6ddbc:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec0a2f9bfefa2d59b6782f748beec9f30e=[5210995,5210997]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 22:07:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| en.yts-official.mx/static/yts/style/minified.css | 172.67.202.34 | 200 OK | 120 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/style/minified.css IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeASCII text, with very long lines (57475) Size120 kB (119843 bytes) Hasha314b10e99529c56373ebff456f96618 89369052969ff4793a3c290593b5ded5d2d3e6d7 e043e009630de7fdb24141cd7e788e91a7978880af7730e0f8f97bf41c2cd549
GET /static/yts/style/minified.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 08:38:28 GMT
vary: Accept-Encoding
etag: W/"65d31384-1d423"
expires: Sun, 05 May 2024 06:12:28 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 14087
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3DFixyijdcVyDVUufTVgUvNYiDBI7VMLwScYOOSlxrB0G39OxDG6MCg6Zoexs0S10Jyv20RNn67BnpvUZNMfR2aKkQznG7Q72tA3pLRZHniIRf06y5Iq1JClLpo42MyjiPSCYHY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ebcd787d4e56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/style/modded1.js?yify=1 | 172.67.202.34 | 200 OK | 163 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/style/modded1.js?yify=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJavaScript source, ASCII text, with very long lines (65452) Size163 kB (162596 bytes) Hash60de675fcd2844a3ffbb68550d303076 8a53cc2f554a8ef1f58f3fd1996a3c3552ea5472 1c821bdab262418e3742bfa3c295c3b668724f7e8898b45638958a898bd93d33
GET /static/yts/style/modded1.js?yify=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: application/javascript
last-modified: Mon, 19 Feb 2024 03:18:38 GMT
vary: Accept-Encoding
etag: W/"65d2c88e-27b24"
expires: Sun, 05 May 2024 06:12:29 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 14086
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hJOnBlWm%2FPKhhr02VXQC0PTyJd5l3YfP3qW%2FvJo7h%2FTJHxs13%2BjcmRHi%2Ffss26zkvLDsdpXZdZIXt6oTwD63xqSaCjb4oyLOu3GJ%2BXP%2BPwL51xBlMv4fG3AXH4IjPoqPM1mB2Y8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ebcd78ad7156be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/fonts/glyphicons-halflings-regular.woff | 172.67.202.34 | 200 OK | 23 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/fonts/glyphicons-halflings-regular.woff IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeWeb Open Font Format, TrueType, length 23320, version 1.0 Hash68ed1dac06bf0409c18ae7bc62889170 22037a3455914e5662fa51a596677bdb329e2c5c fc969dc1c6ff531abcf368089dcbaf5775133b0626ff56b52301a059fc0f9e1e
GET /static/yts/fonts/glyphicons-halflings-regular.woff HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: font/woff
content-length: 23320
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: "65d2c88f-5b18"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3311
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EufF9A5%2BSOc0vg%2Fzs%2FXpA%2BvPj1gNcLluh2aQgPaYXz%2Bo8SahxABqL9z4dV%2FOvN7cB5MDPIimW2L40hjjg87u4c2frdJu2PSi2q1CXbmfPIjTxIXl06J4wKg6mjoDkyKxjYDR63I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd7acf2456be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.106 | 200 OK | 7.0 kB |
URL GET HTTP/3fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.106:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (7193), with no line terminators Hash16b49a99486594c0b42d9bd7821deb2c 2fb46e5e86d6b37d4497cc04bfd89b3cb33a276a 3f3540952441e06ef81189cf63d46bac242804e386779dbb0cdd78ed10025c21
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 22:07:17 GMT
date: Sat, 04 May 2024 22:07:17 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| en.yts-official.mx/static/yts/images/website/icon-search.svg | 172.67.202.34 | 200 OK | 894 B |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/icon-search.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash9caad64a555d10c835c1e121b53743b0 5db8cc1d36d939a65725c4869ebec8cc0b5ce9e3 fa70e1614aed8ae3b0463b4d9884de60fd528951a068e6a13a60a329ef93face
GET /static/yts/images/website/icon-search.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-37e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4487
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JP6WUJ7ss8Kkd5nEFXNQRYH8fAzgsgQEWq7r7%2F8Cp2in6vAvPJQ9FkPW8Iw%2Fe5SJMpiI08%2BWZMqOUUpMHGqBDPMU8aekFlC00mV0z9CLeoElMBI3rUrRoLQU1k1tNP4%2BEXmDj9A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd7a5ed056be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/css/loading.css | 172.67.202.34 | 200 OK | 2.8 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/css/loading.css IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeASCII text, with very long lines (3095), with no line terminators Hasha4e08ea672b525407c93c52dcedabbad 2d01194a908b02dff41147969f92027d83b082d2 ebde13ee7b0fe214ec069389b397750aaa5e58688b527e24ac69506cfdbb7704
GET /static/yts/css/loading.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-b13"
expires: Sun, 05 May 2024 07:38:29 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 8926
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PtMK548mBBKRc%2BAPRuRyNKFcqjw0ZyM9ibp1%2B9jEZmHiqa80lukBLX7gQcnYYJxsSQ0buRAZRmCoiwf8FiUKpBXpDvsTrXhnqa68znH4gOEgjltm%2Bx2p2BXbX9B%2FfhVj9zZRLEc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ebcd787d4f56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/image/logo-YTS.svg | 172.67.202.34 | 200 OK | 23 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/logo-YTS.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hashfdd85bfbf80d872ea41b942cf21d1db9 6a2d54565cbffa3af342a63931e412ad8837f92d 2234cb288342eab0edfb65ebda4189cf47b40a4b639a25af62c57c03f7ace459
GET /static/yts/image/logo-YTS.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Feb 2024 02:51:28 GMT
etag: W/"65d413b0-5b34"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1101
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tozQ3La8kefqOTCXSS9Npzeo4TaeC5va1mUQQIZeD4oR8ne0Fx1oGKdk74iOrCZHDHk1fh1SiROWgQsLB3s7V3rMkH6%2F%2BPC6uFflN7z5XkDmafaezu4ITUwQq4WHHFfgwaJEJuE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd787d5056be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext | 142.250.74.106 | 200 OK | 9.6 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext IP142.250.74.106:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (9902), with no line terminators Hashda660c7ad34dd81e9f9a9032cc68718a 6bc87a2b72cc76f4253e09a1b7d095f29dc12e13 67d1981c897a8c33dd993afbcd2384fbb40a755ae34e3f43e7bbfbd94c0555f6
GET /css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 22:07:15 GMT
date: Sat, 04 May 2024 22:07:15 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dudleynutmeg.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2Bb4wrF6J0oagwCxcKzeS9%2BfnGLoppmhIbm9IqCgrl%2FnqTa%2B68%2B7j3vXmTrIIBqbtRkG5fvkkaqkXsH2Ark6KLgJBxlYXZdV8QulNkpsHBs7jnfOc7F7773fPVbnZKqsjoydKHZktpTRcaFb%2F8zqdBcKG8quKsX%2B6HzVvN%2BoWy7b3Xblb8d8tXJN8wC1U%2F8P3AD8rLysrI9BcmJFRyvx1U2n6lXq0EjTr69v%2FYZR4c9SB6p%2BRVKDGee%2Bydg%2BIjxN2flqTbSE1y%2FnI30zQ1Fj1x8HG8EZs8RndWRtZDFB%2BcTcO44%2BWHMPH%2BVC5M779BpsbE%2B%2B0hWHxwJhKstzfVyTRkDCZeQt4bQeoRFB2Bmx0ocUwALnBtDXH37jVjc7r5nKUTdkzmnv0FlY%2FJ3J%2FnEHd%2FXNSqX75pdJYqEzv0owKqP4LqjJBkh0i3SlD5IXj6JZT4nSw8W0Xc3Vtz2kCJk7fb7XY7Cqut%2BcCvy%2Fk64435UPBoPqoHYSh4UwjGpwYpNYKKRtByAOpKyJyHTHnIIg9Z4qErTso8CIKWLzj1wzbnNdGSrCn8gLaigAZ%2BM0TGJ28YIE0G4HoAbreR2G1sqG%2BOGx%2FAZr%2FArRdwwoNLCXqiQC4JckeQU4JcEeQpQd4r9oV2VVfcFdplLDjL1bNcK4Ym7ezSfZN2ZExA7QBWFLvJKXll6uHfb17Bhjwp%2B7QatVkkI1oVjTZrtsJq1KqHTErejmq%2BhFP3Li3P1%2Br18FYA5UqgzsOWGpPXV15DosbkxTv%2FgNFDOH0IrjzQ7C3QvABdL7AVH2ymrmJiCWEKJOkc0k1vV5%2BSN6Yq1nYcJD8iZwFuCyS2wBfqMUFH3x7eMDnZu2FyRx6sJanqqi06%2BeWbKU2l9%2F1VuZkbK1aW3ODe%2B3xCTMr7H0mXrtJYqLjjyA%2BLSghpl43lkvy84j6R7Hrm1hczG2fJ6vVLyyvdxErnlIlHoOr48h1wNSYvP%2Fp8ur7nP3sCZUewWYFuNlOqzCF4sg2XzHrOEFg9wyzxkGfF0FbZrKkVgZYzTFkBJ48uPvm6dfXXg6dg8ujR0%2Bfc0NLJbaqKXXcbHVsCTXcQdwv0bIGeLkD1AC57YZgm9ujiH7VpgOnSkGlb2mPa6m%2BnJk%2BODE6dlGu%2BaDEZyRaT9UY9klywRoP5POKsJsKQI3XjqPngu38BAAD%2F%2FwEAAP%2F%2FcEB6q5gEAAA%3D | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1dudleynutmeg.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2Bb4wrF6J0oagwCxcKzeS9%2BfnGLoppmhIbm9IqCgrl%2FnqTa%2B68%2B7j3vXmTrIIBqbtRkG5fvkkaqkXsH2Ark6KLgJBxlYXZdV8QulNkpsHBs7jnfOc7F7773fPVbnZKqsjoydKHZktpTRcaFb%2F8zqdBcKG8quKsX%2B6HzVvN%2BoWy7b3Xblb8d8tXJN8wC1U%2F8P3AD8rLysrI9BcmJFRyvx1U2n6lXq0EjTr69v%2FYZR4c9SB6p%2BRVKDGee%2Bydg%2BIjxN2flqTbSE1y%2FnI30zQ1Fj1x8HG8EZs8RndWRtZDFB%2BcTcO44%2BWHMPH%2BVC5M779BpsbE%2B%2B0hWHxwJhKstzfVyTRkDCZeQt4bQeoRFB2Bmx0ocUwALnBtDXH37jVjc7r5nKUTdkzmnv0FlY%2FJ3J%2FnEHd%2FXNSqX75pdJYqEzv0owKqP4LqjJBkh0i3SlD5IXj6JZT4nSw8W0Xc3Vtz2kCJk7fb7XY7Cqut%2BcCvy%2Fk64435UPBoPqoHYSh4UwjGpwYpNYKKRtByAOpKyJyHTHnIIg9Z4qErTso8CIKWLzj1wzbnNdGSrCn8gLaigAZ%2BM0TGJ28YIE0G4HoAbreR2G1sqG%2BOGx%2FAZr%2FArRdwwoNLCXqiQC4JckeQU4JcEeQpQd4r9oV2VVfcFdplLDjL1bNcK4Ym7ezSfZN2ZExA7QBWFLvJKXll6uHfb17Bhjwp%2B7QatVkkI1oVjTZrtsJq1KqHTErejmq%2BhFP3Li3P1%2Br18FYA5UqgzsOWGpPXV15DosbkxTv%2FgNFDOH0IrjzQ7C3QvABdL7AVH2ymrmJiCWEKJOkc0k1vV5%2BSN6Yq1nYcJD8iZwFuCyS2wBfqMUFH3x7eMDnZu2FyRx6sJanqqi06%2BeWbKU2l9%2F1VuZkbK1aW3ODe%2B3xCTMr7H0mXrtJYqLjjyA%2BLSghpl43lkvy84j6R7Hrm1hczG2fJ6vVLyyvdxErnlIlHoOr48h1wNSYvP%2Fp8ur7nP3sCZUewWYFuNlOqzCF4sg2XzHrOEFg9wyzxkGfF0FbZrKkVgZYzTFkBJ48uPvm6dfXXg6dg8ujR0%2Bfc0NLJbaqKXXcbHVsCTXcQdwv0bIGeLkD1AC57YZgm9ujiH7VpgOnSkGlb2mPa6m%2BnJk%2BODE6dlGu%2BaDEZyRaT9UY9klywRoP5POKsJsKQI3XjqPngu38BAAD%2F%2FwEAAP%2F%2FcEB6q5gEAAA%3D IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2Bb4wrF6J0oagwCxcKzeS9%2BfnGLoppmhIbm9IqCgrl%2FnqTa%2B68%2B7j3vXmTrIIBqbtRkG5fvkkaqkXsH2Ark6KLgJBxlYXZdV8QulNkpsHBs7jnfOc7F7773fPVbnZKqsjoydKHZktpTRcaFb%2F8zqdBcKG8quKsX%2B6HzVvN%2BoWy7b3Xblb8d8tXJN8wC1U%2F8P3AD8rLysrI9BcmJFRyvx1U2n6lXq0EjTr69v%2FYZR4c9SB6p%2BRVKDGee%2Bydg%2BIjxN2flqTbSE1y%2FnI30zQ1Fj1x8HG8EZs8RndWRtZDFB%2BcTcO44%2BWHMPH%2BVC5M779BpsbE%2B%2B0hWHxwJhKstzfVyTRkDCZeQt4bQeoRFB2Bmx0ocUwALnBtDXH37jVjc7r5nKUTdkzmnv0FlY%2FJ3J%2FnEHd%2FXNSqX75pdJYqEzv0owKqP4LqjJBkh0i3SlD5IXj6JZT4nSw8W0Xc3Vtz2kCJk7fb7XY7Cqut%2BcCvy%2Fk64435UPBoPqoHYSh4UwjGpwYpNYKKRtByAOpKyJyHTHnIIg9Z4qErTso8CIKWLzj1wzbnNdGSrCn8gLaigAZ%2BM0TGJ28YIE0G4HoAbreR2G1sqG%2BOGx%2FAZr%2FArRdwwoNLCXqiQC4JckeQU4JcEeQpQd4r9oV2VVfcFdplLDjL1bNcK4Ym7ezSfZN2ZExA7QBWFLvJKXll6uHfb17Bhjwp%2B7QatVkkI1oVjTZrtsJq1KqHTErejmq%2BhFP3Li3P1%2Br18FYA5UqgzsOWGpPXV15DosbkxTv%2FgNFDOH0IrjzQ7C3QvABdL7AVH2ymrmJiCWEKJOkc0k1vV5%2BSN6Yq1nYcJD8iZwFuCyS2wBfqMUFH3x7eMDnZu2FyRx6sJanqqi06%2BeWbKU2l9%2F1VuZkbK1aW3ODe%2B3xCTMr7H0mXrtJYqLjjyA%2BLSghpl43lkvy84j6R7Hrm1hczG2fJ6vVLyyvdxErnlIlHoOr48h1wNSYvP%2Fp8ur7nP3sCZUewWYFuNlOqzCF4sg2XzHrOEFg9wyzxkGfF0FbZrKkVgZYzTFkBJ48uPvm6dfXXg6dg8ujR0%2Bfc0NLJbaqKXXcbHVsCTXcQdwv0bIGeLkD1AC57YZgm9ujiH7VpgOnSkGlb2mPa6m%2BnJk%2BODE6dlGu%2BaDEZyRaT9UY9klywRoP5POKsJsKQI3XjqPngu38BAAD%2F%2FwEAAP%2F%2FcEB6q5gEAAA%3D HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=9999f827-104e-4bc5-8dcf-f4188dc6ddbc:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec0a2f9bfefa2d59b6782f748beec9f30e=[5210995,5210997]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 04 May 2024 22:07:18 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b16e1ec8da7633c8946478db5068fcef
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| en.yts-official.mx/movies/poster/an-awkward-sexual-adventure-2012.jpg?v=1 | 172.67.202.34 | 200 OK | 31 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/an-awkward-sexual-adventure-2012.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 230x345, components 3 Hasha3de6ea396b7f08e2f0e6b5ccee2db94 1ef516524a9cb939d48318dec9b40d041bc46802 fca78097910145cd99290c1c31f12ddeb3d1c1a2db97217a35a473a54153b4bf
GET /movies/poster/an-awkward-sexual-adventure-2012.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/jpeg
content-length: 31113
last-modified: Sat, 30 Oct 2021 03:54:16 GMT
etag: "617cc1e8-7989"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BYfMjmLsrhAs8nm83MEbtjbKUDaA0jqgvq3hc4kEM0k4OjbdEzyn4ekMbAdDYeR%2BX%2BNgPc0dhYxVwN67lb0b9tdaXTZcT1TDRGAqOM2UNAqvqrUfd%2FwUCBOxezMbhqOHUPfLZuw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd788d5a56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/css/style.css | 188.114.96.1 | 200 OK | 3.3 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/css/style.css IP188.114.96.1:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (3556), with no line terminators Hash5a37dc16b8eecffd5e7e805fee49218c 4187086691ead46033b8f2e76c4efdb611137949 436f451c35127aa88f59b29f7c8df41b3822dc16ada4d685fbeb537ecbbe914c
GET /sb/notifications/gambling/default/android-btn/8/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 22:07:17 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:25:08 GMT
etag: W/"65aa8644-d14"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 201557
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qnziT8%2Bq1pwOZEQ41RNkD1wKZ6hqrrxk2bltfzXr0Bhjuv%2BMn%2BkEfORuqz6pyqvyWiN8jDjqbspatZ9GyUCmOS55fnQTI5eUt9dqobJvnzp5iSc6i7Y7G66%2BknovG6AtWCtzkdx6uJ5f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd875f0e568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/img/close.svg | 188.114.96.1 | 200 OK | 1.3 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/notifications/gambling/default/android-btn/8/img/close.svg IP188.114.96.1:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeSVG Scalable Vector Graphics image Hash24937fd159a21f2e91207d5788e86c70 1b07e0334cc16c5cd659de56314bd2188e3a82f9 b38a482faa1471a520d231f954412ee0293b0401610af1392038be206dc51b8a
GET /sb/notifications/gambling/default/android-btn/8/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:17 GMT
content-type: image/svg+xml
last-modified: Fri, 19 Jan 2024 14:25:08 GMT
etag: W/"65aa8644-4ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 362421
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RhmjYFcDmjRpqtaiHxNEam1LjJWnHCFiXlzM2nWEu3iiULvAdf00i7TgMiPTemGekrrYYNp73TOk51SwqBALNp7t1FEuGQEuG7NEQjVNfXO0FAjevqou9LQm5XJNnD3xW2Oq0dOQ7uyU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd87fc2d5690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/fonts/fonts.css | 172.67.202.34 | 200 OK | 1.3 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/fonts/fonts.css IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeASCII text, with very long lines (1384), with no line terminators Hash0ea9baa4ec422b74a6cf6ef7cd998e7b 28edd12415ade93ae8ce77cc26054ec487d73508 a284eec07f7cc18bb397bffc2b34b52f8bacde6198dc1eaeef2924ac61190bb4
GET /static/yts/fonts/fonts.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-524"
expires: Sun, 05 May 2024 09:12:03 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 3312
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TTt2joy9Bxa5F%2Foqmd5pJnNtrNiXA%2Fh4rhegrGZcuotvyFCHfSLxXySz%2FQVgbJI6Pgxq3v5fylvCbdT%2FmIRRDoRfTjX5y9zLayslVTGQkk96u%2Bg0Zhuo9R3dQt3xRtk1vx8Moc8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ebcd787d4c56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/image/logo-imdb.svg | 172.67.202.34 | 200 OK | 1.8 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/logo-imdb.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash5cd012116b0d0e653f8e53e813f57ce1 ce512c7a43e9361790d42723f6742856ea546225 48cd81eac0d91d7302265418beeba17e24df75334487e7fa83111ec861b9398a
GET /static/yts/image/logo-imdb.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: W/"65d33152-710"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WuKPQstkD3gurugCsuLfebHNoTOy%2FwhaTfXIj6NTgRlr9udMLHEmGq1XJwARH6412QoEmYbrpz%2FDLxkxsh8sYsirGm3uUnjOCGbe%2BEqXldGNQmuPLy1wpL3Luk9zAVaPL6t%2BYCA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ebcd788d5256be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/js/jquery.min.js?v=1 | 172.67.202.34 | 200 OK | 84 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/js/jquery.min.js?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/movies/sexual-drive-2021/ CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators Hashb0dc11d0a434aafe88908c7f33d71095 1327f754ff87d26bced46568543207e9df190aaa de4b3c3d1dc2506b6693f0f98884e1dc074cda9d66cab39b7b48a115fdfc4c0f
GET /static/yts/js/jquery.min.js?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/sexual-drive-2021/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 22:07:15 GMT
content-type: application/javascript
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-1497d"
expires: Sat, 04 May 2024 23:02:38 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 39877
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XwNvcCCPEtEponEGEKpzwDZC%2FwOo0iHhD6zRIFzxmlygW2cjv21TqpJDahIQJ4WcExeHnZISMrd5U%2BJHtHKXaYt%2Bdaltv8S7f4pXlcUpA5x5bSDLJ0wfvL%2FNOijDBXrL7u4IsQo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ebcd789d6356be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|