{"report_id":"1c79a7e4-d095-4a5b-b723-2a55f5b1f9f7","version":6,"status":"done","tags":[],"date":"2026-02-28T18:22:16Z","url":{"schema":"http","addr":"cineby.bz/movie/1893","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"104.21.31.155","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cineby.bz/movie/1893","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"title":"Star Wars: Episode I - The Phantom Menace (1999) | Cineby Official","dom":{"size":64630,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"4af56104d39464d8f3b4eb739d74fdf8","sha1":"442f6911d3c6403f4eb8d774b9ef55b1d8ac5a38","sha256":"2d45ff9021fca402df3d09134e6b1b965dc7ea9ea9ce71697586c4f9919006a4","sha512":"1d0ca97033bfba52a3ca45e3160481378f4977f0717a23f1e97badbd20e278dc23fc51adf218b9d3df6b1471634b351e0601440f833c43eac5a881284e940681","ssdeep":"1536:YpRp4itiDbObwHuHPFlFFFPFcWbUMpM+1:YpRp4itiDbObwHuHPFlFFFPFcWrM6","tlshash":"7353be6a2de11100960a5664a3fe5b282b1c8983195ffcfdb3915c8d8f45abc53ef21f","dom_hash":"domhash57b46785fa6786cd641ecca540fedb22","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cineby.bz/movie/1893","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"104.21.31.155","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-04T18:22:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":21}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cineby.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"soycdn.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"motorstroke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"protrafficinspector.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"protrafficinspector.com","ip":{"addr":"35.156.44.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-02-25T19:05:35.017547Z","alert_count":2,"request_count":2,"received_data":712,"sent_data":926,"comment":"","tags":null,"fingerprints":null},{"fqdn":"creative-sb1.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2026-02-25T20:42:18.329747Z","alert_count":18,"request_count":6,"received_data":184803,"sent_data":2745,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sourshaped.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-06T14:35:38.581947Z","last_seen":"2026-02-21T22:42:41.82197Z","alert_count":12,"request_count":4,"received_data":2052,"sent_data":2229,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2026-02-26T11:37:33.494036Z","alert_count":3,"request_count":1,"received_data":377,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-02-26T05:36:47.065641Z","alert_count":6,"request_count":2,"received_data":171912,"sent_data":814,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"soycdn.lol","ip":{"addr":"104.21.41.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-26","domain_rank":0,"first_seen":"2025-09-28T04:50:37.418447Z","last_seen":"2026-02-22T08:40:35.968706Z","alert_count":1,"request_count":1,"received_data":1664,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"image.tmdb.org","ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2009-09-15","domain_rank":53077,"first_seen":"2021-01-09T06:43:03Z","last_seen":"2026-02-25T22:52:08.666637Z","alert_count":0,"request_count":15,"received_data":247136,"sent_data":6871,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"motorstroke.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-12-30","domain_rank":0,"first_seen":"2026-02-10T04:48:06.2848Z","last_seen":"2026-02-28T14:15:32.599962Z","alert_count":6,"request_count":6,"received_data":221911,"sent_data":5402,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-02-25T22:03:32.699781Z","alert_count":2,"request_count":1,"received_data":2081,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":2,"received_data":87942,"sent_data":1088,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cineby.bz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-24","domain_rank":0,"first_seen":"2026-01-24T18:42:11.945546Z","last_seen":"2026-02-01T00:49:31.640463Z","alert_count":7,"request_count":7,"received_data":139185,"sent_data":4088,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-02-26T05:36:47.125303Z","alert_count":6,"request_count":2,"received_data":1060,"sent_data":1522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cineby.bz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f62853e371c3bb61b2046eeb33c00e15","sha1":"f5bb925e7213acc0788cfa62eb5c7445cb38ae7e","sha256":"31e06f87667785efb00d63cab5ca2bf7819ab931e39e05ab1158335da023926c","sha512":"03c35a4cb1c027b38dc8c21b5adcf479123b1ab1070c0ca1b2d4062054d469ed6fb26f9b641bb94a4ac75e51148d3bdde8f311e750bd1102c9cf69c49b70db39","ssdeep":"384:evSXVULcsBXAa2+Q3RD+BRQHduXixNrWmuWLWU7SLLiw3Sed58UgefnkiSe29hdx:IrlXAa2ewowlPReLLiGqebW","tlshash":"d3d291ceb4eeb5a9833e38b0c0a775c6e5aefd8c25554908e210d4f8f46c3789862d4c","size":30224,"data":"","first_seen":"2026-02-28T18:22:20.364936Z","last_seen":"2026-02-28T18:56:03.065798Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"motorstroke.com/f2/d8/f7/f2d8f77afbc58792853a7736c0084b21.js?v=2025-12-31","fqdn":"motorstroke.com","domain":"motorstroke.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45e936af7d1d49e8dc5b566bce674b83","sha1":"0658ed634b8c69ea8264f0f0934e13e77f4cdd72","sha256":"66a9ef0a269009c6c8a29f45a8993dc573158291c12550ca36207c56730d3ae4","sha512":"379ba9aa0e31877d411cb5458b87d3900b60a974a94da5eb2461dea91a23670527e38f22c0aaee7c9ddd94e77563e19609550aa19157f485809f6cfb5d49af88","ssdeep":"1536:m5J9++sKqFGQDSAiLoHL0cTIgV2BOPsuUd7s/KER1Uwu1V4aYLuvGgIo5+phrtXj:mhsKOGQDSAiLoHQcTIgV2BGsuUd7s/KI","tlshash":"6693d84c3f82b0d41397707b762f902bf23b5c955868e88de243adac5da9719a337e05","size":92308,"data":"","first_seen":"2026-02-28T18:22:20.383857Z","last_seen":"2026-03-01T06:27:25.251148Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-21T20:38:52.44076Z","times_seen":23248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-21T20:38:52.44076Z","times_seen":23248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-07-21T19:12:07.414917Z","times_seen":12874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"soycdn.lol/share1-1.js","fqdn":"soycdn.lol","domain":"soycdn.lol","tld":"lol"},"ip":{"addr":"104.21.41.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c11c3cd4396555681f16746409f88c34","sha1":"c8a40158b09ea100d74012c94ceeb524a71a8be3","sha256":"6e825f24aadbc90a0cb1b51d6928ec60cfca8983b6063e5ee7c8585ba77e8850","sha512":"365e87c239364d8281bca8fe67826cda37e497f24b152c9d69645de3f121a1cd517d67d3de3db3ccf8e18be60fc64a731abedc3d8465674f59fe2652e97e4c1b","ssdeep":"","tlshash":"8b110e289cd3207458292026003fe00971a55a473a1aee92300cf2c5ef00ff44daaafc","size":1009,"data":"","first_seen":"2026-02-10T04:51:57.204384Z","last_seen":"2026-02-28T18:22:20.347412Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ca8b97978a481746357ec80f6feb612","sha1":"3bf8e09b3bb68b0bc602170135f26fabaa8d0217","sha256":"cdbbc47091c79c3acf6eb3e3f75793a55e46af723e5b9ef453ce4aaf2dd70655","sha512":"0c4d6b5ac4484f54e9f43660b05bc6c8ee2b6ab8c723b3745f5aa4d80686d3276c912d970e59139d2e09d866eedafdebe41790eaeecd96037973cb01dbd850e6","ssdeep":"","tlshash":"7cd023b51c798930719d02473076d7a4356164507751f14481c9cc3f6e21dd744f2a58","size":217,"data":"","first_seen":"2026-02-28T18:22:20.440384Z","last_seen":"2026-02-28T18:22:20.440384Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cineby.bz/movie/1893","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"39e082e5c95d2c4c13a68664440b5043","sha1":"45ab58a2adc8f938176cea6930856b22922e22d5","sha256":"9408e82d24610c06f7f88b8bf926b0aa044e8bcfecd6d58d232b4f51615d8e82","sha512":"3b9b6a48127a7f59785e0a65f54aab8fe913659f78bb377ff52dd1d7bb20152c8a6f27ddcd6f38b4a9dc151cf0fe6b995bb88e80d79b75a59530da556d529be4","ssdeep":"","tlshash":"93e0ab2998e706384cf63a441039ca3934f838a0aaa3d027525cc82ccd39fc54c00aec","size":424,"data":"","first_seen":"2023-05-21T10:06:22Z","last_seen":"2026-07-21T17:55:57.279525Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"motorstroke.com/huq/xRIi6nAUrwy6ab/_7YCYsE5DqdS/YzDI18t9/U5r/i2LiHZ/-3l6Vtf4/ni5kUisrWQ8lcfUJW/bBqonNRzVyIQus66DDJ/oiwpbKCpR1idNVL8M17/yzINsObcrHSYV/hL8?v=2025-12-31","fqdn":"motorstroke.com","domain":"motorstroke.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce103f7733e97aa7000d3f45a5a2ffac","sha1":"f43032795b5768f6fb32df37e6744b5ca245bf45","sha256":"c3c4feba15b2e599bb52bbb603e95241ebd0c5f9feb47dc3cbaeea1eeb275c45","sha512":"e007dc157b46aeee905cba5279131eda0f3c9decf472972582a0f7aa3d927c6721d346fe24b7ed9edbb874b4a341043fa718ca241dfc1923fac69f4049adb0a0","ssdeep":"1536:hkhtkzFYyzgCdBs5fH1e5pfc6UEiVARrSli0oQnBXAO43ldcX9QK8XTW:FzgCdRfcciVyrSlHrBXAO4VuQK8i","tlshash":"afc3d84c7fc1f2ad528a20b2222f504ef4590d59908ce198eb47f47d2fbc72ab979b51","size":118938,"data":"","first_seen":"2026-02-28T18:22:20.42104Z","last_seen":"2026-02-28T18:22:20.42104Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b1318c9639f32e7bdddcae692ebc668","sha1":"84b46a23918a374420f1bfccd7b9abe6095a9909","sha256":"033e025b91b951d5f9bf3e95fff2c858022d9752ed5ac5b22005991a491ac691","sha512":"0cb13d0cbfffbacb32468f34adeb58a6f8d980a3381b4e4e246b2ac2ad192ed959bbd421e784c6603b114e2f41982bedd882141a4ad82f4110c2d862a42f6fec","ssdeep":"192:CIOWDZmpe4crcYmeV+VHJmQxdCnV8oDeQToJ:CIOWDZmpe9V+VHUACnn+","tlshash":"c502420809fad521d00db03e203e2265f7644a53ac9abed8bb8485055fded6f79b903f","size":8627,"data":"","first_seen":"2025-10-13T02:38:57.729937Z","last_seen":"2026-03-15T19:28:45.143982Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cineby.bz/movie/1893","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"470562c5be11ff3deeb729fe34d87f0f","sha1":"5c7e5d570e9a87c3c919b9c6358d0b991089d601","sha256":"c972a482acd8ee31b31abc56e2dbcfb0d7b561160bd6c6abf4a472352e26abe4","sha512":"e7b039dcd12dbace363ff5025afa5fd7540db26bc00bb3cd89739be253f9901a0612cb4501b83888b76f2992ee7fe80309ada0f315c75bc2f68684c8cae304ec","ssdeep":"192:tbU3TzC8nRtS5bOCsWyFfHIcN89cCZaCvgQxUEO:xkP5U4pWyfN4cCZaCvgku","tlshash":"4802a4f6b8442c370cf718fbe099176c793bc100f947918464adc8944767f90b937aaa","size":8725,"data":"","first_seen":"2026-02-28T18:22:20.449795Z","last_seen":"2026-02-28T18:22:20.449795Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cineby.bz/movie/1893","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fc6f3575c02c70e0b805b7a7eddad2f","sha1":"aefd6a1c694be2194b37492bfb9b9286f25a6d9a","sha256":"125db1d040cee524ccc45a2d2f95a13a0f2a30b7bfcf14f165a466bb79367db1","sha512":"446dceb5a5c828ef82b49cd3a0664b65b5c502bbd2bf2dc4606a2955c7619925da4871b99d845dbb18a8d0634bb41c08d31cc4b69ad645305caa7e47c8f9ed16","ssdeep":"","tlshash":"471100753a2a1534c5c5418b317ee7a83d3260217a02e084c36ccc395d18ec714efdbe","size":902,"data":"","first_seen":"2026-02-28T18:22:20.454643Z","last_seen":"2026-02-28T18:22:20.454643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:53.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:53 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 568b54639fc23821a7c0613e709325a1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-21T20:38:52.44076Z","times_seen":23248,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":117,"dns":57,"connect":19,"send":0,"wait":33,"receive":18,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cineby.bz/movie/1893","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-28T18:21:52.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cineby.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:59:40 GMT","end":"Fri, 24 Apr 2026 12:58:13 GMT"},"fingerprint":{"sha1":"34:CF:82:20:7B:C1:99:6D:70:23:66:61:2F:46:79:D8:56:92:C0:A6","sha256":"E0:8B:D2:30:BA:C1:AA:64:F5:4D:AC:2E:EF:DA:64:CE:56:56:3E:1A:6F:D5:86:F2:CA:F8:F3:CD:C9:8C:0E:76"}}},"request":{"raw":"GET /movie/1893 HTTP/1.1\r\nHost: cineby.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlink: \u003chttps://image.tmdb.org\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\ncache-control: public, max-age=300, stale-while-revalidate=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 28 Feb 2026 18:20:39 GMT\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-cache-age: 73\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvyYMAEgeEGcVlIM3hdRoacBksxHrmf0BSnzHZFRZALXsZuGd51sbsfMV%2Fg9VuPd6NerR1bU8oXwICRk0jG1FA%2FSoxO00iFxRw%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d51f1b31cdfc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39099,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10634)","md5":"e2bf19a8354780e3a46ec91714e9aa3e","sha1":"bc571afc20b8416c76ab690a5e700110f5fcd559","sha256":"a19017e7981492a866b054936e48670fc0192ce58a39aa2565937e8c821dc6a6","sha512":"7e6bcf61c92a55be38289f02f1246b327d4babc070d9acf61e6e1faca727d0baa0db8e871849549715db664986baae8da60b246e5cf105ba9fdd48ff8ec2497f","ssdeep":"768:ls7BL67ycOcaCDNPHqQR+kRK9Mfoag4P4R1EyfNGRtbx/C:867ydQRTRKooag4Q1zIx/C","tlshash":"3503d8b3a604153f6af341e6e239776d707b911dfa4b441095de8270a3c6fe6e83229c","first_seen":"2026-02-28T18:22:20.344532Z","last_seen":"2026-02-28T18:22:20.344532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":55,"dns":17,"connect":8,"send":0,"wait":31,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cineby.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"soycdn.lol/share1-1.js","fqdn":"soycdn.lol","domain":"soycdn.lol","tld":"lol"},"ip":{"addr":"104.21.41.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"soycdn.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 07:27:27 GMT","end":"Wed, 22 Apr 2026 08:26:09 GMT"},"fingerprint":{"sha1":"A7:BF:36:27:B2:A9:7C:F0:64:CE:1F:24:5E:18:8C:DC:37:B6:C6:3A","sha256":"BB:24:9C:00:14:2E:10:16:6C:2C:45:46:40:DE:8F:4B:30:2E:CE:7B:49:76:E7:F6:9A:FA:9E:F8:66:CA:25:9B"}}},"request":{"raw":"GET /share1-1.js HTTP/1.1\r\nHost: soycdn.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Feb 2026 22:01:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kj%2BvSYkB7M51no4J%2FDznHm0%2F9Sx8pf%2Bd1ulFqs23q%2BNWyfEQxndwn1EkQ1d36ElL%2BUZ74PRiMYe0PMpxowYml%2FAYzgnGI2TCxWY%3D\"}]}\r\netag: \r\nage: 1584\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d51f1b4ffbbe0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1009,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c11c3cd4396555681f16746409f88c34","sha1":"c8a40158b09ea100d74012c94ceeb524a71a8be3","sha256":"6e825f24aadbc90a0cb1b51d6928ec60cfca8983b6063e5ee7c8585ba77e8850","sha512":"365e87c239364d8281bca8fe67826cda37e497f24b152c9d69645de3f121a1cd517d67d3de3db3ccf8e18be60fc64a731abedc3d8465674f59fe2652e97e4c1b","ssdeep":"","tlshash":"8b110e289cd3207458292026003fe00971a55a473a1aee92300cf2c5ef00ff44daaafc","first_seen":"2026-02-10T04:51:57.204384Z","last_seen":"2026-02-28T18:22:20.347412Z","times_seen":6,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":34,"connect":8,"send":0,"wait":15,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"soycdn.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/iJQfixW818LUdSXlCDL3JZm0S0g.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/iJQfixW818LUdSXlCDL3JZm0S0g.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17524\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f1051b-4474\"\r\nlast-modified: Sat, 05 Apr 2025 10:25:31 GMT\r\ncdn-storageserver: NY-753\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 837\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 15:40:44\r\ncdn-edgestorageid: 1079\r\ncdn-requestid: 4713d6a0b5144f8f9af97acba5868595\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2400a32a8520b97b7901f2749a42e498","sha1":"82e47102700f3d3e92bf3a5f9ef8a65c1d8f65c1","sha256":"5f67fa7e6fa58702c3c310b2d6be490194db97b6c29f5a3124666631869f94e5","sha512":"7554c7fd26c6cabfd05f89d80a8cafd7d539bd12565f114fbbc3a60ff52dbf9643f40f2b78d3579d33f503bdcb758dc79c3236cf1e928ceeadbc1cf769a11670","ssdeep":"384:zSeAThpQcT4NOyPSbTKVKNV+wZzx1H+ItNssCbMlgv:zSLpQ4yoGVKNV+wJxZp6sCbMyv","tlshash":"8372d10668bd2fe04630961cee264613199e0c593e7720ff01bf994caf7e778aa0155e","first_seen":"2026-02-28T18:22:20.348539Z","last_seen":"2026-02-28T18:22:20.348539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cineby.bz/img/favicon.svg","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:53.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cineby.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:59:40 GMT","end":"Fri, 24 Apr 2026 12:58:13 GMT"},"fingerprint":{"sha1":"34:CF:82:20:7B:C1:99:6D:70:23:66:61:2F:46:79:D8:56:92:C0:A6","sha256":"E0:8B:D2:30:BA:C1:AA:64:F5:4D:AC:2E:EF:DA:64:CE:56:56:3E:1A:6F:D5:86:F2:CA:F8:F3:CD:C9:8C:0E:76"}}},"request":{"raw":"GET /img/favicon.svg HTTP/1.1\r\nHost: cineby.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/movie/1893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=sQzr1.I0UfHiQ6StoJ.fmwayxFvUndhzsl_46y7dnJg-1772302913-1.2.1.1-KuHuQBmD9erB3XusWZKk2UT0jqrAuclK7Ag30V6Vb_9spOGjcGlg2_Cmgu2SUmH7CBkXjmZn549RZxBOfsi4j6S1hVebF.ESsJodwxTL9t2Lr0VXlA6z628gSNSAisCYC6tM2bAWbBgQThqkTqiJ93BCQW0fT_xWd6fhwhrjD.QLhmVhb1TaXugkO8R4LG7YoWqQV_E6cmz8tm1JtkHEAvFia_r9P4nL5Z0t47EHXbo; dom3ic8zudi28v8lr6fgphwffqoz0j6c=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd%3A1%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 452\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Wed, 24 Feb 2027 16:26:32 GMT\r\nlast-modified: Thu, 29 Jan 2026 08:24:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 352521\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jutqzNZz8UIVAYKQoGdH0%2FDOC1GzP8NjZ5id1d4NJsYlM9dC0iu6imT4k2aQOFg9BBBZqmB95BBcZaVrS39HTMuPxnY76k1DxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d51f1ba9dda5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":915,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae8a6d72dd4fcc9d01be8c32a36dc943","sha1":"f37d7eb5f22163e9cbbcad411202211931485597","sha256":"bfb83ff0273213d8480bda3ad5d46f8fb09ba37a07725d32d7425dc4b348d336","sha512":"928428f26635ed221445d53feccdd0ac373ece2bb8edc6b28033e6fac911c41cf6296aa40d55c3028f7ffc693a4df429adf89d51d814360f479d4bad778f8435","ssdeep":"","tlshash":"8111dcd0774ee078869e4715c67199085b0eb5b322803609956d9efb2a335d8cff9988","first_seen":"2026-01-24T18:42:16.921143Z","last_seen":"2026-03-07T18:42:51.595017Z","times_seen":21,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cineby.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"motorstroke.com/sbar.json?key=f2d8f77afbc58792853a7736c0084b21\u0026uuid=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd%3A1%3A1","fqdn":"motorstroke.com","domain":"motorstroke.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"motorstroke.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 08:41:48 GMT","end":"Mon, 30 Mar 2026 08:41:47 GMT"},"fingerprint":{"sha1":"08:FD:5C:2E:9C:99:B1:BF:F6:E9:3F:BF:BD:6D:44:D1:62:B1:67:9B","sha256":"74:EC:89:E9:DC:4D:10:D0:16:47:8F:51:92:7C:72:2A:38:03:8D:9B:C1:1D:FE:28:4E:D1:55:13:EC:35:B6:03"}}},"request":{"raw":"GET /sbar.json?key=f2d8f77afbc58792853a7736c0084b21\u0026uuid=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd%3A1%3A1 HTTP/1.1\r\nHost: motorstroke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nOrigin: https://cineby.bz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:54 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3867\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://cineby.bz\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd:1:1; expires=Sat, 07 Mar 2026 18:21:54 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sun, 01 Mar 2026 18:21:54 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sun, 01 Mar 2026 18:21:54 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Sun, 01 Mar 2026 18:21:54 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Sun, 01 Mar 2026 18:21:54 GMT; path=/; secure; SameSite=None\nu_pl20166703=1; expires=Sun, 01 Mar 2026 18:21:54 GMT; path=/; secure; SameSite=None\nslecf2d8f77afbc58792853a7736c0084b21=[6399851]; expires=Sat, 28 Feb 2026 18:21:59 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 111\r\nHost: motorstroke.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: edead4a6e8b40fe72eb888930ce61cdb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4963,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"47bace04ad3d8429495a425d92084792","sha1":"fd9174fb5b51d6a67d736a36f5b818e6d625dbcc","sha256":"d357be102bb8069d1c7dedd11c9e6f45537454aced5769b3ac6e74b7a4d8b67c","sha512":"bfad2fd2074e1ad603bf60d8633047e0be9b8f0abaf103e20efbb42bba78315f34e57dfb525e27bcfbb6030525e6a98a529821ea58d9ae13d5c93a3c6161e960","ssdeep":"96:9zmlW+eqn9NjHBfn6oyfb4oF676AIog0n56q2udQGZpAKvD1H42tnr9JVLqZL:9zdQ6fc09AUeiudd+Kvyanr5qZL","tlshash":"dda15c7ec7643de85387cea211ca9abc0c0a9cd74cc049ad948b9aeda7135d1859c1eb","first_seen":"2026-02-28T18:22:20.353193Z","last_seen":"2026-02-28T18:22:20.353193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"motorstroke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=8fe5e554a2e8370f987ba11cc1255c6c\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 22:12:10 GMT","end":"Wed, 27 May 2026 22:12:09 GMT"},"fingerprint":{"sha1":"F8:CE:1C:DD:8F:86:0E:25:10:C6:86:56:A7:A3:47:DA:38:11:C7:3A","sha256":"19:3B:E0:74:B6:FC:9E:17:C4:75:30:39:E3:6A:CB:EF:32:91:9E:69:12:DF:51:AC:FA:76:15:EE:1B:D3:36:B8"}}},"request":{"raw":"GET /pxf.gif?uuid=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=8fe5e554a2e8370f987ba11cc1255c6c\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c183d4ce53a721d1379734f4f7118544\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":279,"dns":1,"connect":93,"send":0,"wait":94,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"motorstroke.com/ren.gif?sid=H4sIAAAAAAAC_1RSPYwbRRidvVxHgYCIDrRIFCBhe_9s7yZFpBM_DdwBCQoS1fzsOoPHO8vOru24uhBAQqI4OqBaP9_FTXSC7mgQ8iGak5CynYtckzIlUmpkn6UjnzTfj94U733v-25anpMGSrr8-CM9kUrRVrvp2G_dlqnQI2Pv3rJdp-lct2_LtBNct8erlA-vuX7QdN62P4h5X7c8x3Uc13Ht92UeJ3rcWqOQ2cPIbUZOM_CabjvAOH9-NqUFQy2I4Tl5GVLULz5JvoDkC6SDX9-NTb_Q2TvvDUpFC51jKOafpf1Uj1IMLtskt5Ck881vaFMT8tMWdDrfKIAeHq4UgMmabL36GCydb2iCDY8umDKFOAUTL2A0XCBWC0i6ANf3IcUjAnCB3T2kgwe7Oh_RuxcoXaE12X72L-SoJtuPryIdHO8oObZvalUWUqcG46SCHC8gewtk5SmKiQU5OgUvvoYU_5DWsw-RDg73jNKQYvmmcBMahh2vITqB3wgYjRsR6zoNHvFAuEyEHhPrFclkAWoslKsnLZSJhTKzMBBLO3DCgLvU7ySR4F0noEEgYuZEoec4NOJdlPwepDgAz_eR5fvoywOYOxWMsGAKgqGojoQynqkeCGVK5m6qt6l-NdNFb0qPdNGLUwKaHyAX1aHMvjL3wYsrs0lixEyvEmVFNaNMVDMpiq1pdk5eWu3N8k9a6MdLO_FEmHS7NGG8HXYjL2z7tNv1O9xxwoB5LoysIM3WWu1E1uSN758ik4_yv8HoKYw6BZcWaPka6KgCvVNhkj4sdK407zeVHMYQukJWbKO4a03VOXll9umtnT_X5tF5HzE_u_H7z6v4BTyvkOUVvpR_EfTUvd_2skIO5ISu3LxZ0CK-AiprYl37A1zW5OqT4_VhdX_4HDzbh8nObhyffPL029dPYDQByywoSaDiM7IJUFbB_G9ml_3UfINeboEpa8ZUbh0ylasfL2gaubTbHvM7YdiJk45IfOF7vojaThwFNOoEUdBGYWo583b-CwAA__8ZVOdZ1gMAAA==","fqdn":"motorstroke.com","domain":"motorstroke.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"motorstroke.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 08:41:48 GMT","end":"Mon, 30 Mar 2026 08:41:47 GMT"},"fingerprint":{"sha1":"08:FD:5C:2E:9C:99:B1:BF:F6:E9:3F:BF:BD:6D:44:D1:62:B1:67:9B","sha256":"74:EC:89:E9:DC:4D:10:D0:16:47:8F:51:92:7C:72:2A:38:03:8D:9B:C1:1D:FE:28:4E:D1:55:13:EC:35:B6:03"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSPYwbRRidvVxHgYCIDrRIFCBhe_9s7yZFpBM_DdwBCQoS1fzsOoPHO8vOru24uhBAQqI4OqBaP9_FTXSC7mgQ8iGak5CynYtckzIlUmpkn6UjnzTfj94U733v-25anpMGSrr8-CM9kUrRVrvp2G_dlqnQI2Pv3rJdp-lct2_LtBNct8erlA-vuX7QdN62P4h5X7c8x3Uc13Ht92UeJ3rcWqOQ2cPIbUZOM_CabjvAOH9-NqUFQy2I4Tl5GVLULz5JvoDkC6SDX9-NTb_Q2TvvDUpFC51jKOafpf1Uj1IMLtskt5Ck881vaFMT8tMWdDrfKIAeHq4UgMmabL36GCydb2iCDY8umDKFOAUTL2A0XCBWC0i6ANf3IcUjAnCB3T2kgwe7Oh_RuxcoXaE12X72L-SoJtuPryIdHO8oObZvalUWUqcG46SCHC8gewtk5SmKiQU5OgUvvoYU_5DWsw-RDg73jNKQYvmmcBMahh2vITqB3wgYjRsR6zoNHvFAuEyEHhPrFclkAWoslKsnLZSJhTKzMBBLO3DCgLvU7ySR4F0noEEgYuZEoec4NOJdlPwepDgAz_eR5fvoywOYOxWMsGAKgqGojoQynqkeCGVK5m6qt6l-NdNFb0qPdNGLUwKaHyAX1aHMvjL3wYsrs0lixEyvEmVFNaNMVDMpiq1pdk5eWu3N8k9a6MdLO_FEmHS7NGG8HXYjL2z7tNv1O9xxwoB5LoysIM3WWu1E1uSN758ik4_yv8HoKYw6BZcWaPka6KgCvVNhkj4sdK407zeVHMYQukJWbKO4a03VOXll9umtnT_X5tF5HzE_u_H7z6v4BTyvkOUVvpR_EfTUvd_2skIO5ISu3LxZ0CK-AiprYl37A1zW5OqT4_VhdX_4HDzbh8nObhyffPL029dPYDQByywoSaDiM7IJUFbB_G9ml_3UfINeboEpa8ZUbh0ylasfL2gaubTbHvM7YdiJk45IfOF7vojaThwFNOoEUdBGYWo583b-CwAA__8ZVOdZ1gMAAA== HTTP/1.1\r\nHost: motorstroke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl20166703=1; slecf2d8f77afbc58792853a7736c0084b21=[6399851]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: motorstroke.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3f4e3d3731375a932519fa811df3d344\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"motorstroke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/sRLev3wJioBgun3ZoeAUFpkLy0D.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/sRLev3wJioBgun3ZoeAUFpkLy0D.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4660\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 02:48:30 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-294\r\nx-downloadsize: 6090\r\nx-bo-origindownloadtime: 1852\r\nx-bo-compressionratio: 23.48%\r\nx-bo-processingtime: 2\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/02/2025 02:48:32\r\ncdn-edgestorageid: 1047\r\ncdn-requestid: b70728525e1005d176f44aa111f71fa2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4660,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"83b812e35ced4bb53270f9e8c5e92a4a","sha1":"1b89cccef252e3890bcf3eed938da80d693368db","sha256":"41344d907efe138fc558cee209689619049b10891f433591e4658145e121c4c8","sha512":"dad6882ed5188ae2387958d2753ff84647bcaf7ad708673c4f664b95bb4aa893ff35777835163b278ac8ca5b01f43015d88204cdb9db5244b182c2bac669d13f","ssdeep":"96:Rn0W3gDVCFPqi/dvNZwrGOk26hgM5qFVYs8nKIusZ/a6qkUa:Rn0W3yVqNZwrGDZggwKss2sokUa","tlshash":"d6a1707659288dd5cc203ba1ec8c70ab9d648bf9ff10f18343d946e5e4da9c17721750","first_seen":"2026-02-01T10:47:41.730773Z","last_seen":"2026-03-19T02:43:36.783914Z","times_seen":3,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":139,"dns":75,"connect":22,"send":0,"wait":124,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/q2UDxfwWnmXTB7khOUF3J9puBVP.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/q2UDxfwWnmXTB7khOUF3J9puBVP.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5286\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 03:03:40 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-293\r\nx-downloadsize: 8232\r\nx-bo-origindownloadtime: 19613\r\nx-bo-compressionratio: 35.79%\r\nx-bo-processingtime: 3\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/02/2025 03:04:00\r\ncdn-edgestorageid: 756\r\ncdn-requestid: bed36960ec018abf614dd2290a0285ec\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5286,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2443a6222bad316aefcdf213a86ec80f","sha1":"5b1bf6b7b425e36b82bc252b56977efedcc83d90","sha256":"ed9963c8aaf4c0e47f5178c1ea8d96ad9e575070351bca254e1c3e10dbcc5ee3","sha512":"52e14c7f37a1fabe4000112c49c6c0e4eea8515e8cb0e144b89f7cbb29613aa05abfb09218b23ef060076b1662e5b88d18c005e54387be47dfd1fb7cf851305d","ssdeep":"96:kGJjRh7YPpV+Y0Uy+Z7BF/CBeK/toiuEFD54No8iK9w3ppyhot:kGJzsyPmZnPK/KNo8iKSZpyc","tlshash":"34b19fe94fa834435a36f9941a00fc366cf94ad8474d2caf211379167cad827f4571ca","first_seen":"2026-02-28T18:22:20.35864Z","last_seen":"2026-03-26T17:06:02.787594Z","times_seen":2,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":131,"dns":74,"connect":24,"send":0,"wait":201,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/zICu2ItUmKh0dUcWtee49KpNDMq.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/zICu2ItUmKh0dUcWtee49KpNDMq.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7540\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67edfc4f-1d74\"\r\nlast-modified: Thu, 03 Apr 2025 03:11:11 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 914\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 14:33:00\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: 28960263a6899b1864cfc34f7abef2fd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bb02c9f2967b76c95554f507a1176401","sha1":"8c733a3c6d4a14fa41bd01c5c4c0b70c301bc8c7","sha256":"c5769697bb754be11b8e571450a113255b7067f76ffcd1b54c1e94aa6baf5869","sha512":"d063a93e32a76ef6b3f2e519f8aeba1f49da94ab5105f3b136bc0a84d0559b36d4948b6ab88d407077b5296ae30c57291ac0d004e89acf33316fadae0157c5b0","ssdeep":"192:RJ8d/nHrDWNYTeMMn6KKDNMBFcYU+hZ+27o:g9HPWNYTeMMn6HGzdhM","tlshash":"45f1bf51a517c3d4cc584e9fbb1f1093a0a1bdbbe84e6e902e53d62d434c791ca8343a","first_seen":"2026-02-28T18:22:20.360943Z","last_seen":"2026-03-26T17:06:02.89433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":139,"dns":72,"connect":24,"send":0,"wait":121,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/nNAeTmF4CtdSgMDplXTDPOpYzsX.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/nNAeTmF4CtdSgMDplXTDPOpYzsX.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11846\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67ed9c4a-2e46\"\r\nlast-modified: Wed, 02 Apr 2025 20:21:30 GMT\r\ncdn-storageserver: NY-346\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 838\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/27/2025 21:10:20\r\ncdn-edgestorageid: 1048\r\ncdn-requestid: 805667c9e765fd827e44125bea468f21\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11846,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d72b15bab788f1a4c5ace6e533b2f967","sha1":"2963bf4953fc3246ead39c4940fa0e11883343c0","sha256":"212a083c9bc61c6ae933f03c6514fb7c0b0b495e89409733d33e1015e306870f","sha512":"6b96563349a47e893b8b6a6fd5db6220f420e2ea9ae72a64a2d4c4d8f399fa1d09678d34677911b818d311035ae4106aa7c9084ded191a27723759134cb35c61","ssdeep":"192:21JPVi+z9ZP+ni8ThnB8XNKtmw9Y5FnC+sXfxoCUWsw1Exp/xnGjiK90u9:MJdD9V+ieIXIUyYDn9svxoEsx/xnwiKz","tlshash":"3432c0e682a9b1408ab9366cc6ec43ed434c7f215c5e8af5d3744b296b33d4d3ed0a94","first_seen":"2026-02-28T18:22:20.363018Z","last_seen":"2026-02-28T18:22:20.363018Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cineby.bz/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cineby.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:59:40 GMT","end":"Fri, 24 Apr 2026 12:58:13 GMT"},"fingerprint":{"sha1":"34:CF:82:20:7B:C1:99:6D:70:23:66:61:2F:46:79:D8:56:92:C0:A6","sha256":"E0:8B:D2:30:BA:C1:AA:64:F5:4D:AC:2E:EF:DA:64:CE:56:56:3E:1A:6F:D5:86:F2:CA:F8:F3:CD:C9:8C:0E:76"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: cineby.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d51f1b5cd985868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30224,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (30224), with no line terminators","md5":"f62853e371c3bb61b2046eeb33c00e15","sha1":"f5bb925e7213acc0788cfa62eb5c7445cb38ae7e","sha256":"31e06f87667785efb00d63cab5ca2bf7819ab931e39e05ab1158335da023926c","sha512":"03c35a4cb1c027b38dc8c21b5adcf479123b1ab1070c0ca1b2d4062054d469ed6fb26f9b641bb94a4ac75e51148d3bdde8f311e750bd1102c9cf69c49b70db39","ssdeep":"384:evSXVULcsBXAa2+Q3RD+BRQHduXixNrWmuWLWU7SLLiw3Sed58UgefnkiSe29hdx:IrlXAa2ewowlPReLLiGqebW","tlshash":"d3d291ceb4eeb5a9833e38b0c0a775c6e5aefd8c25554908e210d4f8f46c3789862d4c","first_seen":"2026-02-28T18:22:20.364936Z","last_seen":"2026-02-28T18:56:03.065798Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cineby.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cineby.bz/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.8543517371356499:1772301925:ctPBNlUXPiWD2Po3wkh80NuoN_1tIWoxkUsKxfy8xOo/9d51f1b31cdfc8c4","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:53.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cineby.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:59:40 GMT","end":"Fri, 24 Apr 2026 12:58:13 GMT"},"fingerprint":{"sha1":"34:CF:82:20:7B:C1:99:6D:70:23:66:61:2F:46:79:D8:56:92:C0:A6","sha256":"E0:8B:D2:30:BA:C1:AA:64:F5:4D:AC:2E:EF:DA:64:CE:56:56:3E:1A:6F:D5:86:F2:CA:F8:F3:CD:C9:8C:0E:76"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.8543517371356499:1772301925:ctPBNlUXPiWD2Po3wkh80NuoN_1tIWoxkUsKxfy8xOo/9d51f1b31cdfc8c4 HTTP/1.1\r\nHost: cineby.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12145\r\nOrigin: https://cineby.bz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cineby.bz/movie/1893\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12145,"data":"ir0vLKD7y2wzzy9w2JkDDIYyJP0J1JjvNUhvykJBv69y-9ojRCJgvi9KUoJIJXXJkCo5JCnyc-J29yA9GjM0D66jl0JlxxDBhJ1$XT2JUcJ07h6CzejNJ4SeOTlUsPhJFH+v90B7nKVFarRJJYa$0kHoNJ5$M59trv$$4DJufACITuPQkK59cKqvJsH$sUm$+2JyaVOxCUqKNqCmfa-Jy13JDRJu0Z3vwxl7ni0IGg$VhwBIVtyOrDRJysCJJRnr+MF5zMMJDPWFt3iD0NJJaVUcwy0Jy4-iJ40xfKJkr5Nf0+62-KRJDxCkJRjBlxHgz7RTA3JDB6yK3W42JJ93HMTKHxADFAysAJwoxvDbTkBJJKVuDI1uoVBJj3zOS5Fg0+P-AV-aN7mSK3PqHS1lKH9KxXwKlg7JvTfyJ003yfELHJ0ZahzuuLu-jDXuag0uSICW6CwiqJ-jOBpJTjBFJoDxgoxvvFKYlLhJZk10r+FsOr$HyEV7pefprVfcPGN4aozto7vDKohxDVKeXijt-0JJWwYnsMo$KSgkHVY79KHFf+YcJksC$TCPtoeInkP+OUVfjbC+cEkc$fs4cyfIesPJwSgohZ1HT4-wZWww0Sm$p$Lpof8X$hi-93yRjhVOjNU2eHmaJ7tPyPojPkawrrfsBIuR6fRvbG6h96rqS$PXC$Tw8-ramHuNAVPWbWq0whuZJjlHRrC4$1K8JYYnWr$xfFaovErOtDr44akDagJzus9tf0Nk+Pg40XPPCg0KLWwKq-nNkhByfJJ8zpHS0znNvPNhVM7hHuUHx4L4PkJ3A-DrOv+vvvU+WH9XZL9bvcxcI06D0sAKLV9w3x9EDVwp3sr0n$kciVqKcN03SpD03w26n6DNxPHlqxPOwpjnBJOxN3wykJysK20nSaT-oS7kJ$kKjyMn0zC0DlLyCDKwj7ZcIN9Dbw5HvF0yb+alosL-OhHKfTP9Dxkj0nJz7vZfwnCycIPz33Ne3ypmxvcrj2nv5DPHKtgeh3bY0+ZeT2vlSVoRywQ2PeSQvkONzVCJPTvFuV23rXXB3zulm2+VjI9hO89N+V+xj5Zbme3B7RufxcwhOyfJy+kQmzMyf6jScmFyiw-QVIFE2iTFVTthPJ0rPNj9DgxHzx0o0RJVkhNSzIjGNETwyi0sSYIcj2V2nUxMJ56zRO2ikBDo6yavFyn8prylC2JoyX6V8lhe7jhBDvjymN549jy49e+y4BhvivDVCIKkugiuVhP$n+L6vUwPrXN25hSs40MTfe9Ztrx9B6hnzQMqkJsOHsJCF$3PqMA6x6Dv6zihqkJBDTujVsf0KsKZ6aIlTjCfShWjfuTmUqAZJl7LtgjrgvuTbPpqf6wy609wTxXw1r6x3JDLWMyc2FW1cwKEPVx+0wXgUAKc2wDAhzzQzv6MEvoLvqtN2nhStrL-yFv9DAlJ9WGbUGQRkp6w7zIN2qr2wEDZ6H8nLMOyKHKz4EQW-4EV+x4qF+pKSsSh2l3qWv8TblOVviFjMOsmgEfpDiqxx9wqHcEMqcIWkT$M$XE2JJwm4rkS2HJNHwQ4cJvFH2JUC+FJ2EHE61iigsfkhO+wn4tNj9uJN8Jnny5jv00lvGI0JlSqkZTmYn-tZDLjQXXR0agL9JwVRyKj9f96HyAZSVyiWvIACDZw2i2jhMY47fWB+2N06fWi8xiGlA8ZAbyX4IkNwK2v4X7wapoYl7FYhKDKwvhy0p9AeYcyy$lO7SeLyqkrj3urgo+vTs4j98KcUBD-uDwXLpQKKW7PzDheREKUFD6zvKVnLvxvLJxyrj1RJ9BnKKQvku7lKlu1FmyyAgVkWWGFhV6H5AcwCiFFJhaRFsDX0HOPiACHqKzZgt+ZNIlrKj0fx0C99DS44pfmNL0RDSfFAH63xvvl9hVpM$N007FNXvyr2w0cEXHcp0x2FusI3guNJV6PPnjBfQ2kNJCCstgg9-3ny7xnWBP4bOz$j7fXVqvNTsN+CBfs2o5kRTztuYMHn5eYw5oJK01M0AHxKmH-eByEwZX3xaJDaVhyArfj6X2XYxWlsXDJ-z9C-OovaGILa7fnus6W$NKDh2hctf4ju7NYljjy4NVwiJVI4OFqYue22M7cQiaccNBw8DNwVBDGl02gFRgFkoUyD3P9o5HxVJyzt+XBUX3ZCBFWwyaka6NjQ9HO6iRhG0xhltxELKBgwchxwrY-9z7yeiirfVo0zpxXEL8cZeBTPZvBDGvrK5lnqaGLOH8lWv9JiwF6QcJ22+wU4MA3VyQvsq0oWvYUFDVWYj75lfwekVy6elpnPBIy3LhUpsWwB+DQXOXFY-3vJb-0z3f0X+hpZQv2PiiBwsjVkmItq37Jf-a-N7iCnLvpWiRz+09fBDJfCFssV3Q9HbJ2XsGi3DWJ5e9u2Ei33gOEiBDgFCro1jyDQly5k0Dmv3TgkJNhDsZJCpUzcqa28Bw2HxkncsOlJkxf1RkzPztrhfxDCRpN3sWD7VzjZ$ti7YwynBSzSsnuL+3Tx-6lXEQJ1oGuf0D93JaoetnL-qs9DHs41bf09bRDl1nt2i92vz3+cIx0i-EXTNnD+j4Al7i$wqNDyDO-oSf2ffFz4gPSSMz1CBfD3VvJKtwTC94hJsiALnfIvLVh8LEglRfy0vVwDRYHZjo5BPhf0TsSwCa5MjLnPglnm2y2SN4yDWxnV1QLVFwnwsQibXZM4DrO-vKY8e6M0j0vrBteJ$37FhsEes+t$Aj1SS33EPDN2vHUvrc-IrJBVKewo3Ay26L$BSnJ0D8JWQDg70C4fH-kVlMIqypC3gwILMZi32IG22KMKvvniADWZl92TA1MhWcCJN4fHWDyS$Is43DfOWRL$jH4qXXC5LrF$fBV9aLJb2U3rz8DhCnAoFJVDnv04OB-jLPUAXc1e54jp9yOV7MY9QAfZ203vR+LYJvo65hniZeX-wVjuAMpl5STjrYKjU$VV3WuEZcAMzWUF0Xrz0TctASyVRAHbA9fYnwJMVuNCvRJ8UOI7W7tcRZYJ6Iy4fEM7682aifmVGT1IUifwE$wVhsPeDw0wACE2NlI29zCENFSgAbtUCGVpOHRDKXwLW39jSATGWX2XmcRVzu6HsHgzuSQ8xvVSLkZs8augirPMR20hu63Vm2mblczCbfLcVuuhyAcHvzWVz3clxirKGuFIDoffwalP23LZCPbslDpuORE2pFQCcTI36PwhjbQ8B6og2yXUhb2xYCgUhLFR3lqck4D6i+eHvX7vDsnH3lrXZSM$R2j7B3kwwcTn3Vei62+AcmM4i8gK+X6-qBQO4nGXLY2jNJ6zUiineD-1+RHUaLq5hcN8DcUTLsXqP5bhCK4A7DItWXkpla6F3-r-A7uZ6$7Da8$ZSCTHAjI019jW9hni6fYz22QzJyJBlSzKjUqUs0vhZsGcRq2ZQF-5PKsqiR70F1Q47c3vg5TF92Px3JWNPRPzi4n-QFavWNW4WJMzefExQ9eZKc5q+k$x0RXFcrPcz1CJK25vjJN0NchVF4FkUZmheZu7LnQnIkRkjDUFSZO0NknDboH1$Z0Pjx3xzVNn0PU7OKOhkzaZo50kOh8nSqbVLPAKryVDhq70LvLJ+IrYYRQxf02f7fWyXJ4xrKL-MoQ-FnBJezoh$vN0oR62jR-fKxyvEJT2hV+Dr47cRkZDJA2zNDQRtD5DycsKH1oq-AWhksVn-VbZqA+PU4cRYZj2s0+RzKro2I7FvVXzPRq9jYGNCHPR20hsOJxVwceqe2tqZIr46Y-oaFyI7fT4pKQ2K0P-550R3FVql-+Aj19RsDhxjACDs5BJyA70KcAF79VByR9RtBT15pUfMN4he2OJDJ0pcsKBccAkQ9+AGATYmA0JQy2HFKPkofe03B0-eAGocrQngkzV6yGf8nf1rpm5I-lzLzGJWqORVY+qqs8xsPLKoxVnPqjczqaVV0MJzZe2ZZHR7F5Hbxipr4mhsvwI1D1ZgJ4ZTRLNx4w-fpWhAZNuZknYj7Ey3vwqZoy7f-nZV0bz01wcFnpv7FhxFDrqZVhRQums+yo0+Zwcz4DhyJ$p8qDvJu21bVCJ+AvVnV010RzqQ2unlJyvR2T10R-fONbVj2pp-fSsz0ppAFaRY5Jas1BFc5VvHD6NrD2z$I3Vva0aBJjJU58pEIV0pBNvoHhxTymZhvTyOyG2WZNawVqBYvJ0HzhZXcnH47OJlJ8nQFSyhxJfIr-oBDG9aYNcPkcqOJ1qLNH1ofouGu7FoHvhvDz0hR6y-rIVDJNIpvnPnvQyUnK1hCCJmBpR3J8cv0$7j2jRAFTyln3JRcLpHPMaXuP1NC9pJxfCyaPk6hOJgJRCe16xHAJak4e7akJ0VVA1Qnu1h0oRQ2n2JC9Jq7fvg5QC44wAos2qauroNUMoPRxfOJxRLxmh4yz041oCks2h3IbqVo+CKYxuyuDh+n-VVVbUVxEkIAYc5BZsbZqIORfC8RikhKLs6nH1Yx9vQCravjkDz00p9Dy08ZDvcuXyJ0DJGqzYjhsDbDqkJjYB1R0Dvje0QJkrWNMBJjSqMqejVV$BTzUsjC9IeCc5tCPIyUCHu2DvU4ofBPXvMNCH1c+yaAeB3zgPPPYUojtRPjIp-skcg5lfLIRpmh7XtJ$JAvDaYswu550INPl29u9A-zLPrq+VromBxX5ne7rAEVoADze7PUBx0JoHeJ$2WXhDIfLJMq7XhIUF2pgJ7UkuUFpqW-c2Psjqb7K5bXsDmBfCZK50k7hcppXZJP4CVsXDYsyCwc0kK0io6JSo1R3VKI6hlnsnav3RLcAxQflqJhPA6CzIToBXlPhx5Z+Y8IK534W3QceKGoEqmXDsqhgkRJ7Rzy4X70JqPuxKavDp6AV0j5-VzYjAZFwc$XkYtarYq9p0EvOJSkfvfD4Y2zH1veOYoHsn47-kzVvp7FDhXJfj0IKUnYqzrho5lfbz2C0-4Zvuu--J13aV14pub5$nDhPFsVDJ+BZYH1ZhghMJTjsVM3DxHVLZ5h6j9uWhiqYaV3YsPXFpJjAFQCnk43Tu$ji2fNohFubXe70qMzk3bi7BxPEZQikzqsaYaxmBsPvvEZn3QUueN0kz0pHrDqAv2iofon+c73-FlZ2a0VGBUF5Hphffljoy97UFpiHXMuGol3Akf2LsJ4HV9iJVIhGoNv5VM1WYM-BJuqc2OX+-feoBlt+AICqtjyEn9smR9UvaXee7ofIxkzQjpjofN3kpj-PRA1yvDvsUXihprqvDPctJ9von5nQeDh3NceGeCHucl4CHUu37o5AarjwcDh4BwjiBf2WJPpYspU-swcHn0k9kBJnAUCRq9C9p3vopl-lfM78nVe6ylN6zUUyejcMf-xlutDmBH1EFG7JZ-BDhkYnk34jAsi2-1ioa-u5j1ZlZoh23gJWkpn--oCPz-juaQ4NK05ruMtWt8nx39YO77fmqqv7fSt8Fa3MNB2hBjysPsajR3R45v-kCnR53ehlPk-Aoo1mt5h8H+H+u5u9xf05DiJVYt7WPDvg52BYcJqsBAAWavD62ptOnABQaXYsupjva8Z50laY1zYwbe-PclZbRDx-e9ChxtgY2Fn$7EeueiwGN5HygajPRoufv3yhVGXoHk7ZsEnRVw734$nysZVQqo5ap34bBQ76R6B1uj28tPAav1xoSAziJFAM3lZzUgJ2iJfaVhf1zfu1V5IJjYRPu0uo5OhOh$nsckzjRwgq21yV2YvJlK-g-vjV0juP0wc-fTeyvoxWPQFpp0kp0zFP9cSBb0J0glNORzSNv47Q2EstA5hunzkB1+ASSlnf0nfetnuOKo5QCQpEhhU9wIiktjyAFqgiiHCgiAiSiMissagBhAvpvKcjXOI9C0S7yeDU3HeO1Lq+YS4kRTYOYRCXCrIhXVI47N5H1KIsIpKCZ-fhiS4ppqCeUaV9MBvuvDXRaOIIVlJ7uwjAFe0qeJjUVx53JjPrn8Aobf2kzjAzyJxjARgzSACDhJcD-f4TC1BQ2jRTg34fA+NDAgvC7MCbDXJlDv01YDysvNzv5v3cVEcLSNC+aBg3c-r6NMMtcOvnIJjvAQ0CbJVGJBAJtJxMg7Fmqijpjy3tAc2vVsVVVfSvHKpHX0Z62kpfZqwVS3MfviMNM9UcinvNg3vmX7jTiAintfP4P7j8X34Og6gj2xLH1$BDxwjKIP9vLbZav5wjJsbK7Bagaaalje3+LggPk6LwjlfXwatEXf4s7P7Mlf4NKwR$VAvH1lfugtkHqZWUsIWHtpkfXXgJIbX3fOhH14f5sKsHv0Ms3MNkVx4tCgl1R62$ZufoDqaLiDRtDsPWn8nWD0Sjh$Nlac-pafg7FalWhn3X-QX$gNCaBBgPSUgWiaatUWhakaVfaGkM4LBnMLYsYZMvXoIgCe0y-AslCNCPXhwqigQGDwRtpLbURpZ95j2QbBfePHvuS3v+tKDCiHvrhZ-wcFaiJLRmXY-V08Y3I$VLJk-$NewONMn+3IkJ0utZbK04S-Q8nOs9gguuggLstUlLJMv6CiQwsvnohGoy0HiEYmvFt9QDxQAVllXbqqvtMZwIwTzRwg50c8xGZKCP-XvKn3vEejRQwDxRgSw-8BfElxc+iKQ4P9t7TCgX7HUltofntnvKC3I-ovxFYFKEo-p91EgJt6XgJLsaQFAoHy-EoIupfbs3bKWgMvjaC0AmXCqlYRQK8Kc8YUvjRYxBJNKW7ynBSEDSxaawaEppk8x0SksR+N7$UKCQ9-kThPZ3ay0pplLgSLyD8e81TZ5p3UFVMOpWzetOSllc3DXHfrfYlYSysCD2TaSjcKgtaPtIIZsKc$i5QlbXj813yh0Hqyv-bOl5hlxOfY2Ih3Ui1aVqXFcHL2M0e8Hcl3hXvLOiujy-alPAULqFj91HrmW7jAIpIHWIblTfj5aeU$x1e2s7sgY-Q0Me02Cxv-qa+93sVPRVMhxELCxPVIXzYu2pn62oLXj4g6nFFBgJgnfN3IcKXJjJ3F+vL$1h4EYqlfD$nD75hEsBoHXPSrXU4QCavEwezsIEocPCW0BIrg37fCDvLwjXtrhvSHV6Sac9vhRi8fQRBIht8gb5xMz-fmWh1lsxjUliAtGZKWnC8q6bF0CcAeFBg8cNvewYiPfXLZ0WT6TO7a6U+j6g80Lf0eW8nMytgYvHXK0locoo$XRZgNG5hbeYvqAOcTa0jeSRqHrugFGBIaUJZsxolDY1Az0KcARGNyk1PNWJHcPhFy0Jb5R8jQ9yJM+33RLCe4hH1mCzzFaKvfaQI5-g55HEvYvb2Eo-bMTpQc+G11+nV33KKD+BsI4W$3J+An46V5SKS-VsSh0B8K38n$ZhUj8hKk4XUMCWCf4MWjRQCqcaVzxCV8lVl14Nl0Q9sWlo5vsnsf4Zjn63ViDoamBpiTm$mb$0JYivnxWO+Tq6+GFUjr42OCA5H+AoErYmaYDspDh$FE6SLKb+ipifCJcK$Px7G3Ft+4MYvSBHAu37FKtToiDzarhxm6nAYjBDSvUX$Uy9pNDXBuX9TvCHpSKhh6HD$V08DhszXpJpDJOKv0y01DvTHNasbSr5Gk5ugP$yOapZuw9avJtcjK4UyuMJ3eQADwFKQAg9zGliC6hI0Wl02kXnCfcs1uh-efqVEN6LzjRJVJrF3VO9Jf+HM3uRrrqV8WzJsS45$HavO90lNOC2z-kSROJLzjkwEHnJ3pxnjV+oN8JpJ+PLZfSkvnxwWI22jfWNBVTpBaDIhNCLaDSxxJtsp16hY6kVBZJuN-oIsTvD0QKPeDInF1D7kAL0jl-H0wx6PcNygBxxDvFk-FwyjuH0Ayvx0CwBpDbD9AH$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-BaySs3JC9kMSokLw80PA2JxciwTly2pioOTwcxKCXy5p$2N-HZ2O4vA5V-rO4uIkrw3S9BVnDnZHh0JhA3JENxHRPLplZrSAGhbHFoiWUrDK-N9spAKswJCh0RRk29Fy24xtStP9H5njFK6LYeZBt9Wv6Zu+khvEB+YZ2apDQkQSunVnCfL-iQTovintA0C6eyxTqps5B9+9I+DmLnvpARM2u+vjMT-hI0thEgTUyvCjwK2SY2V7HyHyzJ+HzSBs64eDyJlvuOJFkWXORJquun47hlX208FnlmAYvuDok17DQKSpPslygOjDweB7fZ7l9asXlwJvOn9v6J6nj2JtKPRs+0sTuGykcJz54Zjku6DsFnCc0HhxnxSvypzllHs2jewaJGLyDqu-JOFJNwNovDwKI30pIVAoXYbRr+6VGSQykh0AZyClDK-s+3CozCB7vi+c8X2y$JmFRJ0EHRlavjbYvs8kzWzGKvzlC7n1NTc9wmMmD3J7fIcIQlpYqJw2BchkxU+zARK7y3JeJKyTnHV0Zu5uRnRXJuCyJxvtNPnJJyoqv80wvhryXrGHSVEJkPQZool1e9yyS2h6nAZrkV49bsh-60usJIuQNmvG7kl+5XT0bDisRNxvLPNpoG1yrpfQhFpY2jU7+yYnOzTG9iz5Z-n2HLVPDJsJbDcoLmyHwpuqwrh2EyeK9u1DCUZJEV-K3QV+JBFRp0naiLAswDOV0-mGLHghD60RS8xU0jcINwjjnvfrY9H2ke6m9JlMJfP5oxFSjNR9609HaryLOZATbshw2JvwMwjjeSuo8PE3yM19l$lWxwLLH9yTAwT3Ypy4LOfyT5K4SxaWPrSkx6DyhA1porBs29KhrQS9BlJms6PKuXjybpfvI7Ybx7SubxCU0NcVKTacaAHnkoYofgMcwDhzITv7njPjBsBrfBmvGJAhwQkngurH0mvktDNwxKvnHnBVC2TxJRK8JtlFPwhJRJ$DsorxQ47gTVyavcfHoYzgOTzA6JAa8hRNzQLKr5njxO1DKAQxkXZs7Ij2Fv6MuxSchuDfMOJ6Cj2Klp80Do0sk8iZSLJaa0lNJj8IOT-DcJz3i1mlNS+xXHULJDnhHk2wqJG1u+Rs27yMlBsSzezgIC52bcR00VGFwKgTIfDGpPUP2wIObcS++e5UfvBv2TuMcmBDPQztzYjDWkAscUQ7$cWO2TBuh+K67b06TDbcgswJR+h2AGLQj4BYU$NgLuOx7cBuG0-LV8aNSmMLsT0Jx6+c862DBM5UUvh1T9wgcl9jJeJ$s$Cy6+ra3DT7HqVbwgX4eQUuGVfu$6MX4eFHvkV2aQT$XfJpU5hRsIPkE0+sGCm5zhJKyi+2Jvj1VRSj3jEo45Spvy+OKWJ8+vxAU7y85Sm6MczhVxvZRs60ySA-MUJGU6DOT6McuML5T7WsJcctp-sAD75fD7nDLrEs4j02ZARzNcSUsZjc-iRZlM1n3B-9B1Dhx5wIMcs5qHvBDc8IJOrjVfT7sKQqS9OHoYj9Ks1NJVrZWU+99Kf+6ZLgXnMBJlPlhWh-JUVCrh5KbDZxSEuKx5DG5zplYLCAkxIU-o9RIRcnOfKi927pcTvf73ZJJjpybpC8jQKIxLvesRIkr$5VaskjG29u7vf5ODxhjn5zuYCS8cPLo4ysQpl9+lM6sE0FFruFoajQUMBvoz4V92DzOhxIvRF4ZCzI7JgnJU598Kk8KnZbnfXqviRFnD-sFCjyhKaaV-FIFZppUsQRbjJp7OEb5UeT0UjJnYZYxKfQ2l1xm0Psbxx9jKbDOvOCWeL1Ubo9ZmvhbliL80J0XUtDAZVLLeXTF-CBGiZOInAXUDjRZ$xzJ3L5UCJNHj9y5vqB5U37NUu1SWv2x+Xff7jTm6MovKyJAFH+T6yzQAJEXI3gZWhaDZABLXCZRsjhDKJ0sIUboIjgvtyvtSjqFxf49wuHjoLfvR+yrmCycyDrx9P-l+unz7cPLnVBx1Nk1iNJNWQC2u0+ygMgXSnNzKmRsuDc1K2W+qH7gITCj4yUBDCqPnswntqjrW8xhq34w9tDDAM+XTP5Fi5DrvOwu3$7ZU79+nrRB0B5fGrlpwrv0A6qY079YntRNIhaC4iy3lzjb+kWDvox5ZZYzS+Rx3aaf$pONHhCZWshk9raSe61scWkCwMJex40HjDAEJRk0juZI5O0bveInNaRSOw3ssaCyzEhIk$zKVJ6CAf81Y4$O+qMunKYcvNTIMXaWGXVnQRlO2iVpMNUYYot7fZlcPD6JCYWHzx-rKUW2ebY$sTZaUZsfO9FR2tYOLLV3MYeGY$37Q6WoiWw3W7bqzIzTFSLke044uZcaTOpxCev4yuZI$FyTLj3o5e-x-a+oVnT3XvBRCnXAT+Lq3KfPXNE2iZjWqea2uET0+G3zJoV+KneRm2HZiWWU44ce35ziV$MhrvGgbhEiVD$sleKf$ZK-atOvx8eKf5DgIzQOvxUeokcD9NavGmoNj9kqDVIxh1HxOexsMDZcanVxfQ3qyPe0YtLZifFjoKp3RhaTS7ikeeyGtCBWoQ+fRHzABtRnWlOzxueAfWAVeerOQoDjRU09lY$NZTfqiqhyBYIz3OFxgfSk-BgBW91xLx3MkXBRRW4sxi1UKfWBlHtTkxWbjzZQgRpJonoQDiiHHw9CszOasaixcAiDulWZpL+jiFWwgrtJ1rQ$jYyvSgrtv3NQ$jKkAMRNah1RQl2NkUM7N-v1kWNX3cfnjoaOTmWE00Z+eTs6ye0QKXjfzag-tsVuQsvLfptRPt+o1QPtFs4bBXHaAQxbaKf$LZMN2GlLAXZ4WL9YtIVSLXiif4WBlNc3aW4tuZWaRR-IO8LPzWkp3Re-x1QLZX69GCBhwZZbQIXMNiWOz-YG+xPeYZerYpFzymKb35vmKj2i$jLQg2O0EjJ0fapqCkJayPNu9k4h8QR70c+9D-yRwPSshQYonAJjlJ3JTvuF-iOUO$k89avZjO92bTrDTbQ11HEXFi0LSrN8-nh$hmCDGY$FVt5Y+8QyuSZDDTts01lhAL8Y5W13f9LnJzcNyhJJJbDSfxYZJxJyvT9DhJ4J6JWC88FPkFDmw00e01KDrjH+VKavXPUvmQJ5JCPkuD0f9YFtcHJJNsnh7IZTpy00Tv-n6sD0w+xZAh-LABfJpTkjWSohlnk0ZaNfo10bnV--zmLtnDavgvxJl+hJJHvvlrJJuFy8agOJiHce3ly1DcJkN0GhrLJyoHpg+hyOBSHeeY8tgj-4v70NUerAIgarlOhJkUIgj-pD68-ZDD8IgczkJNvkgyY8bg+IEbkSyHJ94NJxJV52+-l174CNVnJs2zJpGhD0bc-HGgqF0DwnHof9I6YnT0c4DGtEvhMwt3lw4JJJtiFjFjF4cJAvhjO-wWG2DkbmhQJuCDQPJWLHXHuiOhJ9yt81JVNhvaIJIo2ytD7HFPkKX$sR5MNVNIsIq0ySqaVnFHY26O$HA9h2UtBwZ0YLxklPrvjPsImIV5leB4rf9itBSf5ytJS9xq+MfKJvxZv7gW4mT9latDO3bvUvFPj7ymeJlINXHiJ0+zTyu4PJU9QG9INvJ0DHJoJi2iYyvK2M72bVBsjFilwvakgrPK53FxvAvolsB0zKlNkEGwhwJMJ3JpGtnwkFRJrqkPwh9bV3hKw-JkPD2L3V8hPC8Je2JJkuab1Dxykga6YPnVgqGgT3S$mer4ygThwT7eNrhU8Dn4JuJeADBAKJmNenJJL8fkvJJ"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:53 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: mu+4tSYdpnlQuULjg7xnNQ==$FhH5vVWUMieVnq7SmCvVeQ==\r\nset-cookie: cf_clearance=sQzr1.I0UfHiQ6StoJ.fmwayxFvUndhzsl_46y7dnJg-1772302913-1.2.1.1-KuHuQBmD9erB3XusWZKk2UT0jqrAuclK7Ag30V6Vb_9spOGjcGlg2_Cmgu2SUmH7CBkXjmZn549RZxBOfsi4j6S1hVebF.ESsJodwxTL9t2Lr0VXlA6z628gSNSAisCYC6tM2bAWbBgQThqkTqiJ93BCQW0fT_xWd6fhwhrjD.QLhmVhb1TaXugkO8R4LG7YoWqQV_E6cmz8tm1JtkHEAvFia_r9P4nL5Z0t47EHXbo; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=cineby.bz; Expires=Sun, 28 Feb 2027 18:21:53 GMT\r\ntiming-allow-origin: https://cineby.bz\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d51f1b86a2a5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cineby.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.44.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:53.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nOrigin: https://cineby.bz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd:1:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://cineby.bz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"00eb48f04dfef6436d243eecdadbcf88","sha1":"74a533cb9cde76464dd6f13dd0fd05b1a6edfa5b","sha256":"2bee51a55f67fcb981ba1fa4993ee7fe7814304f714b50420a6035a3b76e879d","sha512":"73d69f1f4037fc13a737969b469a1ff0dfc0cfee8cade9c29e934ea07b0db96e6ff6bde5541a32afb361389668898ab3081e951aeb9f1315ee1eafa7e8816a0e","ssdeep":"","tlshash":"af90040717f4cff403144001744d55c71c474d1d0403f41c400ccfd50c15315341305d","first_seen":"2026-02-28T18:22:20.366474Z","last_seen":"2026-02-28T18:22:20.366474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"protrafficinspector.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cineby.bz/img/apple-touch-icon.png","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:53.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cineby.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:59:40 GMT","end":"Fri, 24 Apr 2026 12:58:13 GMT"},"fingerprint":{"sha1":"34:CF:82:20:7B:C1:99:6D:70:23:66:61:2F:46:79:D8:56:92:C0:A6","sha256":"E0:8B:D2:30:BA:C1:AA:64:F5:4D:AC:2E:EF:DA:64:CE:56:56:3E:1A:6F:D5:86:F2:CA:F8:F3:CD:C9:8C:0E:76"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: cineby.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/movie/1893\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=sQzr1.I0UfHiQ6StoJ.fmwayxFvUndhzsl_46y7dnJg-1772302913-1.2.1.1-KuHuQBmD9erB3XusWZKk2UT0jqrAuclK7Ag30V6Vb_9spOGjcGlg2_Cmgu2SUmH7CBkXjmZn549RZxBOfsi4j6S1hVebF.ESsJodwxTL9t2Lr0VXlA6z628gSNSAisCYC6tM2bAWbBgQThqkTqiJ93BCQW0fT_xWd6fhwhrjD.QLhmVhb1TaXugkO8R4LG7YoWqQV_E6cmz8tm1JtkHEAvFia_r9P4nL5Z0t47EHXbo; dom3ic8zudi28v8lr6fgphwffqoz0j6c=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd%3A1%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 8932\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Wed, 24 Feb 2027 16:26:46 GMT\r\nlast-modified: Thu, 29 Jan 2026 08:24:27 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 352507\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTg8QatPS%2FHJKE%2BxSxVT2CfS3NVngctkPRMp10Pkfare2ceQs9G91VXGXSHQZ49r5HZMNoGq2fLJpD8uE5FSM1uPyUcLrycWEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d51f1ba9dd95868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"82c8fb8c20792edbc4e29375bccf5699","sha1":"67cd663b84c449d5e640ee1c20f4a73d731d4eb8","sha256":"4a41039c71db94c5e0f5282806fa0ca422713f59e6ed97c6f16a715121589546","sha512":"ddce2ebd43e17c2e51a44bc8bbef747ca10d2004411a86deb19c45a4f81f727ee3e342f38faf1857d603116ca766a0bebdea3b2e78836b5019b095e161efeef6","ssdeep":"96:SS+hZwbHqTh8pJDmFoMPV7aQpsFtme7tfRf2Sh47clC8LH67dB4doazloGI9npX7:S7PSH+SpJmVOMWBZXnCGzCn595XIOAc","tlshash":"dd02bf1fd36c02f3d5b8c921018392e8aedc7b58591625e38006acd9c957dae39debc7","first_seen":"2026-01-24T18:42:16.931999Z","last_seen":"2026-03-07T18:42:51.596356Z","times_seen":21,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cineby.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cineby.bz/css/style.a70b2904.css","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cineby.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:59:40 GMT","end":"Fri, 24 Apr 2026 12:58:13 GMT"},"fingerprint":{"sha1":"34:CF:82:20:7B:C1:99:6D:70:23:66:61:2F:46:79:D8:56:92:C0:A6","sha256":"E0:8B:D2:30:BA:C1:AA:64:F5:4D:AC:2E:EF:DA:64:CE:56:56:3E:1A:6F:D5:86:F2:CA:F8:F3:CD:C9:8C:0E:76"}}},"request":{"raw":"GET /css/style.a70b2904.css HTTP/1.1\r\nHost: cineby.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/movie/1893\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept-Encoding\r\nlink: \u003chttps://image.tmdb.org\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\ncache-control: public, max-age=14400, stale-while-revalidate=86400\r\nx-content-type-options: nosniff\r\netag: \"a70b2904\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4bXwQeBOaC%2F%2BgN8gUxatDGPaY0YN9q0cnh1f%2BsSdvR7%2FgUJlsMH8XUTq%2F%2FANDRpWQjYeBFHMneLYzH9rXmQbMgfkLcMJMxiX3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d51f1b47b955868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23846,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"assembler source, ASCII text, with very long lines (485)","md5":"a70b290448f066d6bfb09d7a01e5857b","sha1":"146d84bae8242b895ee92a224221f88e73e869b8","sha256":"e2575bd085f0ba947570d2b15b0c1e8633a8992c01dc966e4378f9765804076f","sha512":"b27eb13cf4943d3001704d1ce561eb301b78ebb6b768eed5fddaa6430c0027a552e9bb02ab84ed72786fc116e1303688cf87740ae860d1275bd9ec815563818f","ssdeep":"192:sy9lvaHyMPnDicKcGeJcm1dDcAzO2jC7pQI7O3WgpG4Bc2w7/Z03Z3qldHOLU9gq:sppecKcxp1aJp2oy38QmHnUYiS","tlshash":"cbb2b468a901302cb027d5d7b8d0a7dd7134e416ee170b9df69761a18ec73eb1a7278c","first_seen":"2026-02-22T18:25:47.182304Z","last_seen":"2026-04-17T21:53:26.505195Z","times_seen":60,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cineby.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/utility/default/robot/2/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:39:28 GMT","end":"Mon, 04 May 2026 23:38:03 GMT"},"fingerprint":{"sha1":"DE:44:B7:F9:65:9F:D2:6E:27:46:3E:12:7A:23:24:E9:D7:2B:16:7E","sha256":"E1:09:99:E2:19:59:48:E0:83:95:4C:4F:63:09:68:08:82:8E:16:17:8D:20:09:B6:93:1D:B5:84:B7:46:68:C1"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nOrigin: https://cineby.bz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:54 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GY6sxHwpfU5R%2FVsBzOPqnGNPapXKh7TJIzgw7sFPGWSgxWHkY%2B9mNwPHa67rjR8%2F5CU3VdOJhyrUh%2BltnmmEsugSeTUPHJv3L9SDGpuiVg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d51f1be9b4fa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1331,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"6d925fca1f3623368e2c47f8ac18ea89","sha1":"3dc674f220a7ad1fa502fdd4bf353f836ece2c75","sha256":"34c0988a0d6428e37eab062e19df5661d32e9f8d11704ba50f78cdc430299712","sha512":"380f03a62b612643a9e5c252357c2bba326dd657460a03a292ad1a01e888d9390a5fc107f3cde290e3a011a1608f2253e0496703b1d474e4bf098dfa94802aca","ssdeep":"","tlshash":"7f214b4e3dadd57215c391563b702f6aa88ad6cfd90b9440b3fc4d508bd6b81cd43207","first_seen":"2025-07-06T07:29:12.190766Z","last_seen":"2026-07-19T20:37:51.619048Z","times_seen":1174,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":52,"dns":20,"connect":8,"send":0,"wait":118,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/css/magic.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/css/magic.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nOrigin: https://cineby.bz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"67f54bc9-affe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 3038237\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8eSUFS97TPZhBGSsNOuNPoWxhrWRkBTRN2%2BnFYuBIgseA5VasZ9OZoa%2FmHdzC7bpo6otH76oYo9ZiXL7SyYgcgyfY3rg1UJH75ND8qGexg%3D\"}]}\r\ncf-ray: 9d51f1c018c64435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45054,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bcd1967f8c2604f55f57197de0ae895e","sha1":"c31a10c3ecde74b50450a0a1ad21aa474ff05e7d","sha256":"787eac5d9417257a04de7b18ef21f5ec887de3aee642ceba9a7d56a8209eea2a","sha512":"b37f1a61bbe740bc29308e664227701366ac978d4fbed081f13c47200edd74a792ab980559a236cff39ae27d3fda3ffffef3f1ac2dc420612b616496b44e9df8","ssdeep":"384:lQLl1pRp0itimTKDbObwHuHXFlF7FPFSWRyYyRZZZaZjZPfbfUO3OipypE:GpRp0itiFbObwHuHXFlF7FPFSWX","tlshash":"b913276b2dd2114086564365a3fe6b2c261c85c31c6becfab3a218ce8f1567c53db61f","first_seen":"2025-06-11T18:18:27.729381Z","last_seen":"2026-07-21T18:28:18.951181Z","times_seen":5752,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":49,"dns":20,"connect":8,"send":0,"wait":16,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 7005\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:11 GMT\r\npriority: u=4,i=?0\r\netag: \"67f54bcb-1b5d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 820951\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=djO1hdqfjAxsm7r69w0t81h6upmx2k9zLyKJptI8WgmFelSRADgJZBYZT2EnkFjLHwd13iEZgy5cQktidc%2F76Vkh61DSehPZfRR9RFl9xPs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d51f1c089c4370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"5127599f81c439cb0cf21166da26e991","sha1":"a750620e45c25855fb32ede5f1adb69ad28c1eeb","sha256":"9402058e0a31e79cd70001ebb397de51144d6e638a482f33bcee9a94dc20a6ff","sha512":"4e01869e43212009dc3811b4fc2303c39ab9aa123ce034ff4df220539a1e65784835b6cb0873cea4f6de027a7dcf1dd440ac0631e6b9c9db9085804473e3a0a8","ssdeep":"192:FkknNHG5WNN4kVyitdix/Inm2I6BRvBevoIPkucZ:9nNmoN4kVyiswm2I6BFBpuI","tlshash":"dee17d19dda17e1005d57f8a2fef815243638390c2856282dced8c5237e40f1ec6e4cb","first_seen":"2025-07-04T18:28:09.283921Z","last_seen":"2026-07-21T18:28:18.915666Z","times_seen":3255,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/img/banner.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/img/banner.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 29534\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:11 GMT\r\npriority: u=4,i=?0\r\netag: \"67f54bcb-735e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 3166970\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NyfquUi541snd7xY63BW%2FPh0Po2nBPMOVUzYHEMRCQvHRLFICciyLhbzQ6jQuBfiMoCKZyFBqP6EDQ%2Frs0nk0%2BSwLcJ6sOh2kBihnTtFkE4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d51f1c089ca370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 400, 8-bit colormap, non-interlaced","md5":"563e092f6677dac51659d62dccd159bf","sha1":"d04ac2cbce54e7c4849bbe28ecef94b464f3246e","sha256":"9d9611a42fcdbfd80c5d0774a743891691d0a09ce3c9830ceab54e920dbb64e1","sha512":"c2e1135a6b532df9332a2cc53477df0f3a2e69be2b45ab5ced0d764b977b6bc4b1362775957b96c5ae7862c73dbcbfb07f115074f3b554ea1ec8ff3afe2f1dc8","ssdeep":"768:ftP+gBsKWXjW1Mg3j/xQkRSP8d2iOF4aI:12gBsnXiH3tkUoo","tlshash":"a1d2e1512e22c71b09c92debbe15d8f6f8617da7f835692d201db2ac906639fc2501dc","first_seen":"2025-07-06T07:29:12.195371Z","last_seen":"2026-07-19T20:37:51.682Z","times_seen":1156,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fcss%2Fstyle.css\u0026l=5648\u0026fd=114","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fcss%2Fstyle.css\u0026l=5648\u0026fd=114 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:54 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":286,"dns":1,"connect":93,"send":0,"wait":96,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nOrigin: https://cineby.bz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 3038237\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O8TSjM51EkdLFw1DTw%2BOWcgp4pwTHtN54Wwk0FL4zmLpubTmazTOecHKMzlgRZy1H%2BQ39%2FwIEolNfHbBN0QFwmX2Q7LIweF%2Fn%2B2Eus3onh4%3D\"}]}\r\netag: W/\"67f54bce-20dc\"\r\ncontent-encoding: br\r\ncf-ray: 9d51f1c10af0370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8412,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"066cc70a926c6ed2bd892cb5b2ef2127","sha1":"6ba3eb39830a2ef9e522cf28d779d25359a12587","sha256":"3a81ae28e6ed4c4b72715adf753ffb80cea10bccdb8aa81053fbcfa7d935a560","sha512":"d63b0c210b2b76569b7b79df20c58b3571fff409090fe40b1e7ffeeb219fe3991cfc82bf0889c30a29b18dff878910d4c3480dad8a85fb9cb10180124309f5ba","ssdeep":"96:KyLqrYLHwX1O/D3cYmeDjlwjeqFczLCDsnvuRQs01GKyBspfkxzUXe2lJK9zbdro:dLF4crcYmeV+VHJmQxdCnV8oDeQToS","tlshash":"ee02310809fad521d01da13e203e3265f7244a53ac5abed8bb8451055fded6fb9b903f","first_seen":"2025-07-06T07:29:12.196612Z","last_seen":"2026-07-19T20:37:51.668782Z","times_seen":1402,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"motorstroke.com/impr.gif?sid=H4sIAAAAAAAC_1RSPYwbRRidvVxHgYCIDrRIFCBhe__sXSdFpBM_DdwBCQoS1fzsOoPHO8vOru24uhBAQqI4OqBaP9_FTXSC7mgQ8iGak5DizkWuSZkSKTVan6UjnzTfj94U773v-25anpMGSrr6-CM9kUrRVrvp2G_dlqnQI2Pv3rJdp-lct2_LtBNct8d1yofXXD9oOm_bH8S8r1ue4zqO67j2-zKPEz1urVHI7GHXbXadZuA13XaAcf78bEoLhloQw3PyMqRYvvgk-QKSL5AOfn03Nv1CZ--8NygVLXSOoZh_lvZTPUoxuGyT3EKSzje_oc2SkJ-2oNP5RgH08LBWACaXZOvVx2DpfEMTbHh0wZQpxCmYeAGj4QKxWkDSBbi-DykeEYAL7O4hHTzY1fmI3r1AaY0uyfazfyFHS7L9-CrSwfGOkmP7plZlIXVqME4qyPECsrdAVp6imFiQo1Pw4mtI8Q9pPfsQ6eBwzygNKVZvCjehUdTxGqIT-I2A0bjRZaHT4F0eCJeJyGNibZFMFqDGQlk_aaFMLJSZhYFY2YETBdylfifpCh46AQ0CETOnG3mOQ7s8RMnvQYoD8HwfWb6PvjyAuVPBCAumIBiK6kgo45nqgVCmZO6mepvqVzNd9Kb0SBe9OCWg-QFyUR3K7CtzH7y4MpskRsx0nSgrqhlloppJUWxNs3PyUu2b5Z-00I9XduKJKAlDmjDejsKuF7V9GoZ-hztOFDDPhZEVpNlaq53IJXnj-6fI5KP8bzB6CqNOwaUFWr4GOqpA71SYpA8LnSvN-00lhzGErpAV2yjuWlN1Tl6ZfXpr58_18ui8j5if3fj95zp-Ac8rZHmFL-VfBD1177e9rJADOaH1Nm8WtIivgMolsa79AS6X5OqT4_VhhT98Dp7tw2RnN45PPnn67esnMJqAZRaUJFDxGdkEKKtg_jezy35qvkEvt8CUNWMqtw6ZytWPFzSNXNmJH3u1L2HH9aMkdv1A8KQdBV3RoY7vxyjMUs68nf8CAAD__-U8d4fWAwAA","fqdn":"motorstroke.com","domain":"motorstroke.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:55.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"motorstroke.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 08:41:48 GMT","end":"Mon, 30 Mar 2026 08:41:47 GMT"},"fingerprint":{"sha1":"08:FD:5C:2E:9C:99:B1:BF:F6:E9:3F:BF:BD:6D:44:D1:62:B1:67:9B","sha256":"74:EC:89:E9:DC:4D:10:D0:16:47:8F:51:92:7C:72:2A:38:03:8D:9B:C1:1D:FE:28:4E:D1:55:13:EC:35:B6:03"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSPYwbRRidvVxHgYCIDrRIFCBhe__sXSdFpBM_DdwBCQoS1fzsOoPHO8vOru24uhBAQqI4OqBaP9_FTXSC7mgQ8iGak5DizkWuSZkSKTVan6UjnzTfj94U773v-25anpMGSrr6-CM9kUrRVrvp2G_dlqnQI2Pv3rJdp-lct2_LtBNct8d1yofXXD9oOm_bH8S8r1ue4zqO67j2-zKPEz1urVHI7GHXbXadZuA13XaAcf78bEoLhloQw3PyMqRYvvgk-QKSL5AOfn03Nv1CZ--8NygVLXSOoZh_lvZTPUoxuGyT3EKSzje_oc2SkJ-2oNP5RgH08LBWACaXZOvVx2DpfEMTbHh0wZQpxCmYeAGj4QKxWkDSBbi-DykeEYAL7O4hHTzY1fmI3r1AaY0uyfazfyFHS7L9-CrSwfGOkmP7plZlIXVqME4qyPECsrdAVp6imFiQo1Pw4mtI8Q9pPfsQ6eBwzygNKVZvCjehUdTxGqIT-I2A0bjRZaHT4F0eCJeJyGNibZFMFqDGQlk_aaFMLJSZhYFY2YETBdylfifpCh46AQ0CETOnG3mOQ7s8RMnvQYoD8HwfWb6PvjyAuVPBCAumIBiK6kgo45nqgVCmZO6mepvqVzNd9Kb0SBe9OCWg-QFyUR3K7CtzH7y4MpskRsx0nSgrqhlloppJUWxNs3PyUu2b5Z-00I9XduKJKAlDmjDejsKuF7V9GoZ-hztOFDDPhZEVpNlaq53IJXnj-6fI5KP8bzB6CqNOwaUFWr4GOqpA71SYpA8LnSvN-00lhzGErpAV2yjuWlN1Tl6ZfXpr58_18ui8j5if3fj95zp-Ac8rZHmFL-VfBD1177e9rJADOaH1Nm8WtIivgMolsa79AS6X5OqT4_VhhT98Dp7tw2RnN45PPnn67esnMJqAZRaUJFDxGdkEKKtg_jezy35qvkEvt8CUNWMqtw6ZytWPFzSNXNmJH3u1L2HH9aMkdv1A8KQdBV3RoY7vxyjMUs68nf8CAAD__-U8d4fWAwAA HTTP/1.1\r\nHost: motorstroke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl20166703=1; slecf2d8f77afbc58792853a7736c0084b21=[6399851]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+b3efca246092ff5c9f959dad9106ebb0=6399851; expires=Sun, 01 Mar 2026 18:21:55 GMT; path=/; secure; SameSite=None\niprc_l:6399851=1; expires=Sun, 01 Mar 2026 18:21:55 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 4\r\nHost: motorstroke.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e6e8cbcde331f98b77be291829daefa1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"motorstroke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/hDdpoEWtNd0c46PcuORomdEI5j0.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/hDdpoEWtNd0c46PcuORomdEI5j0.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4756\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67fddab4-1294\"\r\nlast-modified: Tue, 15 Apr 2025 04:04:04 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 910\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 14:31:41\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: 454def10c3bf648b3ad5281b771ede73\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4756,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c944a02484e505a292d428ed3eeafa96","sha1":"cd814ee01d950b96415f04a05eb69b36da6bdbe3","sha256":"f6348016bbf62ad46589aaa4db93d1652c028ffdb8624fc44a0d14e1937638f7","sha512":"43dca290a3ce2ddef2f9a91ab89aab9cb9a47d84f78cfeb612d62faf432ef3d2726a0cb74dd6db241baa1dd803d420900dc000647757d60ac2ffd68dcc434173","ssdeep":"96:kaXmYvPaWlXw3Sp++tIxYMAzWAwvJc0mUdc5l0KMk/cAPl:zlACp++tHDzWAwvaUdc5l0KmOl","tlshash":"83a18ed1e645fc676ed81c0bfb5c7fa9c611aa992b0d30102dcb14d71a31923c3d59e4","first_seen":"2026-02-28T18:22:20.375394Z","last_seen":"2026-03-26T17:06:02.807652Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/xfSAoBEm9MNBjmlNcDYLvLSMlnq.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/xfSAoBEm9MNBjmlNcDYLvLSMlnq.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10840\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67edc4ca-2a58\"\r\nlast-modified: Wed, 02 Apr 2025 23:14:18 GMT\r\ncdn-storageserver: NY-346\r\ncdn-requestpullcode: 200\r\ncdn-fileserver: 838\r\nperma-cache: HIT\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 722\r\ncdn-cachedat: 11/26/2025 08:32:30\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 5f0d65bbb83fe0664d7bc6fce53f3f7a\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10840,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6d8083572a33b331789fbb4819008f9a","sha1":"099323ef9edd8bccd0e2723e22ad43901c4dbbf4","sha256":"dcfee4fc5ef4543f320ad7c32f334dc0c6b8d7553319742547847f925321a3b6","sha512":"912b8783e99f8823cc85ae961408a5e60b385a20fea72a78a940860d97f63b1381eabc63bcce9f7a8a95f1f051118d53070f99331716af6d88dc42a278db1e12","ssdeep":"192:m+53sgCN2zEpH+1MMrCnE7m3CxK2qnzSKHFtckWRsVnVez6KGmEM:mS3sxA3ySxK2qn+K+sTq6Tmh","tlshash":"8922b0962cc59c7539c9d669f46c357d507b70dc32742a43d6cd9b107508b83824a7e3","first_seen":"2025-11-02T13:44:12.904938Z","last_seen":"2026-05-17T03:36:03.628654Z","times_seen":3,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"motorstroke.com/f2/d8/f7/f2d8f77afbc58792853a7736c0084b21.js?v=2025-12-31","fqdn":"motorstroke.com","domain":"motorstroke.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"motorstroke.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 08:41:48 GMT","end":"Mon, 30 Mar 2026 08:41:47 GMT"},"fingerprint":{"sha1":"08:FD:5C:2E:9C:99:B1:BF:F6:E9:3F:BF:BD:6D:44:D1:62:B1:67:9B","sha256":"74:EC:89:E9:DC:4D:10:D0:16:47:8F:51:92:7C:72:2A:38:03:8D:9B:C1:1D:FE:28:4E:D1:55:13:EC:35:B6:03"}}},"request":{"raw":"GET /f2/d8/f7/f2d8f77afbc58792853a7736c0084b21.js?v=2025-12-31 HTTP/1.1\r\nHost: motorstroke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34758\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: motorstroke.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7fa255c5ae7758086db35622afedd296\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92308,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"45e936af7d1d49e8dc5b566bce674b83","sha1":"0658ed634b8c69ea8264f0f0934e13e77f4cdd72","sha256":"66a9ef0a269009c6c8a29f45a8993dc573158291c12550ca36207c56730d3ae4","sha512":"379ba9aa0e31877d411cb5458b87d3900b60a974a94da5eb2461dea91a23670527e38f22c0aaee7c9ddd94e77563e19609550aa19157f485809f6cfb5d49af88","ssdeep":"1536:m5J9++sKqFGQDSAiLoHL0cTIgV2BOPsuUd7s/KER1Uwu1V4aYLuvGgIo5+phrtXj:mhsKOGQDSAiLoHQcTIgV2BGsuUd7s/KI","tlshash":"6693d84c3f82b0d41397707b762f902bf23b5c955868e88de243adac5da9719a337e05","first_seen":"2026-02-28T18:22:20.383857Z","last_seen":"2026-03-01T06:27:25.251148Z","times_seen":2,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":307,"dns":25,"connect":97,"send":0,"wait":105,"receive":94,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"motorstroke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=f2d8f77afbc58792853a7736c0084b21\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 22:12:10 GMT","end":"Wed, 27 May 2026 22:12:09 GMT"},"fingerprint":{"sha1":"F8:CE:1C:DD:8F:86:0E:25:10:C6:86:56:A7:A3:47:DA:38:11:C7:3A","sha256":"19:3B:E0:74:B6:FC:9E:17:C4:75:30:39:E3:6A:CB:EF:32:91:9E:69:12:DF:51:AC:FA:76:15:EE:1B:D3:36:B8"}}},"request":{"raw":"GET /pxf.gif?uuid=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=f2d8f77afbc58792853a7736c0084b21\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=18 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d6a1005aa787cba2dd755367c51895cb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":685,"timings":{"blocked":280,"dns":0,"connect":91,"send":0,"wait":123,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Feb 2026 18:21:54 GMT\r\ndate: Sat, 28 Feb 2026 18:21:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-07-21T19:44:04.147581Z","times_seen":9513,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":156,"dns":1,"connect":7,"send":0,"wait":18,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fjs%2Fscript.js\u0026l=6717\u0026fd=20","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fjs%2Fscript.js\u0026l=6717\u0026fd=20 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:55 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":285,"dns":1,"connect":91,"send":0,"wait":110,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w1280/3TeGmKJfkik1D1rIoqGb1aR4k9c.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w1280/3TeGmKJfkik1D1rIoqGb1aR4k9c.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 112824\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67ee336e-1b8b8\"\r\nlast-modified: Thu, 03 Apr 2025 07:06:22 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 673\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/02/2025 19:17:48\r\ncdn-edgestorageid: 1080\r\ncdn-requestid: 1da68e4dbf9410283aa9478f876321b9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":112824,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"195bdf2618dbe210ac33c59457e105f3","sha1":"6edb7bba0974d090db75f433c9414252497ab6a2","sha256":"aa7d05b93685be24dd82a6fd83ff356cd3bfc97d2f22a4b566436fd8cd7acf22","sha512":"a37c3c7b7ce9856880b533d620cbe9ff531f905031389eae927f36a629a4334cfb238d581b25f0bf91fcca4aac0fd52070a54e5fc38ac7ba9fbd34b989077419","ssdeep":"3072:rNg8ckQ2J2ZD1EkcvSBdM5JlDuucGfHiDT3x:rNixV1KvSB2blDuiIt","tlshash":"31b31207f5ee1bbea569d5b322e0aec50f6a1dd01cd6b7904d40f306acbdb118a5d908","first_seen":"2026-02-28T18:22:20.398335Z","last_seen":"2026-02-28T18:22:20.398335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":142,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/edPU5HxncLWa1YkgRPNkSd68ONG.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/edPU5HxncLWa1YkgRPNkSd68ONG.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6814\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f27126-1a9e\"\r\nlast-modified: Sun, 06 Apr 2025 12:18:46 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 910\r\nperma-cache: HIT\r\ncdn-proxyver: 1.27\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/16/2025 11:33:57\r\ncdn-edgestorageid: 756\r\ncdn-requestid: 853a4866bb7a7f84f5697884955d68c4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6c8ff433b26874c407d9201e2a151efc","sha1":"cb39205bba619ec47dda9f4321201eec1317290f","sha256":"e1082eaac1911d19e450131de62e8717aaf83331d26d19340757f758ccac36fe","sha512":"75fa987bf1ef5a8759df95fb23d459b358875266140e2ad9206b62a47ee13dca141c4fa407bec13d6c9bed18319b9314bf82308a3217f6b1d17404d254ab5d5a","ssdeep":"192:UKYiwSGPL9Yp4WZ0DHHhk4tAzzsR20WA47iocT60InD:LY9P5Am7B+nsD4OocGvD","tlshash":"16e18e11bb118299ecafb54e7f8a2c5519393e2851b6cf5f013e083b45aac949be5330","first_seen":"2026-02-28T18:22:20.401009Z","last_seen":"2026-03-26T17:06:02.88705Z","times_seen":2,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":135,"dns":74,"connect":24,"send":0,"wait":115,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/oZNPzxqM2s5DyVWab09NTQScDQt.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/oZNPzxqM2s5DyVWab09NTQScDQt.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12036\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67ef6f56-2f04\"\r\nlast-modified: Fri, 04 Apr 2025 05:34:14 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 910\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 14:05:29\r\ncdn-edgestorageid: 1334\r\ncdn-requestid: ae8562ef86c4c721acfa057941d199fb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12036,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"50b741ca94f1a8b6691881324e3b6d8b","sha1":"4a1b75da7095396bbea0927c56f43253b7e3a7ab","sha256":"c68d7986e56143c14829ed15ddcd1d71f1bd429bba7a28fe00367993a285a767","sha512":"865500ae3fb133bfecb0401953006734191cb7b409cf71dee193de22394f1511343dc03faf012214aef40ac92c74eda88c0c5e9b47cde86f14131f61d885f8ab","ssdeep":"192:MaLDULzyiqfS3mzEBEene/JK3dRckquN5H5lr3BE/GPdBA0CiBNuz86qyx3r:fDP6WwEaeuqs5mePdBAjMgqyx7","tlshash":"2e42c019e1a73a14478ba1ee0cefd7c97b5c540dbcf502f11744e14ca76a4c8b41ad1a","first_seen":"2026-02-28T18:22:20.40311Z","last_seen":"2026-02-28T18:22:20.40311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/6FfCtAuVAW8XJjZ7eWeLibRLWTw.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/6FfCtAuVAW8XJjZ7eWeLibRLWTw.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9874\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f0e1c8-2692\"\r\nlast-modified: Sat, 05 Apr 2025 07:54:48 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 833\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 21:34:00\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: 423e89ae2ba00e1cd236ffbc0e070737\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"23a14c18c80e117808248a3b54001365","sha1":"819e607320ee11fff771ef96b1ab3adfe10aadf4","sha256":"83284397ce69704485a83359d52767102dea162c4bb9f7fcc4212fbb02f46a59","sha512":"9b85fc55291ffb1c0ae46f3e922f110fd1c08c53d40dc512aac2ca40de1b169a050a7db08d655ff593932e640295652c3d55eed87adb5e649f6bb5f5b0d064b9","ssdeep":"192:2NJjNpW/7uGuycKBcM4carnRPzj6dFv3p7kqTASQ9pnY8GP:2DwWKuJPzGdFv9/yGP","tlshash":"4612bfdbc4c4cdeecd36f29049f14ec865ed5c4dba714a4ac428691331a693d04bb2b5","first_seen":"2026-02-28T18:22:20.405102Z","last_seen":"2026-02-28T18:22:20.405102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/cqEAblt0KJRIGyMXhj5OM5WJ9SN.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/cqEAblt0KJRIGyMXhj5OM5WJ9SN.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7342\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 03:33:12 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-296\r\nx-downloadsize: 11318\r\nx-bo-origindownloadtime: 12902\r\nx-bo-compressionratio: 35.13%\r\nx-bo-processingtime: 3\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/02/2025 03:33:25\r\ncdn-edgestorageid: 1048\r\ncdn-requestid: da5931468c53ae41b5ade1c34497fa11\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fe4fdb77e631074493ce781e909d8b87","sha1":"76c044444b5c726901e41224c990c8695238d580","sha256":"0e8ed8d6b18239adfcde9c1d2fadad8d361f653fc322218e0eb84db3308c6df6","sha512":"208228fa216ca115fc5ecb5112b262985f57bdf183368733889c5562feca8e26dd8679ca8f409127b816698f25f7e3f1bbb3b3d57e8f47aed67180026f54c9df","ssdeep":"192:kzqHGmzLhfpPZLOMelT5Wy+aiAAbi7X/wYGtC0tZA:kzqzZJIMeTWLFAAmr/wVUF","tlshash":"2be1aff39169c6367015d46fa9ef896732e0808c7e55862d4bc3589e880ecb1ebf748d","first_seen":"2026-02-28T18:22:20.407128Z","last_seen":"2026-03-26T17:06:02.893091Z","times_seen":2,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":141,"dns":72,"connect":24,"send":0,"wait":186,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/buBmcE8F8BpbL7M8yyxST2exMRP.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/buBmcE8F8BpbL7M8yyxST2exMRP.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7664\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67ee0a26-1df0\"\r\nlast-modified: Thu, 03 Apr 2025 04:10:14 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 426\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 15:50:38\r\ncdn-edgestorageid: 1078\r\ncdn-requestid: 57c04c177acbe88adc246fa506f32c2d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eed3a08bfebcc32b9222c5a5ecdf86d0","sha1":"97ccf5fd142440f46a0407d62104aa90adf37b22","sha256":"a909cc4c434c8133a9f883a53d4b453ee37af546fb97d8d8254849b1ad0dc128","sha512":"211962a4c6e92c53a1062b783f37a4891b6f455d68302091b34948627767e8ae73167eb78dd3da0441f6760766be480b32a689a5533f4d37581ff26ad9b99285","ssdeep":"192:FnO5UhOGkSiLK7Fqa0rbXRNsD5OP9nrfH2IUVmaii:VOJGdiln5q1cr0VJ","tlshash":"45f1b0188ad40ebb620daaf8e73ead1c42b1bdad790cd89e04788f1d341753bd1ed552","first_seen":"2026-02-28T18:22:20.415579Z","last_seen":"2026-03-26T17:06:02.823223Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cineby.bz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"cineby.bz","domain":"cineby.bz","tld":"bz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cineby.bz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:59:40 GMT","end":"Fri, 24 Apr 2026 12:58:13 GMT"},"fingerprint":{"sha1":"34:CF:82:20:7B:C1:99:6D:70:23:66:61:2F:46:79:D8:56:92:C0:A6","sha256":"E0:8B:D2:30:BA:C1:AA:64:F5:4D:AC:2E:EF:DA:64:CE:56:56:3E:1A:6F:D5:86:F2:CA:F8:F3:CD:C9:8C:0E:76"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: cineby.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d51f1b5ad6c5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30224,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"cineby.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:53.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:36:35 GMT","end":"Thu, 28 May 2026 00:36:34 GMT"},"fingerprint":{"sha1":"3B:4C:F2:03:6C:C6:DA:E6:E5:93:49:86:A6:67:E2:2E:41:01:7E:73","sha256":"93:F0:FD:1B:36:7E:76:5F:50:F1:AB:BE:4B:3B:DD:2E:E3:64:D8:D6:B5:3C:24:9F:1B:A4:5D:ED:C6:D7:D5:E2"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a242ab7138273c265045a01cb80532da\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":70,"dns":1,"connect":27,"send":0,"wait":17,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:53.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:53 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: be182794790fa2a282cb2699bd9767da\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-21T20:38:52.44076Z","times_seen":23248,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":72,"dns":1,"connect":26,"send":0,"wait":28,"receive":20,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Findex.html\u0026l=1331\u0026fd=184","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Findex.html\u0026l=1331\u0026fd=184 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:54 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":299,"dns":14,"connect":94,"send":0,"wait":125,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 747943\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0QAaTuT2lwXF%2F1I7YdpIjDKgpIteFB5tRRjOmI%2FVBMbQVC0w9DWTMDX%2BfEznq%2FQmivdbTReXRFgdeEa8sk5J%2B9g6A2CdMnxZeGbbPRCITGg%3D\"}]}\r\netag: W/\"67f54bce-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 9d51f1c089cd370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-07-21T19:12:07.414917Z","times_seen":12874,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"motorstroke.com/huq/xRIi6nAUrwy6ab/_7YCYsE5DqdS/YzDI18t9/U5r/i2LiHZ/-3l6Vtf4/ni5kUisrWQ8lcfUJW/bBqonNRzVyIQus66DDJ/oiwpbKCpR1idNVL8M17/yzINsObcrHSYV/hL8?v=2025-12-31","fqdn":"motorstroke.com","domain":"motorstroke.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"motorstroke.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 08:41:48 GMT","end":"Mon, 30 Mar 2026 08:41:47 GMT"},"fingerprint":{"sha1":"08:FD:5C:2E:9C:99:B1:BF:F6:E9:3F:BF:BD:6D:44:D1:62:B1:67:9B","sha256":"74:EC:89:E9:DC:4D:10:D0:16:47:8F:51:92:7C:72:2A:38:03:8D:9B:C1:1D:FE:28:4E:D1:55:13:EC:35:B6:03"}}},"request":{"raw":"GET /huq/xRIi6nAUrwy6ab/_7YCYsE5DqdS/YzDI18t9/U5r/i2LiHZ/-3l6Vtf4/ni5kUisrWQ8lcfUJW/bBqonNRzVyIQus66DDJ/oiwpbKCpR1idNVL8M17/yzINsObcrHSYV/hL8?v=2025-12-31 HTTP/1.1\r\nHost: motorstroke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 44638\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: motorstroke.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fd6f4350eedce8fd33e293959688beaa\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ce103f7733e97aa7000d3f45a5a2ffac","sha1":"f43032795b5768f6fb32df37e6744b5ca245bf45","sha256":"c3c4feba15b2e599bb52bbb603e95241ebd0c5f9feb47dc3cbaeea1eeb275c45","sha512":"e007dc157b46aeee905cba5279131eda0f3c9decf472972582a0f7aa3d927c6721d346fe24b7ed9edbb874b4a341043fa718ca241dfc1923fac69f4049adb0a0","ssdeep":"1536:hkhtkzFYyzgCdBs5fH1e5pfc6UEiVARrSli0oQnBXAO43ldcX9QK8XTW:FzgCdRfcciVyrSlHrBXAO4VuQK8i","tlshash":"afc3d84c7fc1f2ad528a20b2222f504ef4590d59908ce198eb47f47d2fbc72ab979b51","first_seen":"2026-02-28T18:22:20.42104Z","last_seen":"2026-02-28T18:22:20.42104Z","times_seen":1,"resource_available":true,"data":null}},"time_used":908,"timings":{"blocked":303,"dns":27,"connect":93,"send":0,"wait":101,"receive":186,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"motorstroke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fcss%2Fmagic.css\u0026l=45054\u0026fd=103","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:01:03 GMT","end":"Thu, 28 May 2026 00:01:02 GMT"},"fingerprint":{"sha1":"F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E","sha256":"D3:58:1D:7D:AD:70:61:0C:FF:96:A1:79:6D:1D:A0:CF:58:59:D3:71:56:63:92:64:9D:FF:B5:46:E7:65:17:11"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fcss%2Fmagic.css\u0026l=45054\u0026fd=103 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:54 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":289,"dns":1,"connect":93,"send":0,"wait":100,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"motorstroke.com/pixel/sbs?c=1","fqdn":"motorstroke.com","domain":"motorstroke.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:55.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"motorstroke.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 08:41:48 GMT","end":"Mon, 30 Mar 2026 08:41:47 GMT"},"fingerprint":{"sha1":"08:FD:5C:2E:9C:99:B1:BF:F6:E9:3F:BF:BD:6D:44:D1:62:B1:67:9B","sha256":"74:EC:89:E9:DC:4D:10:D0:16:47:8F:51:92:7C:72:2A:38:03:8D:9B:C1:1D:FE:28:4E:D1:55:13:EC:35:B6:03"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: motorstroke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl20166703=1; slecf2d8f77afbc58792853a7736c0084b21=[6399851]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 28 Feb 2026 18:21:55 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: motorstroke.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"motorstroke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:55.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cineby.bz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 13:47:54 GMT\r\nexpires: Thu, 25 Feb 2027 13:47:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 275641\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-21T20:25:37.120795Z","times_seen":238011,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":70,"dns":2,"connect":8,"send":0,"wait":9,"receive":11,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:55.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cineby.bz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 13:47:54 GMT\r\nexpires: Thu, 25 Feb 2027 13:47:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 275641\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-21T20:25:37.120795Z","times_seen":238011,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/tp5PRiy8Ip8Vs70pUY1jeHbk2wH.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/tp5PRiy8Ip8Vs70pUY1jeHbk2wH.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7384\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 03:37:49 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-292\r\nx-downloadsize: 11481\r\nx-bo-origindownloadtime: 10845\r\nx-bo-compressionratio: 35.69%\r\nx-bo-processingtime: 3\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/02/2025 03:38:00\r\ncdn-edgestorageid: 863\r\ncdn-requestid: 09a91e5418ab06230c14aeccb0470ea2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x277, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"44711f223a6fabec20c2c33299a26d7a","sha1":"473aa449c4e68f24e084eae695e423a68e804e30","sha256":"b74b21a38c73f350270b6b0450a05978819a40bd0298d75c246d1e69d6de8f95","sha512":"036cb05c5f7a3d90973c621545a283b94672a3086dc45f9d63af06075173cd201f4a9fbc2f321ec714b9be38da2b76f5a9c3c0d3fa6e427bc2e013b7f48874f3","ssdeep":"192:ZHqao00csaCoVdWAag4rbp35B0pLVbrA0II38V:sao0aFD3g4d07bp38V","tlshash":"3fe19ea6722a93c130da671fbd48797e5aa3dc90b732c4044b41353813aee823177c96","first_seen":"2026-02-28T18:22:20.42812Z","last_seen":"2026-03-26T17:06:02.876824Z","times_seen":2,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":141,"dns":73,"connect":24,"send":0,"wait":167,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w185/jQYlydvHm3kUix1f8prMucrplhm.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:52.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:02:26 GMT","end":"Tue, 26 May 2026 00:02:25 GMT"},"fingerprint":{"sha1":"73:35:93:FA:16:E7:7D:C7:AA:B8:9B:D2:95:9B:48:46:8E:2F:FA:52","sha256":"2E:66:16:5B:6B:E1:99:4E:5E:4D:D4:8A:1E:89:35:B3:97:96:54:B4:F8:B8:A0:77:0D:06:7E:B8:45:A9:EA:5B"}}},"request":{"raw":"GET /t/p/w185/jQYlydvHm3kUix1f8prMucrplhm.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10976\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67efa43d-2ae0\"\r\nlast-modified: Fri, 04 Apr 2025 09:19:57 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 795\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 15:53:38\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: 3e1bf92fed0b07fb8e93f1952739bc21\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10976,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b8c1875d4a7d2b9dfb0e96e88b1529fc","sha1":"ef25ec7c1626a2e2e65bc8d60d11b4b0d17c5060","sha256":"3ed06ab41bc9d2b45745bf1380b765c5a897c5bbac68c31bcde786f87da8e7f5","sha512":"cf6f6558f01bb9afec30ba15a9a4944ab96879fe48eb4bc5e12f4ff8ebed63c85943b430acbe561aee662aa83eaad8d76dd5393e63540f1daf4f3deaf22dad7c","ssdeep":"192:SEiG+A/1RiuUifVc/Tl+u4B/2dNmdQPXZo/0MeCyNWul7ScMNG5+:P0iO4B+dNmdQPZ+0XCzO+ciGA","tlshash":"a932c06331ace7a174105bf371219634bbbd9ca781c9e54d284f5136001e4be1a3bc3b","first_seen":"2026-02-28T18:22:20.432259Z","last_seen":"2026-02-28T18:22:20.432259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.44.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:53.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nOrigin: https://cineby.bz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://cineby.bz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=d1fa8862-d643-4bae-9b70-c9c4d1bd82bd:1:1; expires=Tue, 26 Feb 2036 18:21:53 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"00eb48f04dfef6436d243eecdadbcf88","sha1":"74a533cb9cde76464dd6f13dd0fd05b1a6edfa5b","sha256":"2bee51a55f67fcb981ba1fa4993ee7fe7814304f714b50420a6035a3b76e879d","sha512":"73d69f1f4037fc13a737969b469a1ff0dfc0cfee8cade9c29e934ea07b0db96e6ff6bde5541a32afb361389668898ab3081e951aeb9f1315ee1eafa7e8816a0e","ssdeep":"","tlshash":"af90040717f4cff403144001744d55c71c474d1d0403f41c400ccfd50c15315341305d","first_seen":"2026-02-28T18:22:20.366474Z","last_seen":"2026-02-28T18:22:20.366474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":70,"dns":0,"connect":20,"send":0,"wait":21,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"protrafficinspector.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cineby.bz/movie/1893","date":"2026-02-28T18:21:54.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cineby.bz/\r\nOrigin: https://cineby.bz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 18:21:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"67f54bc9-1610\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 1291028\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2BlibeQwFOO982FPk4TMnND0UoL5NwmlDtc52zDNDTK7lsqtyuK1cHEB83K75TY8El0NoRKY%2Ft28ajMcSeDH%2Feo70dAPnTYF1WGK9jv%2FHT4%3D\"}]}\r\ncf-ray: 9d51f1c029084435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5648,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1622d5dbd3ee323f1f251cb3de7b1f03","sha1":"bf821b06f4b67fc40dbd4398e00be1e12b566d41","sha256":"58789b7eb6e198a1a16151797ce4b1218e36c8708a9cd8a1808cdc40b21b1bb8","sha512":"4e0dfd40e4363c28d49965b28566cb98bd98b3de021cc4ebd60f15f7ff4bb2238d8534f3c98d162a5c2c54c24e15a3fd3db60e04ddef648d8a0752f3d69ca2d3","ssdeep":"96:5zlzMUmZ1CfICcfXgCfViOtAYiY5mnM0pfionq4OHBCHLmOCp0PkuCo1CCJ0xFCL:fMFInadiOyXnM0M0srv4Dv","tlshash":"e0c12fa617650204750bd8563e126f17a7688043ef0fd9b86ed2240c8fca6ce96e378f","first_seen":"2025-07-06T07:29:12.192872Z","last_seen":"2026-07-19T20:37:51.647681Z","times_seen":1130,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":60,"dns":20,"connect":8,"send":0,"wait":15,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}