www9.pelisplushd.lat/images/logo/logo5.png
200 OK 3.7 kB URL GET HTTP/3 www9.pelisplushd.lat/images/logo/logo5.png
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type PNG image data, 174 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 99c4aa3ae8ff7e63053c0e8145f333a2
6465b1e6f20b45d390ead5b827a0741315e2b54f
be677b964ce04cbf7e007b28fcfc73c310da5cc0bbfc54905eb0cae8942e2792
GET /images/logo/logo5.png HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: image/png
content-length: 3656
last-modified: Fri, 31 Dec 2021 03:59:46 GMT
etag: "61ce8032-e48"
expires: Tue, 11 Jul 2023 13:51:02 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 467536
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A21a6Lf0XPR5dASRaQkW6SDirQuvzlu1Z0qoAxY7%2B6RlfEX68pSOFXVoRmocQGPABKwgszZhZZ8vCiTsEGyxZKIntOAi%2BTPOP1TM%2F89z4JioI12wWVIElwrH%2BR%2FckLzCzg%2FOc4tGug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea0e2d637327-LHR
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/images/body_wall.jpg
200 OK 39 kB URL GET HTTP/3 www9.pelisplushd.lat/images/body_wall.jpg
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 500x588, components 3\012- data
Hash b334c51e41ffa51de821ca0d8ba403ca
bd4d3aa36835efac2eaf8782a534e62b2f6ad3bf
588804fb9e8a799e6c64df47519f29a6728e18c9bf8e1be7a43519b0fe1f7bd0
GET /images/body_wall.jpg HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/static/css/app.css?v=1.2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: image/jpeg
content-length: 38799
last-modified: Fri, 31 Dec 2021 03:59:46 GMT
etag: "61ce8032-978f"
expires: Tue, 11 Jul 2023 15:55:59 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 460039
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nmO4jFZBEkP2A7nemQAs58XWRvSGax8fW%2Bx2b7dV7L45cj4N6GW16nwhMA9R3DypiDjQrBzPWhzUwUQfkDQduPKfpcS%2BLUxDnUkINiFgxS3DkJg5ZXrqgEY1lCdHE9J5trcySFArmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea0e3d667327-LHR
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/static/fonts/ionicons.woff2?v=4.5.5
200 OK 51 kB URL GET HTTP/3 www9.pelisplushd.lat/static/fonts/ionicons.woff2?v=4.5.5
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type Web Open Font Format (Version 2), TrueType, length 50556, version 1.0\012- data
Hash 96f1c901c087fb64019f7665f7f8aca6
60c9e10a709815148bf4a9b333a396692739cd5c
2d02d165cb720aec2fde78a93113a459729e0503951353f719076bc5b4a7a845
GET /static/fonts/ionicons.woff2?v=4.5.5 HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/static/css/app.css?v=1.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: font/woff2
content-length: 50556
last-modified: Sun, 09 Jan 2022 17:45:16 GMT
etag: "61db1f2c-c57c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F4BGb7IPMz6UlYhFlvvmEBKLMEv1L%2Bev1n65BDq%2BRCTBnlxywxO62FW4y3lHPDUeCRTWK%2Feifz%2FJbFv6WQhNHx1CPwesdofC665GAyIFx6aOdteja3vIJci2b6dtGQjTFhmzHPNNkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea0e4d777327-LHR
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/poster/star-wars-rebels.jpg
200 OK 209 kB URL GET HTTP/3 www9.pelisplushd.lat/poster/star-wars-rebels.jpg
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1426, components 3\012- data
Size 209 kB (209239 bytes)
Hash d90b1a66723361b0b176c3c3601ee367
8f7188a3e287936f7d96e9094ca10002142274fa
3f3002657287171cf3074ddacfa814593f4cf3e693dad29a2adb960a01953dd4
GET /poster/star-wars-rebels.jpg HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: image/jpeg
content-length: 209239
last-modified: Thu, 05 Jan 2023 21:29:20 GMT
etag: "63b74130-33157"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M1NNC%2F%2BrLV%2BnwoaFFu17itx4JuuD9j927pyv1impG0TmZsAeBLPA1W02HYHBbRJQNfCTIw6%2FZ0tOlDnCl5A1csx2mB1a%2BD39EQkjbqWTistrRLMDt8ByOhoJHxFps4bkGBCa59ZrWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea0d2ca67327-LHR
alt-svc: h3=":443"; ma=86400
ostensibledressmaker.com/ff/5e/ff/ff5effb8a52eb67ad137472052c7feff.js
200 OK 13 kB URL GET HTTP/1.1 ostensibledressmaker.com/ff/5e/ff/ff5effb8a52eb67ad137472052c7feff.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectostensibledressmaker.com
Fingerprint29:9A:BC:D3:A3:77:B4:88:4D:42:CB:0A:29:78:FE:D1:4B:EA:C4:DF
ValidityMon, 05 Jun 2023 07:38:25 GMT - Sun, 03 Sep 2023 07:38:24 GMT
File type ASCII text, with very long lines (37138), with no line terminators
Hash 0815451b01281cbad86986f146547cfd
12d090764fd47fbe4aea92d413a416b2ea2781a0
906fd8f5c5eb9bacf8f62ba49a98e354ffb5f889c5cbfb1a22e3c72bb6cee7df
Analyzer Verdict Alert Public Nextron yara rules malware Detects JS obfuscation done by the js obfuscator (often malicious)
quad9 Sinkholed
GET /ff/5e/ff/ff5effb8a52eb67ad137472052c7feff.js HTTP/1.1
Host: ostensibledressmaker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:19 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9c9add97f7ce6946b6a2d98c5a1572cb
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ostensibledressmaker.com/2c/7f/fb/2c7ffbea44b892b7250bf633396a8cac.js
200 OK 21 kB URL GET HTTP/1.1 ostensibledressmaker.com/2c/7f/fb/2c7ffbea44b892b7250bf633396a8cac.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectostensibledressmaker.com
Fingerprint29:9A:BC:D3:A3:77:B4:88:4D:42:CB:0A:29:78:FE:D1:4B:EA:C4:DF
ValidityMon, 05 Jun 2023 07:38:25 GMT - Sun, 03 Sep 2023 07:38:24 GMT
File type HTML document, ASCII text, with very long lines (60175)
Hash aa285838554cffe9115620383528f5fe
cfe201d17b0c76a97b922c806fff26fb350c784d
7a18edbe0a99580dfe45afd03b9a57f8683240cf34ae286f1116ad8d36b225eb
Analyzer Verdict Alert quad9 Sinkholed
GET /2c/7f/fb/2c7ffbea44b892b7250bf633396a8cac.js HTTP/1.1
Host: ostensibledressmaker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:19 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-2380-1=0; expires=Mon, 19 Jun 2023 23:43:19 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0fca3cd571cb7160838c16ed99f34a53
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.r2m01.amazontrust.com/
471 B URL ocsp.r2m01.amazontrust.com/
IP
Hash 3c35122f6af5ea3e5671c86d4ca88bbc
a9f593511024c31010f6ff956c3a7651e1b7d9af
818a7657de6b657efe5ef1cef2d0b2b938d08f1f3b8f5772a61f47a0856f9af6
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 16 Jun 2023 23:43:19 GMT
Last-Modified: Fri, 16 Jun 2023 22:36:23 GMT
Server: ECAcc (nya/7919)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yiUSJT1OdrJ-utgLkqYBPsj0-ZX_cBq-JZZiEgtIckpZLBLYJzBalQ==
Age: 4016
ocsp.r2m01.amazontrust.com/
471 B URL ocsp.r2m01.amazontrust.com/
IP
Hash 3c35122f6af5ea3e5671c86d4ca88bbc
a9f593511024c31010f6ff956c3a7651e1b7d9af
818a7657de6b657efe5ef1cef2d0b2b938d08f1f3b8f5772a61f47a0856f9af6
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 16 Jun 2023 23:43:19 GMT
Last-Modified: Fri, 16 Jun 2023 22:36:23 GMT
Server: ECAcc (bsa/EA9D)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: P--Y91DZnvsopI6nMu8ix1q0QU24jDgJmDV2lg8v0qwT5JqOl8UPDw==
Age: 4016
www9.pelisplushd.lat/static/js/modal.js?v=1
200 OK 3.6 kB URL GET HTTP/3 www9.pelisplushd.lat/static/js/modal.js?v=1
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type ASCII text, with very long lines (2865)
Hash 0a3a02fb97d0d41def17eb5b0281fa47
cbf7ecf39d06192b2feeac3da68d4e0e6cc98e5c
061bdb574b9b755d46b5ac64a61e8271257ad41d90e2cc347140968cae22ee2c
GET /static/js/modal.js?v=1 HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
etag: W/"61f10610-3049"
expires: Sat, 17 Jun 2023 06:23:26 GMT
last-modified: Wed, 26 Jan 2022 08:28:00 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 19192
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5PaCWs%2B9YKgr5AHGMeGwyR11Mfr47T7B9kkYiVQn03TNIVeenxP1InVCTF%2FYsKTV1equcYdroeSrAltjvrKjAczMbUukvSkpO3tgkutDyj%2Ba8U1D1FyxQLtH6AshEvYdNP09vwkG0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea0d2ca87327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
simplewebanalysis.com/stats
200 OK 40 B URL GET HTTP/2 simplewebanalysis.com/stats
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerAmazon
Subjectsimplewebanalysis.com
FingerprintE5:9D:30:D3:0E:8A:EF:0D:43:46:4C:4C:53:AD:05:78:63:E9:04:07
ValidityThu, 02 Mar 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 7fe59c676b37b4f339f90104d8f3e6f9
2e36a6c8f0a9b99257f3abeadd177f16faae07dd
cb6181c0186ec8ce26dfb3808e86f7e95a18995f2ff83dfedce39cb9574243a8
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www9.pelisplushd.lat
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www9.pelisplushd.lat
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=6a54ae33-4f60-42dc-9a9e-2201c1d2ed19:2:1; expires=Mon, 13 Jun 2033 23:43:19 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
januarysundayurgently.com/pixel/purst?dl=0&th=0&sc=0&rs=1300&rd=1300&fd=668&bv=22.10.v.9&tmpl=70
200 OK 0 B URL GET HTTP/1.1 januarysundayurgently.com/pixel/purst?dl=0&th=0&sc=0&rs=1300&rd=1300&fd=668&bv=22.10.v.9&tmpl=70
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectjanuarysundayurgently.com
Fingerprint2D:86:A4:0A:55:B7:E9:E1:4D:A1:60:4F:D1:2E:7E:CA:9B:D5:6A:8E
ValidityTue, 13 Jun 2023 00:43:52 GMT - Mon, 11 Sep 2023 00:43:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1300&rd=1300&fd=668&bv=22.10.v.9&tmpl=70 HTTP/1.1
Host: januarysundayurgently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:19 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/css/bootstrap.min.css
200 OK 18 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/css/bootstrap.min.css
IP
Requested by https://watchsb.com/e/6ayk1wtpgb21
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (65326)
Hash d432e4222814b62dd30c9513dcc29440
2cac4afc120983921411296bd4e8fd8a94ba237e
4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601
GET /ajax/libs/twitter-bootstrap/4.6.0/css/bootstrap.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://watchsb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: text/css; charset=utf-8
content-length: 17712
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60071661-27681"
last-modified: Tue, 19 Jan 2021 17:26:57 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 626525
expires: Wed, 05 Jun 2024 23:43:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nGERe7HAmrhchlF7pUsbl56f9OFW%2BjdtHcFMe85MJrOqkhlJ534uh628gyI5VlatNhqPiW7ZZRzJ543ZXQE7joKCguwub9lte1BcDZm6t56zC8rxgQ3T7pboYuB1SUddbo4hqu%2BV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d86ea13b891b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.bundle.min.js
200 OK 19 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.bundle.min.js
IP
Requested by https://watchsb.com/e/6ayk1wtpgb21
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (65299)
Hash f81d0a1705048649befc8b595e455a94
aec551e4d573463088fca7d14fb644eb389f1839
b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b
GET /ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://watchsb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 19173
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60071661-1499a"
last-modified: Tue, 19 Jan 2021 17:26:57 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 15182555
expires: Wed, 05 Jun 2024 23:43:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rpvx%2Fw0hO9AIsF2TeQkdhSMh1THhdv25Q4nHCG7dxcYJwQaEGTAHcPJNkiVYYtUUByLJOVs2LIRm%2BV1elsphjK10VGy%2BTbtHEiZ7jpEBvcpJFMx3feZ7LeFq1GqSkzky0xGKYYBI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d86ea13c89fb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/axios/0.22.0/axios.min.js
200 OK 5.5 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/axios/0.22.0/axios.min.js
IP
Requested by https://watchsb.com/e/6ayk1wtpgb21
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (17781)
Hash 7696d7dac74c8d84ca4ef0fd14eaa020
51aeefbbb0bfba74c8efe2bc659683ea74e46849
7225309c419aac816716ce68150e60a73a34067c7989132faf9d7498d17e2ba2
GET /ajax/libs/axios/0.22.0/axios.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://watchsb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 5467
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6156acbe-155b"
last-modified: Fri, 01 Oct 2021 06:37:50 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3115852
expires: Wed, 05 Jun 2024 23:43:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0ADJCBpTGPRVX5h20UVpTnC0Ygyq4ssXrZdV8j1BUyy4VFO69j3ZqPHl2fKqKXAI%2Fc%2Bp%2FjnaAny4vY5Uk8PiRUXxsccdqXhud6a1ZOxiBnaYVkTMEye6Jc9S6g%2FbOFRZBnEzLhKX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d86ea13c8a1b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
appcdn01.xyz/vast.js
200 OK 14 B IP
Requested by https://watchsb.com/e/6ayk1wtpgb21
Certificate IssuerGoogle Trust Services LLC
Subjectappcdn01.xyz
Fingerprint2D:B6:B3:82:8E:66:43:B6:B4:DF:2F:A3:63:4C:B6:1F:87:3D:DC:D7
ValidityThu, 20 Apr 2023 13:46:36 GMT - Wed, 19 Jul 2023 13:46:35 GMT
File type ASCII text, with no line terminators
Hash f889954a7cf30bbbfa6f7c3ae440dd2a
7adb4056d99c21fa515a67b5e17f12e82a16509d
27057a15c852eb49822e63991ce5e1863a05f2f5ccbcf916ca624ca773ed8d97
GET /vast.js HTTP/1.1
Host: appcdn01.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://watchsb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 14
last-modified: Fri, 22 Oct 2021 10:58:00 GMT
etag: "e-5ceeee26ebe00"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 2226
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eWe0Ciq33PExidWBU3qoquVkuHpMf1bmrYxMMjNMq3C21wac3j9UBCH9czOKy3yZUiaNd7Emr9H6aGs3RTnrGkJYKHlPyus2joVA4UphfgN3nrNVUqrgR7f%2F0I9Txt4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea13f8fdb4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
watchsb.com/js/jquery.min.js
200 OK 32 kB URL GET HTTP/3 watchsb.com/js/jquery.min.js
IP
Requested by https://watchsb.com/e/6ayk1wtpgb21
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintBF:69:A6:E9:1C:04:97:E1:BA:3B:A6:73:C7:76:32:5C:69:66:CF:EA
ValidityWed, 01 Mar 2023 00:00:00 GMT - Wed, 28 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /js/jquery.min.js HTTP/1.1
Host: watchsb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://watchsb.com/e/6ayk1wtpgb21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 05 May 2020 04:02:38 GMT
etag: W/"5eb0e55e-15d84"
expires: Tue, 20 Jun 2023 22:40:34 GMT
cache-control: max-age=604800
access-control-allow-origin: *
cf-cache-status: HIT
age: 262965
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SF6O20vcuZ4z4deTn%2BbF4AANI2UAQJHUmJyvDwzpg6ClICwPbah7Af8dVgjw43IcB1i83Ovo7z1uuTFMVXs4r4KDbOpMH5GOjSvXLkFXk62HTJml82g%2BNptl25AksQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea13bc9d71e7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/static/images/logo/favicon.png
200 OK 17 kB URL GET HTTP/3 www9.pelisplushd.lat/static/images/logo/favicon.png
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced\012- data
Hash 285bf06766076e1393ad8c512f0607c9
630d40b1daa2f31b888b504da2d6ab56344d111a
04f4f0b35ffa6411b764ade5424940cec5ff0cd2151cc21bde240cf096142685
GET /static/images/logo/favicon.png HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=6a54ae33-4f60-42dc-9a9e-2201c1d2ed19%3A2%3A1; ppu_main_2c7ffbea44b892b7250bf633396a8cac=1; sb_page_ff5effb8a52eb67ad137472052c7feff=1; sb_onpage_ff5effb8a52eb67ad137472052c7feff=1; sb_main_ff5effb8a52eb67ad137472052c7feff=1; sb_count_ff5effb8a52eb67ad137472052c7feff=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: image/png
content-length: 17329
last-modified: Fri, 31 Dec 2021 04:00:06 GMT
etag: "61ce8046-43b1"
expires: Tue, 11 Jul 2023 13:51:03 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 467536
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nW2JVggwkYuevfA3pzZSd%2FE35MC%2Fyvzlv4wfnyt4sqlMBSpDNO8OziCibgpjF1XdwKASzzWiAmNcwAI7dPOMqykaj%2Fltahz2YdBnx0NCiNbNnrc6Bn6M2H%2F6kpERHKEqrF9HJMgYsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea150a487327-LHR
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
471 B IP
Hash 4c33dd00acf3e9ec3caa92992e03b532
f900808eafea946f52a49a7e536a97b2331d9f01
a00bc1576320e4aaa26267eb2836c33f6795cd1ace69497ecb52c0f584a00e2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Jun 2023 23:43:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL GET HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subject*.banquetunarmedgrater.com
FingerprintC2:9D:7F:2C:2A:3B:B7:C3:4E:83:53:FC:32:CF:AA:03:BD:6A:D0:64
ValidityFri, 02 Jun 2023 06:03:40 GMT - Thu, 31 Aug 2023 06:03:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:19 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1eee36a009dd0bfb0dc4c3606b33a161
Strict-Transport-Security: max-age=0; includeSubdomains
watchsb.com/css/app.v1.5.css?v=1
200 OK 51 kB URL GET HTTP/3 watchsb.com/css/app.v1.5.css?v=1
IP
Requested by https://watchsb.com/e/6ayk1wtpgb21
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintBF:69:A6:E9:1C:04:97:E1:BA:3B:A6:73:C7:76:32:5C:69:66:CF:EA
ValidityWed, 01 Mar 2023 00:00:00 GMT - Wed, 28 Feb 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 85d4db2b1387c093225b0fda2543d3b4
19daee010d3cef97451faed6c09d6dda3aa13484
30e34f078f4b1eb1dfcf9db25cf454e902aadc7586f937b0135442ea57ba58a6
GET /css/app.v1.5.css?v=1 HTTP/1.1
Host: watchsb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://watchsb.com/e/6ayk1wtpgb21
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: text/css
last-modified: Sun, 26 Feb 2023 19:25:53 GMT
etag: W/"63fbb241-2d43"
expires: Sun, 18 Jun 2023 19:58:54 GMT
cache-control: max-age=604800
access-control-allow-origin: *
cf-cache-status: HIT
age: 445465
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0gkgO%2By3SqmzhfSZPE7a%2FuSYQH%2Bb6sFgHVnwC19q1CPbAB00qKAEr7%2B237WkVCYqlxQRdTkViAplc677qc0G6PcA8GPscOtPT8y80WnA7YPwyQWLwdrXSX99%2BR%2BWJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea13bc9f71e7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
471 B IP
Hash 4c33dd00acf3e9ec3caa92992e03b532
f900808eafea946f52a49a7e536a97b2331d9f01
a00bc1576320e4aaa26267eb2836c33f6795cd1ace69497ecb52c0f584a00e2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Jun 2023 23:43:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
doingporteddispose.com/sbar.json?key=ff5effb8a52eb67ad137472052c7feff&uuid=ddeb8ef6-282e-4246-9cc5-ab9b5e3d0fc1%3A3%3A1
200 OK 3.6 kB URL GET HTTP/1.1 doingporteddispose.com/sbar.json?key=ff5effb8a52eb67ad137472052c7feff&uuid=ddeb8ef6-282e-4246-9cc5-ab9b5e3d0fc1%3A3%3A1
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectdoingporteddispose.com
Fingerprint4B:56:24:71:36:FE:66:E5:38:B9:5F:7C:3C:56:11:3D:43:B2:B8:CA
ValidityFri, 19 May 2023 18:53:09 GMT - Thu, 17 Aug 2023 18:53:08 GMT
File type JSON data\012- , ASCII text, with very long lines (6223), with no line terminators
Hash 52823c1e9a5f9285eb7322434141382d
e5f30bd96116fc58ee3f1dac5d21d592d52b2407
b0e6e8fa7805bc5a818b1ecae54cf7eda74794e8dfbacb1cc4e607fd1fea286d
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=ff5effb8a52eb67ad137472052c7feff&uuid=ddeb8ef6-282e-4246-9cc5-ab9b5e3d0fc1%3A3%3A1 HTTP/1.1
Host: doingporteddispose.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www9.pelisplushd.lat
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:20 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www9.pelisplushd.lat
Access-Control-Allow-Origin: https://www9.pelisplushd.lat
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=18224895; expires=Sat, 17 Jun 2023 23:43:20 GMT; secure; SameSite=None
uid_id2=ddeb8ef6-282e-4246-9cc5-ab9b5e3d0fc1:3:1; expires=Fri, 23 Jun 2023 23:43:20 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 17 Jun 2023 23:43:20 GMT; secure; SameSite=None
uncs=1; expires=Sat, 17 Jun 2023 23:43:20 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sat, 17 Jun 2023 23:43:20 GMT; secure; SameSite=None
uncs29=1; expires=Sat, 17 Jun 2023 23:43:20 GMT; secure; SameSite=None
slecff5effb8a52eb67ad137472052c7feff=[4324777]; expires=Fri, 16 Jun 2023 23:43:25 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b93e931e859455bae29679245ff9efa7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
doingporteddispose.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRydTUIDNCAUiQLpQClAwufdvb0vUkQ2wcjEiaOErw5mZ2bPg%2Bd2VjM7t2eLwiISChLFUYFEs35nx0piBfgDQOhMZwnho8EFLpDyF0RKx4fOtjj4Nb%2F39r3i7fvNp5vuiPhw9HDhql6XStHZetWvvPx%2BEFysLMnU9Sv9VuODRnSxYnqvBX676r9SeVOwVT0b%2BoHvB35QWZBGJLo%2FGwRB1YfMdttBte1Xo7Aa1CP0zf%2B5dR4s9cB7R%2BRZSD5%2BcvdBBMlGSLvfXhZ2NdfZq290naK5NujxnXfS1VQXKbpTmBgPSbpz6oa2Bws%2FQKfbx4Ghe%2F8aYzkm3sM%2FEKc7pykR97ZPgsYKIkXMn0LRG0GoESQdgelbkPyAAIzj2jLS7p1r2hR07USlE3VMzj1%2BBFmMybnfn0PafTCvZL9yUyuXS51a9JMSsj%2BC7IyQuT3k62cgiz2w%2FBNI%2FjOZfbyEtLu1bJWG5IcXOBdxSySNmbAVipkojBozbcbqMzRux3VR437CguOGpBxBJiMoMQC1Z%2BGsByc9uMSDyzx0%2BWGlyaJWi7fqnArGwjgJWkmURG3K%2FIT5tXYIxyb%2FMECeDcDUAMxsIDMbWJUDGPcj7EoJyz3YnKDHSxSCoLAEBSUoJEGRExS9cpsrG9ryDlfWxcHpDk93rRzqvLNJt3XeESnZzI7IM5PivPPn%2F8aqOKwkSV0kSdyi9VDEjSblQa0ZNUO%2FHrJmIpIEVpaQ9gyo9bAux%2BTFK%2FeQyTF54su%2FENM9WLUHJj1Q9wJoMWyGPujKMGr5WE%2B%2FyYSSNlPOrvCqojm4LpHl55CveZvqiDx%2FfMO5P%2B9CsP1L91%2F65eGHc5%2BBmRKZKfGR%2FImgo24Pb%2BiCbN3QhSXfLWe57Mp1OrnvzZzm4uy9K2Kt0IYvXraDu3NsIkzg7tvC5ks05TLtWHJ%2FXnIuzII2TJDvF%2B17Ir7u7Mq8M6nLlq6%2FvrDYzYywVup0BCoP3v0YTI7J02%2F9dvxyL1z9GtKMYFyJrtsnpwOp98CyDdhsmt5qAqOmnjjzULhyaMJ4%2BlFJAiWmnMYl7H94PMWb9jY6xgPNbyHtluiZEj1VgqoBrDs7zDOzf%2BnX2vEgVt4wVsbbipVRX5xUa%2BVhRTRFo92O%2FKjJfT%2BOeBgGdcFoLaJtGoZJE7kd888fffUPAAAA%2F%2F8BAAD%2F%2F05GRI%2BGBAAA
200 OK 7 B URL GET HTTP/1.1 doingporteddispose.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRydTUIDNCAUiQLpQClAwufdvb0vUkQ2wcjEiaOErw5mZ2bPg%2Bd2VjM7t2eLwiISChLFUYFEs35nx0piBfgDQOhMZwnho8EFLpDyF0RKx4fOtjj4Nb%2F39r3i7fvNp5vuiPhw9HDhql6XStHZetWvvPx%2BEFysLMnU9Sv9VuODRnSxYnqvBX676r9SeVOwVT0b%2BoHvB35QWZBGJLo%2FGwRB1YfMdttBte1Xo7Aa1CP0zf%2B5dR4s9cB7R%2BRZSD5%2BcvdBBMlGSLvfXhZ2NdfZq290naK5NujxnXfS1VQXKbpTmBgPSbpz6oa2Bws%2FQKfbx4Ghe%2F8aYzkm3sM%2FEKc7pykR97ZPgsYKIkXMn0LRG0GoESQdgelbkPyAAIzj2jLS7p1r2hR07USlE3VMzj1%2BBFmMybnfn0PafTCvZL9yUyuXS51a9JMSsj%2BC7IyQuT3k62cgiz2w%2FBNI%2FjOZfbyEtLu1bJWG5IcXOBdxSySNmbAVipkojBozbcbqMzRux3VR437CguOGpBxBJiMoMQC1Z%2BGsByc9uMSDyzx0%2BWGlyaJWi7fqnArGwjgJWkmURG3K%2FIT5tXYIxyb%2FMECeDcDUAMxsIDMbWJUDGPcj7EoJyz3YnKDHSxSCoLAEBSUoJEGRExS9cpsrG9ryDlfWxcHpDk93rRzqvLNJt3XeESnZzI7IM5PivPPn%2F8aqOKwkSV0kSdyi9VDEjSblQa0ZNUO%2FHrJmIpIEVpaQ9gyo9bAux%2BTFK%2FeQyTF54su%2FENM9WLUHJj1Q9wJoMWyGPujKMGr5WE%2B%2FyYSSNlPOrvCqojm4LpHl55CveZvqiDx%2FfMO5P%2B9CsP1L91%2F65eGHc5%2BBmRKZKfGR%2FImgo24Pb%2BiCbN3QhSXfLWe57Mp1OrnvzZzm4uy9K2Kt0IYvXraDu3NsIkzg7tvC5ks05TLtWHJ%2FXnIuzII2TJDvF%2B17Ir7u7Mq8M6nLlq6%2FvrDYzYywVup0BCoP3v0YTI7J02%2F9dvxyL1z9GtKMYFyJrtsnpwOp98CyDdhsmt5qAqOmnjjzULhyaMJ4%2BlFJAiWmnMYl7H94PMWb9jY6xgPNbyHtluiZEj1VgqoBrDs7zDOzf%2BnX2vEgVt4wVsbbipVRX5xUa%2BVhRTRFo92O%2FKjJfT%2BOeBgGdcFoLaJtGoZJE7kd888fffUPAAAA%2F%2F8BAAD%2F%2F05GRI%2BGBAAA
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectdoingporteddispose.com
Fingerprint4B:56:24:71:36:FE:66:E5:38:B9:5F:7C:3C:56:11:3D:43:B2:B8:CA
ValidityFri, 19 May 2023 18:53:09 GMT - Thu, 17 Aug 2023 18:53:08 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRydTUIDNCAUiQLpQClAwufdvb0vUkQ2wcjEiaOErw5mZ2bPg%2Bd2VjM7t2eLwiISChLFUYFEs35nx0piBfgDQOhMZwnho8EFLpDyF0RKx4fOtjj4Nb%2F39r3i7fvNp5vuiPhw9HDhql6XStHZetWvvPx%2BEFysLMnU9Sv9VuODRnSxYnqvBX676r9SeVOwVT0b%2BoHvB35QWZBGJLo%2FGwRB1YfMdttBte1Xo7Aa1CP0zf%2B5dR4s9cB7R%2BRZSD5%2BcvdBBMlGSLvfXhZ2NdfZq290naK5NujxnXfS1VQXKbpTmBgPSbpz6oa2Bws%2FQKfbx4Ghe%2F8aYzkm3sM%2FEKc7pykR97ZPgsYKIkXMn0LRG0GoESQdgelbkPyAAIzj2jLS7p1r2hR07USlE3VMzj1%2BBFmMybnfn0PafTCvZL9yUyuXS51a9JMSsj%2BC7IyQuT3k62cgiz2w%2FBNI%2FjOZfbyEtLu1bJWG5IcXOBdxSySNmbAVipkojBozbcbqMzRux3VR437CguOGpBxBJiMoMQC1Z%2BGsByc9uMSDyzx0%2BWGlyaJWi7fqnArGwjgJWkmURG3K%2FIT5tXYIxyb%2FMECeDcDUAMxsIDMbWJUDGPcj7EoJyz3YnKDHSxSCoLAEBSUoJEGRExS9cpsrG9ryDlfWxcHpDk93rRzqvLNJt3XeESnZzI7IM5PivPPn%2F8aqOKwkSV0kSdyi9VDEjSblQa0ZNUO%2FHrJmIpIEVpaQ9gyo9bAux%2BTFK%2FeQyTF54su%2FENM9WLUHJj1Q9wJoMWyGPujKMGr5WE%2B%2FyYSSNlPOrvCqojm4LpHl55CveZvqiDx%2FfMO5P%2B9CsP1L91%2F65eGHc5%2BBmRKZKfGR%2FImgo24Pb%2BiCbN3QhSXfLWe57Mp1OrnvzZzm4uy9K2Kt0IYvXraDu3NsIkzg7tvC5ks05TLtWHJ%2FXnIuzII2TJDvF%2B17Ir7u7Mq8M6nLlq6%2FvrDYzYywVup0BCoP3v0YTI7J02%2F9dvxyL1z9GtKMYFyJrtsnpwOp98CyDdhsmt5qAqOmnjjzULhyaMJ4%2BlFJAiWmnMYl7H94PMWb9jY6xgPNbyHtluiZEj1VgqoBrDs7zDOzf%2BnX2vEgVt4wVsbbipVRX5xUa%2BVhRTRFo92O%2FKjJfT%2BOeBgGdcFoLaJtGoZJE7kd888fffUPAAAA%2F%2F8BAAD%2F%2F05GRI%2BGBAAA HTTP/1.1
Host: doingporteddispose.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Cookie: u_pl=18224895; uid_id2=ddeb8ef6-282e-4246-9cc5-ab9b5e3d0fc1:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecff5effb8a52eb67ad137472052c7feff=[4324777]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:20 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 864b984b2d31ace38ff63d2c69490c49
Strict-Transport-Security: max-age=0; includeSubdomains
media.dalyai.com/js/code.min.js
200 OK 14 kB URL GET HTTP/2 media.dalyai.com/js/code.min.js
IP
Requested by https://watchsb.com/e/6ayk1wtpgb21
Certificate IssuerGoogle Trust Services LLC
Subjectdalyai.com
FingerprintD9:13:53:CD:1C:D4:A0:93:54:E4:50:8D:DA:B6:62:40:38:B4:A9:E4
ValidityTue, 16 May 2023 20:15:21 GMT - Mon, 14 Aug 2023 20:15:20 GMT
File type ASCII text, with very long lines (15751)
Hash 6413086de30bd71928106dd4e436e03b
a5c95d5ca6bb8727fd137dd0344288f6d210083d
baea3b35d2e5c61d2307f589ad94ab3ca2ccc8aaea98b9346b93022d090d373b
GET /js/code.min.js HTTP/1.1
Host: media.dalyai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://watchsb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: application/javascript
last-modified: Wed, 14 Jun 2023 08:51:11 GMT
etag: W/"64897f7f-91fb"
expires: Sun, 18 Jun 2023 20:19:24 GMT
cache-control: max-age=259200
x-robots-tag: noindex, nofollow, noarchive, noimageindex
cf-cache-status: HIT
age: 98635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AU3jZ0%2FsLk60bAh2GmmTsW9M4o5EPJi8o7OuwEXre3AhDKhwCMsN7%2FKbXwdXMv6RGzal6%2B4tfXEJn9GLWXq1gWUHUnjbfyQPcCK0jZsl6%2Bej4h%2FyM8dI5WQJdM36eYVHfAem"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea1538eeb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/d3/55/fb/d355fb06fa4f4907609b7d285fa07f7a/1664530003.html
200 OK 918 B URL GET HTTP/2 cdn.barscreative1.com/sb/au/d3/55/fb/d355fb06fa4f4907609b7d285fa07f7a/1664530003.html
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectcdn.barscreative1.com
Fingerprint0B:AE:8A:C0:29:EA:B0:86:29:66:F6:7E:76:63:66:57:38:88:FC:E6
ValidityMon, 15 May 2023 04:01:53 GMT - Sun, 13 Aug 2023 04:01:52 GMT
File type gzip compressed data, from Unix\012- data
Hash 784757f75f0258ab13f68b8ea60bb2c4
6e5c2ff33ff9e23adb0801e7a87999d03a2022c4
9a64343d86be3718926af9dbb4911943e45521c9734e1884e791e1608f37e427
GET /sb/au/d3/55/fb/d355fb06fa4f4907609b7d285fa07f7a/1664530003.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www9.pelisplushd.lat
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:20 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Fri, 30 Sep 2022 09:26:48 GMT
etag: W/"6336b658-497"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sat, 17 Jun 2023 00:43:20 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/js/script.js
200 OK 682 B URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/js/script.js
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint88:10:E4:38:7C:46:CF:44:7C:D0:C8:1F:06:39:9F:7E:A5:2E:27:4A
ValidityThu, 27 Apr 2023 15:05:54 GMT - Wed, 26 Jul 2023 15:05:53 GMT
Hash 02eef03d816f45efe77308aba07b0e94
67ed5890e847d96a9cae9870e1adc821f551be35
45cf2559fcb1af6347e9de4e1d2fad22896f10066e72bce39b0d1f19cda13824
GET /sb/ssp/utility/social-media/instagram/new/4/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www9.pelisplushd.lat
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:20 GMT
content-type: application/javascript
last-modified: Mon, 26 Sep 2022 10:05:24 GMT
etag: W/"63317964-1bc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FHjw8wAtxR7%2FmCImyKUT%2B2FP49A8FnL5mcR8EcRrai282x%2F%2BSaD0rqTzmDKwxDy4rYh3j4IqNdDA0rYbwPhtGFVRAw1ZOGoeAqh5XuBgb8WoANMWJnnkEUTxR3PqGVufyrNb8DgmPXuR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea1a8e94418e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/49/5d/22/495d22c8047cbbace1476a9de92ad626/1667590367.png
200 OK 33 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/49/5d/22/495d22c8047cbbace1476a9de92ad626/1667590367.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint9A:03:0E:A5:2F:A4:91:E5:B4:C5:8B:64:C6:26:DA:66:35:19:14:97
ValidityMon, 29 May 2023 23:04:30 GMT - Sun, 27 Aug 2023 23:04:29 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cb2500acb00f247ef19403c3a0f89e1
7c57e8b84b2bb0003810ffae7a14e24869155464
7efcd5082673b787603d2a0b8d768fb26807cf2ab79771a69886a916d0cda3ce
GET /si/49/5d/22/495d22c8047cbbace1476a9de92ad626/1667590367.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:20 GMT
content-type: image/png
content-length: 32763
server: nginx/1.17.6
last-modified: Fri, 04 Nov 2022 19:32:55 GMT
etag: "636568e7-7ffb"
expires: Sun, 18 Jun 2023 23:43:20 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
doingporteddispose.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fjs%2Fscript.js&l=444&fd=234
200 OK 0 B URL GET HTTP/1.1 doingporteddispose.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fjs%2Fscript.js&l=444&fd=234
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectdoingporteddispose.com
Fingerprint4B:56:24:71:36:FE:66:E5:38:B9:5F:7C:3C:56:11:3D:43:B2:B8:CA
ValidityFri, 19 May 2023 18:53:09 GMT - Thu, 17 Aug 2023 18:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fjs%2Fscript.js&l=444&fd=234 HTTP/1.1
Host: doingporteddispose.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Cookie: u_pl=18224895; uid_id2=ddeb8ef6-282e-4246-9cc5-ab9b5e3d0fc1:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecff5effb8a52eb67ad137472052c7feff=[4324777]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:20 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 694 B URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintA4:D0:2E:0C:FB:98:7C:38:24:ED:CC:2B:FE:74:AA:48:C4:9A:27:90
ValidityMon, 22 May 2023 08:22:04 GMT - Mon, 14 Aug 2023 08:22:03 GMT
Hash cb2c9df74facee436bb99358b04d9bab
4bf65a78e6a0566051b5b47b75e8b0deac478071
e40dbc6da95b47d932014e5a93f35b13a341a37ea6fe7559dca041dc77271cd6
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 16 Jun 2023 23:43:20 GMT
date: Fri, 16 Jun 2023 23:43:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash f15247b894a1208e9114096e5471926e
9a0866397ba8755ce3feb083c203794575e3cab1
8fe29e24b8a4a510ea04168e92e9134e03d52b292b8616ecd4e02b334247ae07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Jun 2023 23:43:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash f15247b894a1208e9114096e5471926e
9a0866397ba8755ce3feb083c203794575e3cab1
8fe29e24b8a4a510ea04168e92e9134e03d52b292b8616ecd4e02b334247ae07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Jun 2023 23:43:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC9:2E:2A:45:EE:CD:C4:04:39:8F:FA:80:3A:30:4F:97:C2:F4:BF:E4
ValidityMon, 22 May 2023 08:22:04 GMT - Mon, 14 Aug 2023 08:22:03 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www9.pelisplushd.lat
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Jun 2023 03:11:48 GMT
expires: Sun, 09 Jun 2024 03:11:48 GMT
cache-control: public, max-age=31536000
age: 592293
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
doingporteddispose.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRydTUIDNCAUiQLpQClAwufdvb0vUkQ2wcjEiaOErw5mZ2bPg%2Bd2VjM7t2eLwiISChLFUYFEs35nx0piBfgDQOhMZwnho8EFLpDyF0RKx4fOtjj4Nb%2F39r3i7fvNp5vuiPhw9HDhql6XStHZetWvvPx%2BEFysLMnU9Sv9VuODRnSxYnqvBX676r9SeVOwVT0b%2BoHvB35QWZBGJLo%2FGwRB1YfMdttBte1Xo7Aa1CP0zf%2B5dR4s9cB7R%2BRZSD5%2BcvdBBMlGSLvfXhZ2NdfZq290naK5NujxnXfS1VQXKbpTmBgPSbpz6oa2Bws%2FQKfbx4Ghe%2F8aYzkm3sM%2FEKc7pykR97ZPgsYKIkXMn0LRG0GoESQdgelbkPyAAIzj2jLS7p1r2hR07USlE3VMzj1%2BBFmMybnfn0PafTCvZL9yUyuXS51a9JMSsj%2BC7IyQuT3k62cgiz2w%2FBNI%2FjOZfbyEtLu1bJWG5IcXOBdxSySNmbAVipkojBozbcbqMzRux3VR437CguOGpBxBJiMoMQC1Z%2BGsByc9uMSDyzx0%2BWGlyaJWi7fqnArGwjgJWkmURG3K%2FIT5tXYIxyb%2FMECeDcDUAMxsIDMbWJUDGPcj7EoJyz3YnKDHSxSCoLAEBSUoJEGRExS9cpsrG9ryDlfWxcHpDk93rRzqvLNJt3XeESnZzI7IM5PivPPn%2F8aqOKwkSV0kSdyi9VDEjSblQa0ZNUO%2FHrJmIpIEVpaQ9gyo9bAux%2BTFK%2FeQyTF54su%2FENM9WLUHJj1Q9wJoMWyGPujKMGr5WE%2B%2FyYSSNlPOrvCqojm4LpHl55CveZvqiDx%2FfMO5P%2B9CsP1L91%2F65eGHc5%2BBmRKZKfGR%2FImgo24Pb%2BiCbN3QhSXfLWe57Mp1OrnvzZzm4uy9K2Kt0IYvXraDu3NsIkzg7tvC5ks05TLtWHJ%2FXnIuzII2TJDvF%2B17Ir7u7Mq8M6nLlq6%2FvrDYzYywVup0BCoP3v0YTI7J02%2F9dvxyL1z9GtKMYFyJrtsnpwOp98CyDdhsmt5qAqOmnjjzULhyaMJ4%2BlFJAiWmnMYl7H94PMWb9jY6xgPNbyHtluiZEj1VgqoBrDs7zDOzf%2BnX2vEgVt4wVsbbipVRX5xUa%2BVhhTFf0CBuBkJwUa8xFjVYK24ktagpWnVeR27H%2FPNHX%2F0DAAD%2F%2FwEAAP%2F%2FsWHsn4YEAAA%3D
200 OK 7 B URL GET HTTP/1.1 doingporteddispose.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRydTUIDNCAUiQLpQClAwufdvb0vUkQ2wcjEiaOErw5mZ2bPg%2Bd2VjM7t2eLwiISChLFUYFEs35nx0piBfgDQOhMZwnho8EFLpDyF0RKx4fOtjj4Nb%2F39r3i7fvNp5vuiPhw9HDhql6XStHZetWvvPx%2BEFysLMnU9Sv9VuODRnSxYnqvBX676r9SeVOwVT0b%2BoHvB35QWZBGJLo%2FGwRB1YfMdttBte1Xo7Aa1CP0zf%2B5dR4s9cB7R%2BRZSD5%2BcvdBBMlGSLvfXhZ2NdfZq290naK5NujxnXfS1VQXKbpTmBgPSbpz6oa2Bws%2FQKfbx4Ghe%2F8aYzkm3sM%2FEKc7pykR97ZPgsYKIkXMn0LRG0GoESQdgelbkPyAAIzj2jLS7p1r2hR07USlE3VMzj1%2BBFmMybnfn0PafTCvZL9yUyuXS51a9JMSsj%2BC7IyQuT3k62cgiz2w%2FBNI%2FjOZfbyEtLu1bJWG5IcXOBdxSySNmbAVipkojBozbcbqMzRux3VR437CguOGpBxBJiMoMQC1Z%2BGsByc9uMSDyzx0%2BWGlyaJWi7fqnArGwjgJWkmURG3K%2FIT5tXYIxyb%2FMECeDcDUAMxsIDMbWJUDGPcj7EoJyz3YnKDHSxSCoLAEBSUoJEGRExS9cpsrG9ryDlfWxcHpDk93rRzqvLNJt3XeESnZzI7IM5PivPPn%2F8aqOKwkSV0kSdyi9VDEjSblQa0ZNUO%2FHrJmIpIEVpaQ9gyo9bAux%2BTFK%2FeQyTF54su%2FENM9WLUHJj1Q9wJoMWyGPujKMGr5WE%2B%2FyYSSNlPOrvCqojm4LpHl55CveZvqiDx%2FfMO5P%2B9CsP1L91%2F65eGHc5%2BBmRKZKfGR%2FImgo24Pb%2BiCbN3QhSXfLWe57Mp1OrnvzZzm4uy9K2Kt0IYvXraDu3NsIkzg7tvC5ks05TLtWHJ%2FXnIuzII2TJDvF%2B17Ir7u7Mq8M6nLlq6%2FvrDYzYywVup0BCoP3v0YTI7J02%2F9dvxyL1z9GtKMYFyJrtsnpwOp98CyDdhsmt5qAqOmnjjzULhyaMJ4%2BlFJAiWmnMYl7H94PMWb9jY6xgPNbyHtluiZEj1VgqoBrDs7zDOzf%2BnX2vEgVt4wVsbbipVRX5xUa%2BVhhTFf0CBuBkJwUa8xFjVYK24ktagpWnVeR27H%2FPNHX%2F0DAAD%2F%2FwEAAP%2F%2FsWHsn4YEAAA%3D
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectdoingporteddispose.com
Fingerprint4B:56:24:71:36:FE:66:E5:38:B9:5F:7C:3C:56:11:3D:43:B2:B8:CA
ValidityFri, 19 May 2023 18:53:09 GMT - Thu, 17 Aug 2023 18:53:08 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRydTUIDNCAUiQLpQClAwufdvb0vUkQ2wcjEiaOErw5mZ2bPg%2Bd2VjM7t2eLwiISChLFUYFEs35nx0piBfgDQOhMZwnho8EFLpDyF0RKx4fOtjj4Nb%2F39r3i7fvNp5vuiPhw9HDhql6XStHZetWvvPx%2BEFysLMnU9Sv9VuODRnSxYnqvBX676r9SeVOwVT0b%2BoHvB35QWZBGJLo%2FGwRB1YfMdttBte1Xo7Aa1CP0zf%2B5dR4s9cB7R%2BRZSD5%2BcvdBBMlGSLvfXhZ2NdfZq290naK5NujxnXfS1VQXKbpTmBgPSbpz6oa2Bws%2FQKfbx4Ghe%2F8aYzkm3sM%2FEKc7pykR97ZPgsYKIkXMn0LRG0GoESQdgelbkPyAAIzj2jLS7p1r2hR07USlE3VMzj1%2BBFmMybnfn0PafTCvZL9yUyuXS51a9JMSsj%2BC7IyQuT3k62cgiz2w%2FBNI%2FjOZfbyEtLu1bJWG5IcXOBdxSySNmbAVipkojBozbcbqMzRux3VR437CguOGpBxBJiMoMQC1Z%2BGsByc9uMSDyzx0%2BWGlyaJWi7fqnArGwjgJWkmURG3K%2FIT5tXYIxyb%2FMECeDcDUAMxsIDMbWJUDGPcj7EoJyz3YnKDHSxSCoLAEBSUoJEGRExS9cpsrG9ryDlfWxcHpDk93rRzqvLNJt3XeESnZzI7IM5PivPPn%2F8aqOKwkSV0kSdyi9VDEjSblQa0ZNUO%2FHrJmIpIEVpaQ9gyo9bAux%2BTFK%2FeQyTF54su%2FENM9WLUHJj1Q9wJoMWyGPujKMGr5WE%2B%2FyYSSNlPOrvCqojm4LpHl55CveZvqiDx%2FfMO5P%2B9CsP1L91%2F65eGHc5%2BBmRKZKfGR%2FImgo24Pb%2BiCbN3QhSXfLWe57Mp1OrnvzZzm4uy9K2Kt0IYvXraDu3NsIkzg7tvC5ks05TLtWHJ%2FXnIuzII2TJDvF%2B17Ir7u7Mq8M6nLlq6%2FvrDYzYywVup0BCoP3v0YTI7J02%2F9dvxyL1z9GtKMYFyJrtsnpwOp98CyDdhsmt5qAqOmnjjzULhyaMJ4%2BlFJAiWmnMYl7H94PMWb9jY6xgPNbyHtluiZEj1VgqoBrDs7zDOzf%2BnX2vEgVt4wVsbbipVRX5xUa%2BVhhTFf0CBuBkJwUa8xFjVYK24ktagpWnVeR27H%2FPNHX%2F0DAAD%2F%2FwEAAP%2F%2FsWHsn4YEAAA%3D HTTP/1.1
Host: doingporteddispose.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Cookie: u_pl=18224895; uid_id2=ddeb8ef6-282e-4246-9cc5-ab9b5e3d0fc1:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecff5effb8a52eb67ad137472052c7feff=[4324777]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:21 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4d4b704e72a7b26f40fcb372149baacd
Strict-Transport-Security: max-age=0; includeSubdomains
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC9:2E:2A:45:EE:CD:C4:04:39:8F:FA:80:3A:30:4F:97:C2:F4:BF:E4
ValidityMon, 22 May 2023 08:22:04 GMT - Mon, 14 Aug 2023 08:22:03 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www9.pelisplushd.lat
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Jun 2023 07:44:41 GMT
expires: Sun, 09 Jun 2024 07:44:41 GMT
cache-control: public, max-age=31536000
age: 575920
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash f15247b894a1208e9114096e5471926e
9a0866397ba8755ce3feb083c203794575e3cab1
8fe29e24b8a4a510ea04168e92e9134e03d52b292b8616ecd4e02b334247ae07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Jun 2023 23:43:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
doingporteddispose.com/pixel/sbs?c=1
200 OK 0 B URL GET HTTP/1.1 doingporteddispose.com/pixel/sbs?c=1
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectdoingporteddispose.com
Fingerprint4B:56:24:71:36:FE:66:E5:38:B9:5F:7C:3C:56:11:3D:43:B2:B8:CA
ValidityFri, 19 May 2023 18:53:09 GMT - Thu, 17 Aug 2023 18:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: doingporteddispose.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Cookie: u_pl=18224895; uid_id2=ddeb8ef6-282e-4246-9cc5-ab9b5e3d0fc1:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecff5effb8a52eb67ad137472052c7feff=[4324777]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:21 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
watchsb.com/player8/jwplayer.8.9.5.js
200 OK 35 kB URL GET HTTP/3 watchsb.com/player8/jwplayer.8.9.5.js
IP
Requested by https://watchsb.com/e/6ayk1wtpgb21
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintBF:69:A6:E9:1C:04:97:E1:BA:3B:A6:73:C7:76:32:5C:69:66:CF:EA
ValidityWed, 01 Mar 2023 00:00:00 GMT - Wed, 28 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65142)
Hash 276612f7feaf29b652ccc818eb133d90
55fed74a3c41c4577256138572efe3cb730f3059
42134f93416be42cff23952942d6141c8a74c75e438b5194ddf52e9cfe300393
GET /player8/jwplayer.8.9.5.js HTTP/1.1
Host: watchsb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://watchsb.com/e/6ayk1wtpgb21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 08 Mar 2023 09:04:18 GMT
etag: W/"64084f92-1a85d"
expires: Fri, 23 Jun 2023 18:22:26 GMT
cache-control: max-age=604800
access-control-allow-origin: *
cf-cache-status: HIT
age: 19253
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hhKvVn8lD1UxtmqDcVWvr7rzTuetYS7sRU%2FjSHO9nSqT6O%2B1cOzHkbjMAyVATuMpgiFzLZpyGemzeSxp9bA55JMsLxa33ct17tETQX2NPHvfmKJMfsIKmffn31XNAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea13bcaa71e7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
addresseepaper.com/sfp.js
0 B URL GET addresseepaper.com/sfp.js
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/css/style.css
200 OK 7.6 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/css/style.css
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint88:10:E4:38:7C:46:CF:44:7C:D0:C8:1F:06:39:9F:7E:A5:2E:27:4A
ValidityThu, 27 Apr 2023 15:05:54 GMT - Wed, 26 Jul 2023 15:05:53 GMT
File type ASCII text, with very long lines (8106), with no line terminators
Hash 83de8b4bf040e193fcc2cae881ad9bfa
6da4ac90cb0059a2dd698ad9ecb294f3dae99a4a
88e65386dff64696b61a8f5a62281b94e1b27c79458177f2f375190a7b78e460
GET /sb/ssp/utility/social-media/instagram/new/4/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www9.pelisplushd.lat
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:20 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 09:41:34 GMT
etag: W/"6336b9ce-1dda"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gLdKW8ulZGsb2Aw6UsOm6Q9fthFciCIG5IEZ5SnSd9NzuqTby0JrZzHBeczpqzActN8pDhSsHxjXyB1KD2g7IV5NGlM9mJFw96rz2RXe9GPzaWgPWQt%2FNazZsaoUCW1NM4gyxW3dxKm5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea1a9e9f418e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/img/close.svg
200 OK 1.3 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/img/close.svg
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint88:10:E4:38:7C:46:CF:44:7C:D0:C8:1F:06:39:9F:7E:A5:2E:27:4A
ValidityThu, 27 Apr 2023 15:05:54 GMT - Wed, 26 Jul 2023 15:05:53 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- exported SGML document, ASCII text, with very long lines (1463), with no line terminators
Hash 42e5fd211191543ecb89479c9a133cda
47fcfccfd279d5547da59a7683a8924c99e81b5c
21553825d8d8eb94976b5f7afa323070d89cc30c3f8defb71e896736b2b08aa6
GET /sb/ssp/utility/social-media/instagram/new/4/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:20 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Sep 2022 21:49:43 GMT
etag: W/"6334c177-52a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 9888507
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xQdC7RJ0vEPL5Xn%2BfGPRdQOTMYLipLAF8yF%2FZV%2B62RzL5pYReb0gcOAO8firvV8A3FBK%2BKMkkRZYgfW0qJ4IfIq9feGNvayyvPLJK1Kst4yHkB%2FLLabMBIGsLwbg8IBJfA%2Bz%2BfEa5KQ6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea1aff03418e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www9.pelisplushd.lat/static/js/app2.js
200 OK 1.5 kB URL GET HTTP/3 www9.pelisplushd.lat/static/js/app2.js
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type ASCII text, with very long lines (1499), with no line terminators
Hash c3cf68be5857e2674a228ce394efb00f
ac276df38ae8727e8ad8e0d0687a58e29afd32e7
65d9736c034d11064c761c3ce98766a62a29065509da89a8d9ea398bb72c2684
GET /static/js/app2.js HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
etag: W/"61ce7f8e-5c1"
expires: Sat, 17 Jun 2023 06:23:26 GMT
last-modified: Fri, 31 Dec 2021 03:57:02 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 19192
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HbD5LZ%2FIZDIPuspZ%2FlXNQmcBcI4iegT38uNqhiscSlnWFaHmnvUrX9RgJvisCpYqqiEElvGnu2FY1R0Qq8ZiqwGOeSz8S9PGeN7wYNK4SajhSXytaa2ggvyXJ3HncmV4AruJp%2Fa2yQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea0d2caa7327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/static/js/load.js
200 OK 4.2 kB URL GET HTTP/3 www9.pelisplushd.lat/static/js/load.js
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type ASCII text, with very long lines (4282), with no line terminators
Hash ac8a03de5511b26ef8449f77f5f227f7
7ea25cc5959fd244396488b759e59412dc5c1e39
feac15ccfd2af24b1a7a010f514989647a96ef0b08faca4b15015652d684ed0f
GET /static/js/load.js HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
etag: W/"61ce8032-1055"
expires: Sat, 17 Jun 2023 06:23:26 GMT
last-modified: Fri, 31 Dec 2021 03:59:46 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 19192
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YOKwCVDZLfmGoxfYeoJUwdgiqz6UsgY0%2FhCdn22oGsiRJ8%2FIUXEn3vvAlycYs6fs0XGWwKLycfM3f52eKblbTOOR72Q6DAOuz3QAj5ly0%2FW0fRCoTiU7yVcDCqD7vYvBntqO5NCfMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea0d2cb17327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/static/images/logo/apple-touch-icon.png
200 OK 16 B URL GET HTTP/3 www9.pelisplushd.lat/static/images/logo/apple-touch-icon.png
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type ASCII text, with no line terminators
Hash 7b5ea53ba332630e5aca8e4abb807f70
d78ce9bb512ba2daf191b2d02729ba41ab1924ee
66a1aec8c3669c1c2e13625849996ab09a81a4df712e8ce6c88d025d110cdad9
GET /static/images/logo/apple-touch-icon.png HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=6a54ae33-4f60-42dc-9a9e-2201c1d2ed19%3A2%3A1; ppu_main_2c7ffbea44b892b7250bf633396a8cac=1; sb_page_ff5effb8a52eb67ad137472052c7feff=1; sb_onpage_ff5effb8a52eb67ad137472052c7feff=1; sb_main_ff5effb8a52eb67ad137472052c7feff=1; sb_count_ff5effb8a52eb67ad137472052c7feff=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: image/png
content-length: 16
last-modified: Sun, 23 Jan 2022 02:37:02 GMT
etag: "61ecbf4e-10"
expires: Tue, 11 Jul 2023 16:29:33 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 458026
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RNQZ01seTQta%2FpGVfZVcws6k4MBa5ago2OiqmoRK875K80XEX9SJZanTS7afkzCoe0QKqyBUlKXq9EUwFnxzQWY7f3bLHMXppcZW7%2Fd52apXd2tqg3iKoxjQxMIrjjzS5VMs8%2FoF7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea150a457327-LHR
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/static/css/others.css
200 OK 262 B URL GET HTTP/3 www9.pelisplushd.lat/static/css/others.css
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type assembler source, ASCII text, with no line terminators
Hash c4b2a1e1413119c863ece12786fa4272
543d9260bb392b665b5fd39f502d4dc2b8f2f111
1cea9189a559bb5fe1460c06a665fec98205cc38cba96017d470522762ea86b6
GET /static/css/others.css HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=344
etag: W/"61d7d496-158"
expires: Sat, 17 Jun 2023 04:34:59 GMT
last-modified: Fri, 07 Jan 2022 05:50:14 GMT
cf-cache-status: HIT
age: 25699
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S3wCdyAsf1msDGRi402gEj9QqDvHUO%2FlGthZLnvQll2LK4Z8svxL87qJ83DPLjmclZYG0X8%2BLO4fm1ikFMm0quvCVVn2mFmClruzc2AtkUwtH5rY9BaVItUzgBek95LMAl3K1eCx%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea0d1ca47327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/static/css/app.css?v=1.2
200 OK 45 kB URL GET HTTP/3 www9.pelisplushd.lat/static/css/app.css?v=1.2
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type ASCII text, with very long lines (45104), with no line terminators
Hash 35d00e011031b6dc02698832a2f8ad9b
570b19750398025e8165c89d59cfa15c86ae06c2
e84711b31ee4879f5adfe2e4a639837c7b54a672eb2c245e5dfd76d2f8a4c052
GET /static/css/app.css?v=1.2 HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=58559
etag: W/"6247f94c-e4bf"
expires: Sat, 17 Jun 2023 05:18:38 GMT
last-modified: Sat, 02 Apr 2022 07:20:44 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23080
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1xgsYdF55%2FNUIAKSCUp9jA%2BLxy0I12yYkuXMzovr2%2FKvURc%2FHArTAKkxF4BMEZPggByO9xIw7e5LNg3fcBLduAgbmd7YmlgI5J%2BxxqiY%2B33EjXZwCiRtddlfIxBPRLRbKADxKow19w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea0d1ca17327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/static/js/perfect-scrollbar.jquery.min.js
200 OK 25 kB URL GET HTTP/3 www9.pelisplushd.lat/static/js/perfect-scrollbar.jquery.min.js
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type ASCII text, with very long lines (25086)
Hash b4e42d596127ea16f0150021ddf74901
82044ba7df0f805a589a6bca7269544a4ef04094
da5c19d735b8439914d618639384cfdaa1f6ec7574bfc0fdb89317490ea83735
GET /static/js/perfect-scrollbar.jquery.min.js HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: application/javascript
last-modified: Thu, 27 Jan 2022 01:39:28 GMT
vary: Accept-Encoding
etag: W/"61f1f7d0-621d"
expires: Sat, 17 Jun 2023 06:23:26 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 19192
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mex9l2FRFSs%2B%2FNYDpeKnAJmS54bRgMx1eDMribqIelXUjMcQN2pueVT110UbZEkVfgXrXvEUkcXQojIW89UTcWrbhcRRQAjN7I%2BH6rph5GGw43x0tjWVyg0VFO5gPsFwKRY9PddQqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea0d2ca97327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=UA-166622646-1
200 OK 126 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-166622646-1
IP
Requested by https://watchsb.com/e/6ayk1wtpgb21
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint10:38:7C:36:39:48:3A:75:B3:8C:F2:4A:E7:C5:44:0B:9D:46:7F:F8
ValidityMon, 22 May 2023 08:17:22 GMT - Mon, 14 Aug 2023 08:17:21 GMT
File type ASCII text, with very long lines (2271)
Size 126 kB (126153 bytes)
Hash 1b3fb970b9cf78656d7392a5815a7972
542991250ef269dae6bd876098d4f1be22b8c158
1a7381bb522bafd4ef402dd8d448f0b96ba3b73ea1f451d2233607ed1679b56c
GET /gtag/js?id=UA-166622646-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://watchsb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 16 Jun 2023 23:43:19 GMT
expires: Fri, 16 Jun 2023 23:43:19 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 48659
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
watchsb.com/assets/jquery/cldaly2.js
200 OK 269 B URL GET HTTP/3 watchsb.com/assets/jquery/cldaly2.js
IP
Requested by https://watchsb.com/e/6ayk1wtpgb21
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintBF:69:A6:E9:1C:04:97:E1:BA:3B:A6:73:C7:76:32:5C:69:66:CF:EA
ValidityWed, 01 Mar 2023 00:00:00 GMT - Wed, 28 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash f3960419a364bab377aaa61d85f5ac3e
9449d1216efad04d66c920eafba4aeff9804bd86
f1ba24c3aef2c19c1a4f14737838d89d9ee88222df3d38ed52863d606e444994
GET /assets/jquery/cldaly2.js HTTP/1.1
Host: watchsb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://watchsb.com/e/6ayk1wtpgb21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: text/javascript; charset=UTF-8
expires: Thu, 15 Jun 2023 23:43:19 GMT
set-cookie: lang=1; domain=.watchsb.com; path=/; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1vQPXlA7g%2Bidcq%2BPfoPlxc39NR6YarMFWUug%2Bsz47248K3D%2BD4ttIffPLZy3qrGj%2F6h98v%2B10PotpWrpvb%2BDQTl%2BwvQ%2B3lM%2BE1MMX2Of%2BHavCgVADRjItwjO90q%2BlA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea13bcad71e7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
watchsb.com/js/jquery/jquery.min.js?v=1.1
200 OK 76 kB URL GET HTTP/3 watchsb.com/js/jquery/jquery.min.js?v=1.1
IP
Requested by https://watchsb.com/e/6ayk1wtpgb21
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintBF:69:A6:E9:1C:04:97:E1:BA:3B:A6:73:C7:76:32:5C:69:66:CF:EA
ValidityWed, 01 Mar 2023 00:00:00 GMT - Wed, 28 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e3a87508cf238d0f1ea44a644fa15250
294e6ed97c2a29d1096a081140faf25f814ec300
1fcc35bfc2ced256e9800759ccaddc00641f3f299b8cd2642ffca896e1390f3c
GET /js/jquery/jquery.min.js?v=1.1 HTTP/1.1
Host: watchsb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://watchsb.com/e/6ayk1wtpgb21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 25 May 2023 19:07:28 GMT
etag: W/"646fb1f0-1295a"
expires: Tue, 20 Jun 2023 18:18:40 GMT
cache-control: max-age=604800
access-control-allow-origin: *
cf-cache-status: HIT
age: 278679
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6SgCb%2B7zGOlZ5%2BPd2QjD1px49qZZVxKMW75aiJez%2BlYmCr%2ByGlTerHyWHgLgjta372AUUv6gCvdzciF0%2BClLljZuv20xtkUT7M1Zm3MeALS4ccegkqErg9xyHt%2BmvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea13bc9e71e7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/static/css/owl.carousel.min.css
200 OK 3.4 kB URL GET HTTP/3 www9.pelisplushd.lat/static/css/owl.carousel.min.css
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type ASCII text, with very long lines (3386), with no line terminators
Hash 8f7873e82e87c8d93ce5ddccf5bbe850
b302eea77ee3249a1c09e6b772bfc56297004155
ed563290f3cce297ddf8d6cb5949375268d3e5ad4be670b1b92d99f816c721da
GET /static/css/owl.carousel.min.css HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: text/css
last-modified: Fri, 31 Dec 2021 03:59:00 GMT
vary: Accept-Encoding
etag: W/"61ce8004-d2c"
expires: Sat, 17 Jun 2023 04:34:59 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 25699
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w7I%2FU6Ji9OKXeSkelRoAXESy%2Frd2bE4hN9LmeKvZ51tF6eFFzBA6o5rRB4D293pwXriEpTVZBfPEflXw2GUjvDCnV%2FVQaF3WvUSkDoeXfH1dhIsz5%2FGyNtOgtkASpGo5WECdwuN0Gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea0d1ca37327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/static/js/owl.carousel.min.js
200 OK 44 kB URL GET HTTP/3 www9.pelisplushd.lat/static/js/owl.carousel.min.js
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type ASCII text, with very long lines (31997)
Hash f416f9031fef25ae25ba9756e3eb6978
e2a600e433df72b4cfde93d7880e3114917a3cbe
a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d
GET /static/js/owl.carousel.min.js HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: application/javascript
last-modified: Wed, 26 Jan 2022 08:29:24 GMT
vary: Accept-Encoding
etag: W/"61f10664-ad36"
expires: Sat, 17 Jun 2023 11:43:18 GMT
cache-control: max-age=43200
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g0rH1i9kgOYp6%2Bg4jA0VstmdynkaL5Q%2FuwLc7cZs4%2B0%2BMB3%2BjgDxGco4JuB6%2FJKrc5MHJMQET2WGZWRENLyqN03Gw52Gn09NG2jBFP6SJ1taLyXM5WGGjZFe3VsHUeQy6VvzoLBxFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea0d2cb27327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
doingporteddispose.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fcss%2Fstyle.css&l=7642&fd=241
200 OK 0 B URL GET HTTP/1.1 doingporteddispose.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fcss%2Fstyle.css&l=7642&fd=241
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectdoingporteddispose.com
Fingerprint4B:56:24:71:36:FE:66:E5:38:B9:5F:7C:3C:56:11:3D:43:B2:B8:CA
ValidityFri, 19 May 2023 18:53:09 GMT - Thu, 17 Aug 2023 18:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fcss%2Fstyle.css&l=7642&fd=241 HTTP/1.1
Host: doingporteddispose.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Cookie: u_pl=18224895; uid_id2=ddeb8ef6-282e-4246-9cc5-ab9b5e3d0fc1:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecff5effb8a52eb67ad137472052c7feff=[4324777]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:21 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
doingporteddispose.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fd3%2F55%2Ffb%2Fd355fb06fa4f4907609b7d285fa07f7a%2F1664530003.html&l=1175&fd=98
200 OK 0 B URL GET HTTP/1.1 doingporteddispose.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fd3%2F55%2Ffb%2Fd355fb06fa4f4907609b7d285fa07f7a%2F1664530003.html&l=1175&fd=98
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectdoingporteddispose.com
Fingerprint4B:56:24:71:36:FE:66:E5:38:B9:5F:7C:3C:56:11:3D:43:B2:B8:CA
ValidityFri, 19 May 2023 18:53:09 GMT - Thu, 17 Aug 2023 18:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fd3%2F55%2Ffb%2Fd355fb06fa4f4907609b7d285fa07f7a%2F1664530003.html&l=1175&fd=98 HTTP/1.1
Host: doingporteddispose.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Cookie: u_pl=18224895; uid_id2=ddeb8ef6-282e-4246-9cc5-ab9b5e3d0fc1:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecff5effb8a52eb67ad137472052c7feff=[4324777]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:20 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
doingporteddispose.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fcss%2Fanimate.css&l=79245&fd=365
200 OK 0 B URL GET HTTP/1.1 doingporteddispose.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fcss%2Fanimate.css&l=79245&fd=365
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerLet's Encrypt
Subjectdoingporteddispose.com
Fingerprint4B:56:24:71:36:FE:66:E5:38:B9:5F:7C:3C:56:11:3D:43:B2:B8:CA
ValidityFri, 19 May 2023 18:53:09 GMT - Thu, 17 Aug 2023 18:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fcss%2Fanimate.css&l=79245&fd=365 HTTP/1.1
Host: doingporteddispose.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Cookie: u_pl=18224895; uid_id2=ddeb8ef6-282e-4246-9cc5-ab9b5e3d0fc1:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecff5effb8a52eb67ad137472052c7feff=[4324777]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Jun 2023 23:43:21 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
www9.pelisplushd.lat/static/js/jquery.min.js
200 OK 87 kB URL GET HTTP/3 www9.pelisplushd.lat/static/js/jquery.min.js
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /static/js/jquery.min.js HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: application/javascript
last-modified: Thu, 27 Jan 2022 01:38:54 GMT
vary: Accept-Encoding
etag: W/"61f1f7ae-1538f"
expires: Sat, 17 Jun 2023 04:34:59 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 25699
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E0idLe0VamEmnxMiqxRs9MFRaBe4mTaiBWyvu6%2Bi4v%2FX4m2chKzovIjH8%2FDp4y%2FKUwK09dUTPv9cdSInEj7Uknl1F3fmwzgFQcNdVA67HuM7OdwGM3rKG%2F3OLNrLnQWpWqtXXy%2F%2FBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea0d2ca57327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www9.pelisplushd.lat/static/js/util.js?
200 OK 2.5 kB URL GET HTTP/3 www9.pelisplushd.lat/static/js/util.js?
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type ASCII text, with very long lines (2530), with no line terminators
Hash 7ce62a861686b288b93dfcc4ba6245c1
97ac9cb06769a620abe4fc255671cac4ebfce455
5ab08baa5925fc41ffb2fb31bb9413924d7ab3fce230fe76ac5d89f8abaab7e2
GET /static/js/util.js? HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
etag: W/"61db1f2c-9ba"
expires: Sat, 17 Jun 2023 06:23:26 GMT
last-modified: Sun, 09 Jan 2022 17:45:16 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 19192
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aIb208pBYma9%2FyCxqFzrSnTtRcMXCbRvONq5MW8i5CfSdAyQUjN%2FGD1v7WjspX61gHt6kKNq8OHMaNUpQC98VW84e43UX2zQwtOEiZdIxRbyysA7DK1erdELRph9TcjYuBdzq%2B8aog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea0d2caf7327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
watchsb.com/e/6ayk1wtpgb21
200 OK 508 kB URL GET HTTP/2 watchsb.com/e/6ayk1wtpgb21
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintBF:69:A6:E9:1C:04:97:E1:BA:3B:A6:73:C7:76:32:5C:69:66:CF:EA
ValidityWed, 01 Mar 2023 00:00:00 GMT - Wed, 28 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (39036), with CRLF line terminators
Size 508 kB (508524 bytes)
Hash 51a5186c9795c0d532f742e5f76c51a7
a1efca94f40b9a369b4fffee49346655c17216fa
ca0618d25c1f176066d53a1630db52400cc3646c99464d7a3965fb47139d66e8
GET /e/6ayk1wtpgb21 HTTP/1.1
Host: watchsb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: text/html; charset=utf-8
last-modified: Fri, 16 Jun 2023 18:36:22 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mVjAVBvXKc8atcdzHy0D7MaKH12c0A5UZOODYFBHJ4FMMDR7Iol4vpzFvukfZAdn59KDX3GuLf%2FPbCanNeOYU2RidxcVUFXkwgVMgaLOt5SCYlffGtvcP83LvG%2Fz9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea120d617743-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
200 OK 23 kB URL User Request GET HTTP/2 www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serie/star-wars-rebels/temporada/1/capitulo/1 HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lCqP6J5p3n6BZGUiY%2FteU1TcEIbnpjC6kjbF0s0oHFDioeqCGl4jpcOvRmZ2SvprWlDlOmUlQNrSLxjZxdlqot1hjlq8cTliL62BjxdQ7RMvNRIG6BtvoqmTXcYf42rFii%2Buagabhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea09892c251a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/css/animate.css
200 OK 79 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/css/animate.css
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint88:10:E4:38:7C:46:CF:44:7C:D0:C8:1F:06:39:9F:7E:A5:2E:27:4A
ValidityThu, 27 Apr 2023 15:05:54 GMT - Wed, 26 Jul 2023 15:05:53 GMT
Hash 80047eaa13ebd50c50e8a9753621e430
9c503e07d130572a0eaf51f7c02cbd4cf6213fe3
3f831a59615f8d5d40b4340b2836f91438c876f8dbce75f78e38360d6fe0f429
GET /sb/ssp/utility/social-media/instagram/new/4/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www9.pelisplushd.lat
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:20 GMT
content-type: text/css
last-modified: Mon, 26 Sep 2022 10:05:22 GMT
etag: W/"63317962-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g3cXYoL5UCJhrMStxRn6d9qwHvJo33JRRuv%2BToR6GLfMI5dmFZZIgrKqE5NFlhfojkDNKXmeEnAiRmR65av9o88WpaRSkBNKNgA%2BcA8DogDuhmR4yjuUllKbTQw0x2S4yE46pFGNPL0F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea1a8e88418e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www9.pelisplushd.lat/static/js/tab.js
200 OK 4.9 kB URL GET HTTP/3 www9.pelisplushd.lat/static/js/tab.js
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerGoogle Trust Services LLC
Subjectpelisplushd.lat
Fingerprint18:EC:3A:97:3F:80:71:47:F2:F7:71:9A:EA:FF:E4:C1:75:FF:85:93
ValidityMon, 24 Apr 2023 01:45:15 GMT - Sun, 23 Jul 2023 01:45:14 GMT
File type ASCII text, with very long lines (4909), with no line terminators
Hash b05015755cd236d584af41521a01129e
254ec79b90a40af18174eb744d9d53ca838b7a84
7fc2b4891925301c1137169faaa9f2ccfa51a2c92f6aa1cbc7bd81b2bcc9ff68
GET /static/js/tab.js HTTP/1.1
Host: www9.pelisplushd.lat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Jun 2023 23:43:18 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
etag: W/"61df9ed0-12fd"
expires: Sat, 17 Jun 2023 06:23:26 GMT
last-modified: Thu, 13 Jan 2022 03:38:56 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 19192
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L4VCzS92y3fOQyRk8QQqFRx72%2BHESGJlPaNgEuU5VfqDJkYyXLThtoaQgAG%2FuBmz885sqXzT7HxGw8lpkGjBC8C67nyFvk6KDxlhHKMX4QEj1%2FWVGYOB8bOeayFDFdlP5AK8CIil0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d86ea0d2cab7327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://www9.pelisplushd.lat/serie/star-wars-rebels/temporada/1/capitulo/1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www9.pelisplushd.lat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Jun 2023 23:43:19 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: e047e1f2d0519f87b0e8fee7c04d0f64
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 16 Jun 2023 23:43:18 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6eNTUfxj%2BZuqMLwt0w9sKQMARLUq0jB%2Frv1gHNEi1VaRYtCDAYZ2fyZzVLqxbK7TqJ8vG3H7pioNbzb5wTuy9aIh2IfR5xDCb4tF%2Bu6KyAXV4HFf2heQ7bqTV7C6bTGgbq5NM6Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d86ea11bb6b4970-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
172.64.206.34
104.17.25.14
188.114.97.1
52.58.93.188