r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7019
Expires: Thu, 01 Dec 2022 21:40:38 GMT
Date: Thu, 01 Dec 2022 19:43:39 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4836
Expires: Thu, 01 Dec 2022 21:04:15 GMT
Date: Thu, 01 Dec 2022 19:43:39 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: k8/lQLyho0fGrRFXXm/2dZFgyOjUtlWeNYf2QjN8J3TjByO5kfzI2BlJHfdG++jF7Jetn9UcOtg=
x-amz-request-id: T281502XSSNXNK5Y
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 18:45:46 GMT
age: 3473
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2b0d826d8f7c987b72f8ede318bb71f5
21dd77cf975d65b9a145ebe6427fb4ecb81bbf04
6fe868b4f9dfb6560614339d635518b1985a4a6745897084ab20fc40ec5b85f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6FE868B4F9DFB6560614339D635518B1985A4A6745897084AB20FC40EC5B85F3"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1928
Expires: Thu, 01 Dec 2022 20:15:47 GMT
Date: Thu, 01 Dec 2022 19:43:39 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:39 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
34.120.5.221200 OK 48 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP 34.120.5.221:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 0c431ade7474ec0d4c3f91efaae1c3ce
ca1e1cc44495279b487a663eafef0e26c3dcd04f
3baca6c8f8766ab3b85df58d825319b30d8f504edcb52af5db51cefa7969011f
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Miss from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: S7CyLBjaS5BnRLtak7ZEPbxN-X1J48u8Eos7epMRk2jhILEXIkhRzw==
content-encoding: gzip
via: 1.1 45d6a557ecb29942f314e3dd736d817a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 19:35:35 GMT
content-type: application/json
content-length: 48364
age: 484
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3102
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:39 GMT
Last-Modified: Thu, 01 Dec 2022 18:51:57 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 19:18:09 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1530
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 19:11:15 GMT
cache-control: public,max-age=3600
age: 1944
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
cinecalidad.fit/ver-pelicula/black-adam-online-gratis-en-cinecalidad/
188.114.96.1200 OK 14 kB URL HTTP/1.1 cinecalidad.fit/ver-pelicula/black-adam-online-gratis-en-cinecalidad/
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9381), with CRLF, LF line terminators
Hash 699819089b0e9dc6ace776a5ef0f5fbb
670dbe5b8ca74fce0100f92c8c9f9dba39126281
b04b930c8d4b7b3e2fb2ddd457b0570f40ab679e837ed4d16869c4c704db1396
GET /ver-pelicula/black-adam-online-gratis-en-cinecalidad/ HTTP/1.1
Host: cinecalidad.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 19:43:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
x-dns-prefetch-control: on
x-pingback: https://cinecalidad.fit/xmlrpc.php
link: <https://cinecalidad.fit/wp-json/>; rel="https://api.w.org/", <https://cinecalidad.fit/?p=74051>; rel=shortlink
x-litespeed-cache: hit
vary: Accept-Encoding
alt-svc: h2=":443"; ma=60
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1Kw2mOjbyWaS7Py%2FbSDPloLkpDahc2gvJj5IRUghsFP5gAwR%2ByNOaciNQLVUP8HTkaW%2BbIlJqRYbQaWD%2FZFUnUQFwlcexHXeDrq40lVwnwPKN0flFMlyc0%2FeOdS%2BbmnYbds%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 772e501d5d34b50c-OSL
Content-Encoding: gzip
e1.o.lencr.org/
95.101.11.115200 OK 346 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1f26981bd497158d466fc29acb5bb7e3
185c94fe01e9b296ec3bba3aeae5bbd94d8b6960
2763da50b722b44e0c702edbfcea6e28045778dcaab728022f4f191df4c6807d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2763DA50B722B44E0C702EDBFCEA6E28045778DCAAB728022F4F191DF4C6807D"
Last-Modified: Thu, 01 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 02 Dec 2022 01:43:40 GMT
Date: Thu, 01 Dec 2022 19:43:40 GMT
Connection: keep-alive
e1.o.lencr.org/
95.101.11.115200 OK 346 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1f26981bd497158d466fc29acb5bb7e3
185c94fe01e9b296ec3bba3aeae5bbd94d8b6960
2763da50b722b44e0c702edbfcea6e28045778dcaab728022f4f191df4c6807d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2763DA50B722B44E0C702EDBFCEA6E28045778DCAAB728022F4F191DF4C6807D"
Last-Modified: Thu, 01 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 02 Dec 2022 01:43:40 GMT
Date: Thu, 01 Dec 2022 19:43:40 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3096
Cache-Control: max-age=137685
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:40 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:58:25 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
e1.o.lencr.org/
95.101.11.115200 OK 346 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1f26981bd497158d466fc29acb5bb7e3
185c94fe01e9b296ec3bba3aeae5bbd94d8b6960
2763da50b722b44e0c702edbfcea6e28045778dcaab728022f4f191df4c6807d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2763DA50B722B44E0C702EDBFCEA6E28045778DCAAB728022F4F191DF4C6807D"
Last-Modified: Thu, 01 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 02 Dec 2022 01:43:40 GMT
Date: Thu, 01 Dec 2022 19:43:40 GMT
Connection: keep-alive
e1.o.lencr.org/
95.101.11.115200 OK 346 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1f26981bd497158d466fc29acb5bb7e3
185c94fe01e9b296ec3bba3aeae5bbd94d8b6960
2763da50b722b44e0c702edbfcea6e28045778dcaab728022f4f191df4c6807d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2763DA50B722B44E0C702EDBFCEA6E28045778DCAAB728022F4F191DF4C6807D"
Last-Modified: Thu, 01 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 02 Dec 2022 01:43:40 GMT
Date: Thu, 01 Dec 2022 19:43:40 GMT
Connection: keep-alive
betzapdoson.com/5/4941995
139.45.197.236200 OK 24 kB URL HTTP/1.1 betzapdoson.com/5/4941995
IP 139.45.197.236:0
File type ASCII text, with very long lines (63890), with no line terminators
Hash 24ae2d23b120bdb01fa334274bef2d04
d7080cbaab4b58e3a1874607c2f1d15a9339db60
b2fefed72e2bf69c38d1bb850da80c22dc3b221f08cefce5888266d4518e7075
Analyzer Verdict Alert quad9 Sinkholed
GET /5/4941995 HTTP/1.1
Host: betzapdoson.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cinecalidad.fit/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 19:43:40 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 15ad7b94fee3bb4d59a199ae0c1fc649
Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=c8ff2098e7b94f56b2327fdcadd98472; expires=Fri, 01 Dec 2023 19:43:40 GMT; path=/
oaidts=1669923820; expires=Fri, 01 Dec 2023 19:43:40 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip
iifvcfwiqi.com/lv/esnk/1951163/code.js
62.122.171.6200 OK 44 kB URL HTTP/1.1 iifvcfwiqi.com/lv/esnk/1951163/code.js
IP 62.122.171.6:0
File type ASCII text, with very long lines (65530)
Hash 3060730156c182920875e330f250ba28
17c8a4674a654673e75ff0ed167989324f41be69
ec984ffb8f6e02951a6b825dd84cd16da9a0455762e367ede9b24265f6fba829
Analyzer Verdict Alert quad9 Sinkholed
GET /lv/esnk/1951163/code.js HTTP/1.1
Host: iifvcfwiqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cinecalidad.fit/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 19:43:40 GMT
Content-Type: application/javascript
Last-Modified: Tue, 15 Nov 2022 12:20:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63738419-1aaa0"
Timing-Allow-Origin: *
Accept-CH: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
Content-Encoding: gzip
iifvcfwiqi.com/lv/esnk/1951164/code.js
62.122.171.6200 OK 44 kB URL HTTP/1.1 iifvcfwiqi.com/lv/esnk/1951164/code.js
IP 62.122.171.6:0
File type ASCII text, with very long lines (65530)
Hash 1d5dd09114255cd250865ba086e5af2f
baafcc0537b4df2749f6ee5bc436dc7d0c177011
a4985ac5db0f7c3e7f06d5910ff0a1e92b29b97f3450e931e935a626b043bd97
Analyzer Verdict Alert quad9 Sinkholed
GET /lv/esnk/1951164/code.js HTTP/1.1
Host: iifvcfwiqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cinecalidad.fit/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 19:43:40 GMT
Content-Type: application/javascript
Last-Modified: Tue, 15 Nov 2022 12:20:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63738419-1aaa0"
Timing-Allow-Origin: *
Accept-CH: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
Content-Encoding: gzip
cinecalidad.fit/wp-content/themes/Cinecalidad/assets/js/void.js?ver=6.1.1
188.114.96.1200 OK 27 B URL HTTP/2 cinecalidad.fit/wp-content/themes/Cinecalidad/assets/js/void.js?ver=6.1.1
IP 188.114.96.1:0
File type ASCII text, with no line terminators
Hash f3ebcb298d58a3d31dfea5093da6b712
f2bb999ff286d16c0b23e7895ab97f62c714c84e
d54a1c380dbdcb1c26382d82fce05127ca8bf00d3e15ee7a81fb8977f3d140b5
GET /wp-content/themes/Cinecalidad/assets/js/void.js?ver=6.1.1 HTTP/1.1
Host: cinecalidad.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:43:40 GMT
content-type: application/javascript
content-length: 27
cache-control: public, max-age=604800
expires: Sun, 04 Dec 2022 14:33:25 GMT
last-modified: Sat, 12 Nov 2022 05:30:15 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 364216
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yDqNq5epC3RUHokVX4cVXc7X5opcaaNhaAsndCK9quW0pQa1vz8las3nbV7JWMzt%2FSSgHIGgT8WNGoGVki4EWHIE03RkMztyqFuXJ2Bod39fnN%2Fig1gr1YS%2FTWIIZwT8hJA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772e50246f91b4e8-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
95.101.11.115200 OK 346 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1f26981bd497158d466fc29acb5bb7e3
185c94fe01e9b296ec3bba3aeae5bbd94d8b6960
2763da50b722b44e0c702edbfcea6e28045778dcaab728022f4f191df4c6807d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2763DA50B722B44E0C702EDBFCEA6E28045778DCAAB728022F4F191DF4C6807D"
Last-Modified: Thu, 01 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 02 Dec 2022 01:43:40 GMT
Date: Thu, 01 Dec 2022 19:43:40 GMT
Connection: keep-alive
cdn.jsdelivr.net/npm/vanilla-lazyload@17.5.0/dist/lazyload.min.js
151.101.65.229200 OK 2.9 kB URL HTTP/2 cdn.jsdelivr.net/npm/vanilla-lazyload@17.5.0/dist/lazyload.min.js
IP 151.101.65.229:0
File type ASCII text, with very long lines (8290), with CRLF line terminators
Hash 21e6b1d00b39205feb029d3b1852f478
e9005944f88ba93960003c060ca1c0bd3d547a57
07aca96bfc6f0d6a18b8f444d50548f4552bff077286caba7baa70ed98ab0570
GET /npm/vanilla-lazyload@17.5.0/dist/lazyload.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 17.5.0
x-jsd-version-type: version
etag: W/"2064-oi+c7JJTK/ZiiPmw9llPJzhqJ/I"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 01 Dec 2022 19:43:40 GMT
age: 16570585
x-served-by: cache-fra19158-FRA, cache-bma1676-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2891
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash a40e191e2c32caa23c7ec1abea39e991
b03456fefb0156a48fae623cdc3c444c44d2481e
23abf43db4e7fafcd42f2114b823179fa4119c04f317cd0ee8c395e0688778cd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1693
Cache-Control: max-age=133411
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:40 GMT
Etag: "63886372-117"
Expires: Sat, 03 Dec 2022 08:47:11 GMT
Last-Modified: Thu, 01 Dec 2022 08:18:58 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.20.226:0
Hash a440fb0b088dd27bd4dd55ae723deb6b
35ca4a2d6e3ac80f80ea3caf958e9690c2b3c6c9
febf14faa961ccf2e63bf472eb5f10908ea22232adb62b0385aa9bafe93ff948
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 19:43:40 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "326EF7579FCA280A35F4C9DE7B9EF48C44826C07"
Expires: Fri, 02 Dec 2022 07:00:00 GMT
Last-Modified: Thu, 01 Dec 2022 19:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1820
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772e50250d420b45-OSL
www.googletagmanager.com/gtag/js?id=UA-216507175-1
172.217.21.168200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-216507175-1
IP 172.217.21.168:0
File type ASCII text, with very long lines (1921)
Hash cd53334fd849e651608bccba771eb7cc
3edab9a5e1b08054958860bc5c22a2049c5823c8
3f37187a0eb769c9e56f44849e1c8484263535eb5638df1a8b6c5f700f9d6c31
GET /gtag/js?id=UA-216507175-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 01 Dec 2022 19:43:40 GMT
expires: Thu, 01 Dec 2022 19:43:40 GMT
cache-control: private, max-age=900
last-modified: Thu, 01 Dec 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43636
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash a40e191e2c32caa23c7ec1abea39e991
b03456fefb0156a48fae623cdc3c444c44d2481e
23abf43db4e7fafcd42f2114b823179fa4119c04f317cd0ee8c395e0688778cd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1693
Cache-Control: max-age=133411
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:40 GMT
Etag: "63886372-117"
Expires: Sat, 03 Dec 2022 08:47:11 GMT
Last-Modified: Thu, 01 Dec 2022 08:18:58 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 9caeefc49be26de4b50c14df1aace81f
ef836496e49f843f0e4c2dc991c314aad13f0f2e
83203278dadec9319a72ccb142c413696d8bd09a25f1b6c8d1edef20405e90f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "83203278DADEC9319A72CCB142C413696D8BD09A25F1B6C8D1EDEF20405E90F0"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4403
Expires: Thu, 01 Dec 2022 20:57:03 GMT
Date: Thu, 01 Dec 2022 19:43:40 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
34.218.164.174101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.218.164.174:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AlAfUD9nYwQLfeVYFjDi/g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tHoTTbLk2vmg4rhE6NCtqEPRw1s=
my.rtmark.net/gid.js?userId=c8ff2098e7b94f56b2327fdcadd98472
139.45.195.8200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=c8ff2098e7b94f56b2327fdcadd98472
IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash 1fb9da72643852372f12af2bb1548a11
d66433179a950b28476fb10da28ec5193f6ed9da
2834aab49db4a0b3b82d403cabf1a77a56250b8c29bd2e0f27d650bc2a5b35a0
GET /gid.js?userId=c8ff2098e7b94f56b2327fdcadd98472 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://cinecalidad.fit
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:40 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://cinecalidad.fit
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=c8ff2098e7b94f56b2327fdcadd98472; expires=Fri, 01 Dec 2023 19:43:40 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
betzapdoson.com/?rb=VmQ98ELj5ZmWEBA5H74qzAF5qqDyqv9vzs4jUUQE66bfFwPMhmR5SCFCGG2g0Rf-S1var6Gi9xB_xvP3bwk1joJ5c_huMPsQet6NKIvY0PxUhzofbPcDurfgMmAAFLIwGTXuPOSgKvgmlkSJ8iGomYQAeWLc-mA2wqhIoApcJ3H_nf1N6k1xBvYiX2Dm8Iz8xanQDeU8mXg_dhKJCIC1rRQYwoc8lQ6GKrxfSZTooUn0xNZ-&request_ab2=96001&zoneid=4941995&js_build=iclick-v1.457.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=0&pl=http%3A%2F%2Fcinecalidad.fit%2Fver-pelicula%2Fblack-adam-online-gratis-en-cinecalidad%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.457.0&bs=a35df0c3-1429-48cb-8f67-dd00fec1617c&userId=c8ff2098e7b94f56b2327fdcadd98472&m=link
139.45.197.236200 OK 1.9 kB URL HTTP/1.1 betzapdoson.com/?rb=VmQ98ELj5ZmWEBA5H74qzAF5qqDyqv9vzs4jUUQE66bfFwPMhmR5SCFCGG2g0Rf-S1var6Gi9xB_xvP3bwk1joJ5c_huMPsQet6NKIvY0PxUhzofbPcDurfgMmAAFLIwGTXuPOSgKvgmlkSJ8iGomYQAeWLc-mA2wqhIoApcJ3H_nf1N6k1xBvYiX2Dm8Iz8xanQDeU8mXg_dhKJCIC1rRQYwoc8lQ6GKrxfSZTooUn0xNZ-&request_ab2=96001&zoneid=4941995&js_build=iclick-v1.457.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=0&pl=http%3A%2F%2Fcinecalidad.fit%2Fver-pelicula%2Fblack-adam-online-gratis-en-cinecalidad%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.457.0&bs=a35df0c3-1429-48cb-8f67-dd00fec1617c&userId=c8ff2098e7b94f56b2327fdcadd98472&m=link
IP 139.45.197.236:0
File type JSON data\012- , ASCII text, with very long lines (2451), with no line terminators
Hash 2c70c8613ef44e821470a4ec82b07d3e
bdf0a018ca48fa84a1e343832d630605720e39aa
8d86effcdac37024eb07b6a060d1247c3663f819627c7ebd385e88eae7b56911
Analyzer Verdict Alert quad9 Sinkholed
GET /?rb=VmQ98ELj5ZmWEBA5H74qzAF5qqDyqv9vzs4jUUQE66bfFwPMhmR5SCFCGG2g0Rf-S1var6Gi9xB_xvP3bwk1joJ5c_huMPsQet6NKIvY0PxUhzofbPcDurfgMmAAFLIwGTXuPOSgKvgmlkSJ8iGomYQAeWLc-mA2wqhIoApcJ3H_nf1N6k1xBvYiX2Dm8Iz8xanQDeU8mXg_dhKJCIC1rRQYwoc8lQ6GKrxfSZTooUn0xNZ-&request_ab2=96001&zoneid=4941995&js_build=iclick-v1.457.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=0&pl=http%3A%2F%2Fcinecalidad.fit%2Fver-pelicula%2Fblack-adam-online-gratis-en-cinecalidad%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.457.0&bs=a35df0c3-1429-48cb-8f67-dd00fec1617c&userId=c8ff2098e7b94f56b2327fdcadd98472&m=link HTTP/1.1
Host: betzapdoson.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://cinecalidad.fit/
Origin: http://cinecalidad.fit
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 19:43:40 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: ccd499544dd7039c927044a41fcf1966
Access-Control-Allow-Origin: http://cinecalidad.fit
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=c8ff2098e7b94f56b2327fdcadd98472; expires=Fri, 01 Dec 2023 19:43:40 GMT; path=/
oaidts=1669923820; expires=Fri, 01 Dec 2023 19:43:40 GMT; path=/
syncedCookie=true; expires=Thu, 08 Dec 2022 19:43:40 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 081f27e87b02fb79b3453a116e731959
03e52819d86a0fa523e77ed24126e76e5369bd21
10283df9fce094267720532246e9d80b3c2061425f657497652e71de4c95de06
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 19:43:40 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 01:33:19 GMT
Expires: Tue, 06 Dec 2022 01:33:18 GMT
Etag: "03e52819d86a0fa523e77ed24126e76e5369bd21"
Cache-Control: max-age=365977,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 772e50260cb6b50f-OSL
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
37.48.68.71200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP 37.48.68.71:0
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 939
Origin: http://cinecalidad.fit
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 01 Dec 2022 19:43:40 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: http://cinecalidad.fit
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6899
Expires: Thu, 01 Dec 2022 21:38:39 GMT
Date: Thu, 01 Dec 2022 19:43:40 GMT
Connection: keep-alive
cinecalidad.fit/wp-content/litespeed/css/726077d9b32abc8a8efbc2275c000c54.css?ver=29b2b
188.114.96.1200 OK 1.3 kB URL HTTP/2 cinecalidad.fit/wp-content/litespeed/css/726077d9b32abc8a8efbc2275c000c54.css?ver=29b2b
IP 188.114.96.1:0
File type ASCII text, with very long lines (4310), with no line terminators
Hash 24b687271047a720d78c53be19f24ab9
a3f1960ec844e578addc1ba125060af0507bc69f
c8e5c41c414782b838029c170af821d01c4c533ba451edbc36e11007de95a722
GET /wp-content/litespeed/css/726077d9b32abc8a8efbc2275c000c54.css?ver=29b2b HTTP/1.1
Host: cinecalidad.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:43:40 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Sun, 04 Dec 2022 14:33:24 GMT
last-modified: Sun, 27 Nov 2022 14:33:23 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 364217
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5nAEOFuKtIQsfxqlL5NDJv%2Buy73xT8%2FUQJGBwBuf35xC6xqOqMEE6TkmWezaATIEGfhbw4MVvQrN2Z3NeoYUza169FpSeoU8U6%2FYkOg6n3AQoS9n46B1whraxFKVFFWBqpY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772e50247faeb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6899
Expires: Thu, 01 Dec 2022 21:38:39 GMT
Date: Thu, 01 Dec 2022 19:43:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1e6b6ba4f82221b41c3d9129008c76d
2f9532d698b4c28df23e18bbb66399ec776d5b9f
218c6f41a16e6087c611d4db5784a7cc1d027084d0bf2bd6dc3843ee5dfd560f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: c08f55b2-7ac6-4dec-b53c-fd3f4533f9c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpBiGoHIAMFR2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bba3-69c2c2d05e55fd745caf1dce;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:09:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w_Mb-0pBwp-pUyU2bdJ8MhrGHkk6VQgJmcGV9MfHwj_yGUMIYZkyrg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 17:08:13 GMT
age: 9327
etag: "2f9532d698b4c28df23e18bbb66399ec776d5b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26d6dffbf400da4803a2e76e2a8ef2f8
2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: c6c3e3dc-c9a2-4fda-a83b-cdd6ae81166b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7uyE9CoAMF6Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830cc4-2c8940405044071a082ee678;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qykE_oaoqqPTgqGnfUo74mH29IOS97b5sZb_3VmB9yW7KUiJ1a7dnA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 18:58:06 GMT
age: 2734
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cinecalidad.fit/wp-content/litespeed/css/c1daa0374c9423bcbfea5c49606d921b.css?ver=4772a
188.114.96.1200 OK 50 kB URL HTTP/2 cinecalidad.fit/wp-content/litespeed/css/c1daa0374c9423bcbfea5c49606d921b.css?ver=4772a
IP 188.114.96.1:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4d019e875fabd4fae582324bbda5921a
f777c043bc3ee4821be3b8705fd58929ae5d67fe
116232d2029c61f4c3cce7d6d6991510db01e9ba78e5b649a79d6b71d018c65e
GET /wp-content/litespeed/css/c1daa0374c9423bcbfea5c49606d921b.css?ver=4772a HTTP/1.1
Host: cinecalidad.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:43:40 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Sun, 04 Dec 2022 14:33:24 GMT
last-modified: Sun, 27 Nov 2022 14:33:23 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 364217
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oYGE5JrVvT2WfEZ8sIQHpdqiBH9VuYQRJrQSKTnF38jZ6GetcxZf8ZuVXTk6r3IgLL8u%2B8nrjhNQmY46gYKjGMtl5R%2BQOiblunWEKXpfsXB%2FstWQ3J4QQ4pSYO3sYhDqw8Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772e50241f0fb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d2dd5a4bcfd47db8f38544bf39ce3031
fa2217bae05b7beca2e12597eaad835298276b82
3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4762
x-amzn-requestid: 52b09ca3-705b-4c86-9f56-172637553f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7TVG58oAMFQTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c15-4577a47243ad190672f8ac89;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Y0-NAp2LMMG5TjQQ9ENHwDyKXLObKTYqzPPOWvZhs7Y9WJIC6LoblQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 05:45:16 GMT
age: 50304
etag: "fa2217bae05b7beca2e12597eaad835298276b82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 820cf89fcab8380adff42982c9fb11ed
84241ddddbbfd7de30118307fb1a62800d0a4cb3
0d051495f06ac84de934283b40cbfee7a042d32153a73486dd7c017430e882d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12898
x-amzn-requestid: 9b594c3c-6b8c-4589-8fcb-b3d7518b46f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cQZBNFxToAMF_9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63833ba1-767f510d72eef86d0cc892df;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 10:27:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kZfRQsF_Fo2UtTqK0ByOPeQK-IzTQO9JtTmxIMlapmsd93SJk_4VYw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:47:30 GMT
age: 78970
etag: "84241ddddbbfd7de30118307fb1a62800d0a4cb3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cinecalidad.fit/wp-content/litespeed/css/fcec68446d86546a6aae0a48f630e4c2.css?ver=1e13a
188.114.96.1200 OK 14 kB URL HTTP/2 cinecalidad.fit/wp-content/litespeed/css/fcec68446d86546a6aae0a48f630e4c2.css?ver=1e13a
IP 188.114.96.1:0
Hash 0fdfa3d1fe99e79bf8addc112734205c
c9d20639e20e11df4fab83f01a11cdea4753092a
8115066e446e457a7c3438cb760235d693d88aee238fc404c9f2868d17dec489
GET /wp-content/litespeed/css/fcec68446d86546a6aae0a48f630e4c2.css?ver=1e13a HTTP/1.1
Host: cinecalidad.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:43:40 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Sun, 04 Dec 2022 14:33:24 GMT
last-modified: Sun, 27 Nov 2022 14:33:24 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 364217
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4XtdPsO4cE%2BgJCvFfJyd8vAxaYk2cW%2FeKslcK7AoRxxOJu16hkjL6X9OFCq2gJ38HOW9WTmV4VEB431ZsaqdrzLiMYq4%2BXEAIRrlms2pEb33rXnABtvv%2FUFIvyZmy0Hs5HI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772e50245f75b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 95bddb967ea61fa9bf1684d9eeff9812
06721f41f93f5a899d6f19c7c4ea2821807f4d73
8d4301f89723c71179acddf592ca18880204caad5ca3dd853ea1aae8a4daffc4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8D4301F89723C71179ACDDF592CA18880204CAAD5CA3DD853EA1AAE8A4DAFFC4"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16771
Expires: Fri, 02 Dec 2022 00:23:12 GMT
Date: Thu, 01 Dec 2022 19:43:41 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 89c562fe39ecddd81b11c921120f6fcb
70a2a60da51557e1fcb76af1b10c82bc98b9a4c6
0ef547e2dc73a6d0781284f4d406dc94c972237026effb6e513e47cf70787123
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6278
Cache-Control: max-age=167854
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:41 GMT
Etag: "6388d815-116"
Expires: Sat, 03 Dec 2022 18:21:15 GMT
Last-Modified: Thu, 01 Dec 2022 16:36:37 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 89c562fe39ecddd81b11c921120f6fcb
70a2a60da51557e1fcb76af1b10c82bc98b9a4c6
0ef547e2dc73a6d0781284f4d406dc94c972237026effb6e513e47cf70787123
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 259
Cache-Control: max-age=161835
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:41 GMT
Etag: "6388d815-116"
Expires: Sat, 03 Dec 2022 16:40:56 GMT
Last-Modified: Thu, 01 Dec 2022 16:36:37 GMT
Server: ECS (amb/6BC3)
X-Cache: HIT
Content-Length: 278
cdn.bncloudfl.com/bn/937/cd4/51a/937cd451aeb6215d274b679dd0c53ba2b7a09601.gif
104.22.15.198200 OK 210 kB URL HTTP/2 cdn.bncloudfl.com/bn/937/cd4/51a/937cd451aeb6215d274b679dd0c53ba2b7a09601.gif
IP 104.22.15.198:0
Size 210 kB (209852 bytes)
Hash 9e383974a61bf622ef2acedf065489d5
6051ab953d78300a4f0684fd8f0aca640600438a
e7c2a175cbb0ac8b2902daa8b6b8823f01d2f5ed96fbbe5e95d5cd472e3a444b
GET /bn/937/cd4/51a/937cd451aeb6215d274b679dd0c53ba2b7a09601.gif HTTP/1.1
Host: cdn.bncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: image/webp
content-length: 3104
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=432000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=gif, origSize=6094
content-disposition: inline; filename="937cd451aeb6215d274b679dd0c53ba2b7a09601.webp"
etag: 20b25b4ebf96788d68dda5fa29f2da44
expires: Sat, 03 Dec 2022 17:36:38 GMT
last-modified: Wed, 28 Apr 2021 13:02:26 GMT
vary: Accept
x-openstack-request-id: txb9847a07771e493883bfa-0061b09aa9
x-proxy-cache: HIT
x-timestamp: 1619614945.32862
x-trans-id: txb9847a07771e493883bfa-0061b09aa9
cf-cache-status: HIT
age: 7623
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 772e502ccc3fb4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.bncloudfl.com/bn/516/8eb/4d8/5168eb4d8942bd25f1cbec81acf9311a355d0823.png
104.22.15.198200 OK 1.1 kB URL HTTP/2 cdn.bncloudfl.com/bn/516/8eb/4d8/5168eb4d8942bd25f1cbec81acf9311a355d0823.png
IP 104.22.15.198:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 579d0821fab57e6c6b174ff52b6b2f1c
89b66af2c17b55a77a3525f98cb1cef560be0358
1c535bae3477ff26bb69fde704fb455565a7e656c82c5f6ba65f566769464ccb
GET /bn/516/8eb/4d8/5168eb4d8942bd25f1cbec81acf9311a355d0823.png HTTP/1.1
Host: cdn.bncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: image/webp
content-length: 1142
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=432000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2447
content-disposition: inline; filename="5168eb4d8942bd25f1cbec81acf9311a355d0823.webp"
etag: e0be6f0483ee14085537b72f62f24c1b
expires: Sat, 03 Dec 2022 18:20:53 GMT
last-modified: Mon, 31 May 2021 17:00:29 GMT
vary: Accept
x-openstack-request-id: txb41901d92c9442f686478-0061b09673
x-proxy-cache: HIT
x-timestamp: 1622480428.11687
x-trans-id: txb41901d92c9442f686478-0061b09673
cf-cache-status: HIT
age: 4968
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 772e502cec8db4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 89c562fe39ecddd81b11c921120f6fcb
70a2a60da51557e1fcb76af1b10c82bc98b9a4c6
0ef547e2dc73a6d0781284f4d406dc94c972237026effb6e513e47cf70787123
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 259
Cache-Control: max-age=161835
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:41 GMT
Etag: "6388d815-116"
Expires: Sat, 03 Dec 2022 16:40:56 GMT
Last-Modified: Thu, 01 Dec 2022 16:36:37 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 278
iifvcfwiqi.com/chicken.gif?z=1951163&pb=c320f78afb37afad0599278ebb86be2a1669931021&psp=cV-4wY0JvmprhkbLRBOonVAOcaI2vGrD5GOXshu8G-ZONTfS62scuOLi7GdGL51ErXbNHJKOtaxRK0JG7tfWlFDHY5qM2IFQe2hnJiAQ1lkbQz-NCkmdN_42_DadgDqXDIAz1Qgsgi07pzowN5SuIOlXytmafcKRMxNEfNspbVyGXtaM3Z0fIkrEHoPbxjdRZytYmzGbMDQYouM6V_SDJ0yTmc1nwp9Mk-1DLPpGIZtZg4cmXzvhYIyE8yRkRnIq84a31LXQDkPaAFOH4uA_QnfZnnrBf2H_KwhDQ6lISL8UD8-CxFmtpdghObIwkNmFsNObtcY8Qqr4IHKYvnvUM8pQDBvZzKk4S-lpipnaChuMeaDUth2R6Fs20FE_YRwemt1ROZaQd4KL8TxIaBclXBfzDCcqNqUZU7o9g_MjkUzzrDy7Hv2hlrqUzyHjl6KOcM8KmKkcUVSLDKmrZAB0RI2vNWwIYIhH8elf6lfZzHGGMWdS3JALD1s52slyge6qcLGbnloVo5lUb6IY0e87L0Rt4O0W9UXILK887fjzmMkzcTpOl7Nosd7Kk65PphY_CX_AJlpobE31d4A4YzqbRTBBP1OqL_j1mNiP9XeHlTke2BOlR1I=&abvar=0&os=0
62.122.171.6200 OK 43 B URL HTTP/2 iifvcfwiqi.com/chicken.gif?z=1951163&pb=c320f78afb37afad0599278ebb86be2a1669931021&psp=cV-4wY0JvmprhkbLRBOonVAOcaI2vGrD5GOXshu8G-ZONTfS62scuOLi7GdGL51ErXbNHJKOtaxRK0JG7tfWlFDHY5qM2IFQe2hnJiAQ1lkbQz-NCkmdN_42_DadgDqXDIAz1Qgsgi07pzowN5SuIOlXytmafcKRMxNEfNspbVyGXtaM3Z0fIkrEHoPbxjdRZytYmzGbMDQYouM6V_SDJ0yTmc1nwp9Mk-1DLPpGIZtZg4cmXzvhYIyE8yRkRnIq84a31LXQDkPaAFOH4uA_QnfZnnrBf2H_KwhDQ6lISL8UD8-CxFmtpdghObIwkNmFsNObtcY8Qqr4IHKYvnvUM8pQDBvZzKk4S-lpipnaChuMeaDUth2R6Fs20FE_YRwemt1ROZaQd4KL8TxIaBclXBfzDCcqNqUZU7o9g_MjkUzzrDy7Hv2hlrqUzyHjl6KOcM8KmKkcUVSLDKmrZAB0RI2vNWwIYIhH8elf6lfZzHGGMWdS3JALD1s52slyge6qcLGbnloVo5lUb6IY0e87L0Rt4O0W9UXILK887fjzmMkzcTpOl7Nosd7Kk65PphY_CX_AJlpobE31d4A4YzqbRTBBP1OqL_j1mNiP9XeHlTke2BOlR1I=&abvar=0&os=0
IP 62.122.171.6:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1951163&pb=c320f78afb37afad0599278ebb86be2a1669931021&psp=cV-4wY0JvmprhkbLRBOonVAOcaI2vGrD5GOXshu8G-ZONTfS62scuOLi7GdGL51ErXbNHJKOtaxRK0JG7tfWlFDHY5qM2IFQe2hnJiAQ1lkbQz-NCkmdN_42_DadgDqXDIAz1Qgsgi07pzowN5SuIOlXytmafcKRMxNEfNspbVyGXtaM3Z0fIkrEHoPbxjdRZytYmzGbMDQYouM6V_SDJ0yTmc1nwp9Mk-1DLPpGIZtZg4cmXzvhYIyE8yRkRnIq84a31LXQDkPaAFOH4uA_QnfZnnrBf2H_KwhDQ6lISL8UD8-CxFmtpdghObIwkNmFsNObtcY8Qqr4IHKYvnvUM8pQDBvZzKk4S-lpipnaChuMeaDUth2R6Fs20FE_YRwemt1ROZaQd4KL8TxIaBclXBfzDCcqNqUZU7o9g_MjkUzzrDy7Hv2hlrqUzyHjl6KOcM8KmKkcUVSLDKmrZAB0RI2vNWwIYIhH8elf6lfZzHGGMWdS3JALD1s52slyge6qcLGbnloVo5lUb6IY0e87L0Rt4O0W9UXILK887fjzmMkzcTpOl7Nosd7Kk65PphY_CX_AJlpobE31d4A4YzqbRTBBP1OqL_j1mNiP9XeHlTke2BOlR1I=&abvar=0&os=0 HTTP/1.1
Host: iifvcfwiqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2212011443475e97f8c17c49cc82d16966f9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ABswzQAAAAAAAAAB; Path=/; Expires=Sat, 31 Dec 2022 19:43:41 GMT; Secure; SameSite=None
OACIBLOCK=ABswzQAAAABjiDTQ; Path=/; Expires=Sat, 31 Dec 2022 19:43:41 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Fri, 02 Dec 2022 19:43:41 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
iifvcfwiqi.com/chicken.gif?z=1951164&pb=c320f78afb37afad0599278ebb86be2a1669931021&psp=z-ThdHBi7s8rkZuJWUlQ4HXpkBImRAFbq6aMZT_J77bytkULejYkIJBLJaH5OHLZKHPARKSuYEnfiOgCdFvGa8EGZOlDsdUlud7B-O0sVeaBhmEZimoKj3uVhsAoALv3wqNdLOwJGanlXNxkMyFNjsxmdpc7W9wh1gmHbOwnEaa-XAprOMWfusqvhufAC4Gj4p_d_WHHe7zAo1YYH13YCoqx0Qot_MEz8MoAg3NfiVxUhUUKMhFNaWV1-zjKIDF7kgdx-xvECFMULVQS01iMzwwklM8VcWrOPOgPSti1iV0XLxYvF7Ek2BwTxopf-UYnQtMT95PjtATr38P-GJWQN_Z-amLD2MTF-YNSU3XCerc0FtEsKu_6ThwQM_G7o-n3eQZFheoAcr22sS3jLCabH5JyIBEh6maJ7eBRtrbQfCfftUXpK-3l8NXs14OIhONg7xkN3S87Zz-8drZMddi36tG-Ga9bNarwN_5gd739ylBDkF1pN2xMlW9LMlDQRd3saYV0Zlikx-MUNPMh9XL1ajEUR-e05uUSbbXBiE2-CDADzNshUASUWjrwMYDESkiuGkGoQRpw4BbpUFJs1bF1QLVTNkNvmdIpLKxjFp7vbCZoAPlCfO-NEgNupOJpOL5qbshs0x05rOUoMEgoy8eQ1mbZFqP1yUsL9XEKQ1Ux59gwjaKttiOPC7t0VEO0wuMfYA==&abvar=0&os=0
62.122.171.6200 OK 43 B URL HTTP/2 iifvcfwiqi.com/chicken.gif?z=1951164&pb=c320f78afb37afad0599278ebb86be2a1669931021&psp=z-ThdHBi7s8rkZuJWUlQ4HXpkBImRAFbq6aMZT_J77bytkULejYkIJBLJaH5OHLZKHPARKSuYEnfiOgCdFvGa8EGZOlDsdUlud7B-O0sVeaBhmEZimoKj3uVhsAoALv3wqNdLOwJGanlXNxkMyFNjsxmdpc7W9wh1gmHbOwnEaa-XAprOMWfusqvhufAC4Gj4p_d_WHHe7zAo1YYH13YCoqx0Qot_MEz8MoAg3NfiVxUhUUKMhFNaWV1-zjKIDF7kgdx-xvECFMULVQS01iMzwwklM8VcWrOPOgPSti1iV0XLxYvF7Ek2BwTxopf-UYnQtMT95PjtATr38P-GJWQN_Z-amLD2MTF-YNSU3XCerc0FtEsKu_6ThwQM_G7o-n3eQZFheoAcr22sS3jLCabH5JyIBEh6maJ7eBRtrbQfCfftUXpK-3l8NXs14OIhONg7xkN3S87Zz-8drZMddi36tG-Ga9bNarwN_5gd739ylBDkF1pN2xMlW9LMlDQRd3saYV0Zlikx-MUNPMh9XL1ajEUR-e05uUSbbXBiE2-CDADzNshUASUWjrwMYDESkiuGkGoQRpw4BbpUFJs1bF1QLVTNkNvmdIpLKxjFp7vbCZoAPlCfO-NEgNupOJpOL5qbshs0x05rOUoMEgoy8eQ1mbZFqP1yUsL9XEKQ1Ux59gwjaKttiOPC7t0VEO0wuMfYA==&abvar=0&os=0
IP 62.122.171.6:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1951164&pb=c320f78afb37afad0599278ebb86be2a1669931021&psp=z-ThdHBi7s8rkZuJWUlQ4HXpkBImRAFbq6aMZT_J77bytkULejYkIJBLJaH5OHLZKHPARKSuYEnfiOgCdFvGa8EGZOlDsdUlud7B-O0sVeaBhmEZimoKj3uVhsAoALv3wqNdLOwJGanlXNxkMyFNjsxmdpc7W9wh1gmHbOwnEaa-XAprOMWfusqvhufAC4Gj4p_d_WHHe7zAo1YYH13YCoqx0Qot_MEz8MoAg3NfiVxUhUUKMhFNaWV1-zjKIDF7kgdx-xvECFMULVQS01iMzwwklM8VcWrOPOgPSti1iV0XLxYvF7Ek2BwTxopf-UYnQtMT95PjtATr38P-GJWQN_Z-amLD2MTF-YNSU3XCerc0FtEsKu_6ThwQM_G7o-n3eQZFheoAcr22sS3jLCabH5JyIBEh6maJ7eBRtrbQfCfftUXpK-3l8NXs14OIhONg7xkN3S87Zz-8drZMddi36tG-Ga9bNarwN_5gd739ylBDkF1pN2xMlW9LMlDQRd3saYV0Zlikx-MUNPMh9XL1ajEUR-e05uUSbbXBiE2-CDADzNshUASUWjrwMYDESkiuGkGoQRpw4BbpUFJs1bF1QLVTNkNvmdIpLKxjFp7vbCZoAPlCfO-NEgNupOJpOL5qbshs0x05rOUoMEgoy8eQ1mbZFqP1yUsL9XEKQ1Ux59gwjaKttiOPC7t0VEO0wuMfYA==&abvar=0&os=0 HTTP/1.1
Host: iifvcfwiqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2212011443475e97f8c17c49cc82d16966f9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ABslmQAAAAAAAAAB; Path=/; Expires=Sat, 31 Dec 2022 19:43:41 GMT; Secure; SameSite=None
OACIBLOCK=ABslmQAAAABjiDTQ; Path=/; Expires=Sat, 31 Dec 2022 19:43:41 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Fri, 02 Dec 2022 19:43:41 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
krjxhvyyzp.com/solid.gif?z=1950706&abvar=0
62.122.171.6200 OK 43 B URL HTTP/2 krjxhvyyzp.com/solid.gif?z=1950706&abvar=0
IP 62.122.171.6:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
POST /solid.gif?z=1950706&abvar=0 HTTP/1.1
Host: krjxhvyyzp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://cinecalidad.fit
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
krjxhvyyzp.com/solid.gif?z=1950706&abvar=0
62.122.171.6200 OK 43 B URL HTTP/2 krjxhvyyzp.com/solid.gif?z=1950706&abvar=0
IP 62.122.171.6:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
POST /solid.gif?z=1950706&abvar=0 HTTP/1.1
Host: krjxhvyyzp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://cinecalidad.fit
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
krjxhvyyzp.com/get/1950706?zoneid=1950706&jp=_cl4l8j1zezau0l0qnmr9z0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=4894514731555871
62.122.171.6200 OK 57 B URL HTTP/2 krjxhvyyzp.com/get/1950706?zoneid=1950706&jp=_cl4l8j1zezau0l0qnmr9z0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=4894514731555871
IP 62.122.171.6:0
File type ASCII text, with no line terminators
Hash 02a7eedcf29cefdbd3486efc1a2904b6
69736d08b55132406eb58820d02098ecf8b9a96d
361dd0e92cf15e662e9720472730b3be0d26a13bdcf2ea5ae90b130e5196d988
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1950706?zoneid=1950706&jp=_cl4l8j1zezau0l0qnmr9z0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=4894514731555871 HTTP/1.1
Host: krjxhvyyzp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=22120114432e8f7eb9fd1342a9a5457d7883; Path=/; Expires=Fri, 01 Dec 2023 19:43:41 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
cinecalidad.fit/wp-content/themes/Cinecalidad/assets/js/bundle.js?v=1.10?v=0.30651300%201669859319
188.114.96.1200 OK 3.4 kB URL HTTP/2 cinecalidad.fit/wp-content/themes/Cinecalidad/assets/js/bundle.js?v=1.10?v=0.30651300%201669859319
IP 188.114.96.1:0
Hash 85825fb1c3e24d454d930d713dc98325
fee222575e3e309171d20d00a494129dc1d1caa4
c0538b5ec0a530f6558cd60e06d8966a4b44d326059feb57f8284f6b88a3e7c5
GET /wp-content/themes/Cinecalidad/assets/js/bundle.js?v=1.10?v=0.30651300%201669859319 HTTP/1.1
Host: cinecalidad.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:43:40 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 08 Dec 2022 05:11:26 GMT
last-modified: Sat, 12 Nov 2022 05:30:15 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bilswrOmQFeg8aiJbNFvaQy2%2BfyOD%2FFpDTKL%2B5uBjB4l93MZsxpWWypqKq2rq5dmKY3flRuMIZbgPBQKpp7T0a4vvPcS11vb6mYnqKOxnazwVVbMcjMHM2xfGHNtMPp4Ju4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772e50241f11b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
offerimage.com/www/images/2fed87d8d9131d075b72354b838c2d77.jpeg
172.67.22.216200 OK 11 kB URL HTTP/2 offerimage.com/www/images/2fed87d8d9131d075b72354b838c2d77.jpeg
IP 172.67.22.216:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 192x192, components 3\012- data
Hash 2fed87d8d9131d075b72354b838c2d77
69624c46c1556c35c67e85724451cce20ad405ec
8adac582983620ad0421a1be7648f58c731feaf3de0bf027ebefe412505b01ed
GET /www/images/2fed87d8d9131d075b72354b838c2d77.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:43:42 GMT
content-type: image/jpeg
content-length: 10853
cache-control: max-age=86400
cf-bgj: h2pri
etag: "62b2c84c-2a65"
expires: Fri, 02 Dec 2022 09:29:28 GMT
last-modified: Wed, 22 Jun 2022 07:44:12 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 36854
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772e50301aa2b524-OSL
X-Firefox-Spdy: h2
cinecalidad.fit/wp-content/plugins/wp-smush-pro/app/assets/js/smush-lazy-load-native.min.js?ver=3.8.4
188.114.96.1200 OK 56 kB URL HTTP/2 cinecalidad.fit/wp-content/plugins/wp-smush-pro/app/assets/js/smush-lazy-load-native.min.js?ver=3.8.4
IP 188.114.96.1:0
File type ASCII text, with very long lines (9414)
Hash 49fabcf3cdee22278e4c8e4854f70cee
c5661299c29e0e120f8b157f996a333e96adf105
1835787dd3ef2ff2c03c48180acbe6475256c8c05be4fd03a995a6247bd47c0f
GET /wp-content/plugins/wp-smush-pro/app/assets/js/smush-lazy-load-native.min.js?ver=3.8.4 HTTP/1.1
Host: cinecalidad.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:43:40 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 08 Dec 2022 19:43:41 GMT
last-modified: Sat, 12 Nov 2022 05:30:13 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l4EbL5WsbrCNLgEcOQUKdnqYETk6%2BFYrqt3O%2BYXwbQhcl3iLxW7t6YK7RRYG26N7pM0TbUUwbPLnQa5qDdMdF93hUrcqm4g9OukJb%2FHvLv6PtWfgSR46ESpXuju60QPr%2B84%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772e50246f94b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
iifvcfwiqi.com/get/1951163?zoneid=1951163&jp=_cllr95gd43uqv57r0hslll&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=109440127442976
62.122.171.6200 OK 1.5 kB URL HTTP/2 iifvcfwiqi.com/get/1951163?zoneid=1951163&jp=_cllr95gd43uqv57r0hslll&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=109440127442976
IP 62.122.171.6:0
Hash a143e1025ace274ed44f196d785073dd
1e206f63281a3a5715b04b42de93b2b46037a8d7
0d9a378b456f9fdcac31deec6dee60ee3a62b21a91807888dcc09c7c02190e80
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1951163?zoneid=1951163&jp=_cllr95gd43uqv57r0hslll&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=109440127442976 HTTP/1.1
Host: iifvcfwiqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=221201144381d2b9f4b023449b93fe17c83d; Path=/; Expires=Fri, 01 Dec 2023 19:43:41 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
connect.facebook.net/es_LA/sdk.js
31.13.72.12200 OK 1.7 kB URL HTTP/2 connect.facebook.net/es_LA/sdk.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (1957)
Hash 674b2f7069bcf88096b9b25021f35fed
b64f0c5e76503d57a18b642331036028516e2742
be8dd788c04d32db9fa7061acda94cc43d935c358336c919a3c82bbb94302e0e
GET /es_LA/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 8cdefd82b131555ed2ba8d0238ce3548
etag: "69cb1a7f5decd2b97a382d10e352c546"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 01 Dec 2022 19:49:37 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Z0svcGm8+ICWubJQIfNf7Q==
x-fb-debug: oq64H3uwsP9GSWzLun9k3B5jqPvocVkiiKYkJn45XYX73oIW9kDWGsOcsoOArpGG5FbjBflFi+5zjcYayuJucg==
content-length: 1686
x-fb-trip-id: 1904183273
date: Thu, 01 Dec 2022 19:43:42 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8a48642d82eee3c432a3f38879f9541b
f53e46a8406bbad51319826db59b6c265622241f
33a0510300258746dda57d56cf6fec74147cd138f7bae2c609d0976841fc3adc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5618
Cache-Control: max-age=106385
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:42 GMT
Etag: "6387ea8d-1d7"
Expires: Sat, 03 Dec 2022 01:16:47 GMT
Last-Modified: Wed, 30 Nov 2022 23:43:09 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 51d5484b700426c5612c309bbf14b114
026994960bfaaa4e2604b66cb795b2787fe300a2
e3e30a64f2e4fc59120c46b320d104f1b9d9a8af90106ab78715d14e49e11ae0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-181253527-3&cid=1039435757.1669923821&jid=770164680&gjid=1658621481&_gid=1384645716.1669923821&_u=YEDAAUABAAAAACAAI~&z=439805587
108.177.14.157200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-181253527-3&cid=1039435757.1669923821&jid=770164680&gjid=1658621481&_gid=1384645716.1669923821&_u=YEDAAUABAAAAACAAI~&z=439805587
IP 108.177.14.157:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-181253527-3&cid=1039435757.1669923821&jid=770164680&gjid=1658621481&_gid=1384645716.1669923821&_u=YEDAAUABAAAAACAAI~&z=439805587 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://cinecalidad.fit
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://cinecalidad.fit
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 01 Dec 2022 19:43:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 51d5484b700426c5612c309bbf14b114
026994960bfaaa4e2604b66cb795b2787fe300a2
e3e30a64f2e4fc59120c46b320d104f1b9d9a8af90106ab78715d14e49e11ae0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 16c3ad4a2bc7f419fb354b37778f8b2f
d193a1336556dcf6b4975a057e7c849037eef0ff
5993deb5a53b2e844b9027a6b6906c718f6e9f69c27388199c4343a80ef067f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 81abfd63eeb2fadc85b31541378babb1
09d3223c1a2a4e2cbfcba0381ead2cee5ee0a200
c7665c83165956c11bdbe0509ae03bf6af1b34ca68bf352fbfd629dc3a04b815
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-181253527-3&cid=1039435757.1669923821&jid=770164680&_u=YEDAAUABAAAAACAAI~&z=169298988
216.58.207.228200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-181253527-3&cid=1039435757.1669923821&jid=770164680&_u=YEDAAUABAAAAACAAI~&z=169298988
IP 216.58.207.228:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-181253527-3&cid=1039435757.1669923821&jid=770164680&_u=YEDAAUABAAAAACAAI~&z=169298988 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 01 Dec 2022 19:43:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/es_LA/sdk.js?hash=5eff4f44afb8103df828404428c06cba
31.13.72.12200 OK 88 kB URL HTTP/2 connect.facebook.net/es_LA/sdk.js?hash=5eff4f44afb8103df828404428c06cba
IP 31.13.72.12:0
File type ASCII text, with very long lines (18530)
Hash b1bb940a52f20fc580cf1a5fe44bdcb4
bf2ae6bad02e8b7a90ba4a32d5a040957db257ce
6322a181c635575ea38da790a27f1b1fbfda89ef02fabe9c89b65350545344cd
GET /es_LA/sdk.js?hash=5eff4f44afb8103df828404428c06cba HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://cinecalidad.fit
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 44c89621dfa216b584a3793a629fb0cc
etag: "b80df86c7591715bb824306994371c3e"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Fri, 01 Dec 2023 18:10:56 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: sbuUClLyD8WAzxpf5EvctA==
x-fb-debug: SSM1nI7/aNjM8B5WV4JOcvcxe3Jv+F/ETxNHH93MMD9lxmKYv8Slg2o/u9yyb+8H9QvWVG/wcuxlF+vD/U2B5Q==
content-length: 88402
x-fb-trip-id: 1904183273
date: Thu, 01 Dec 2022 19:43:42 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 533f66ef53706466ce20dc9aebf11812
0c0d713d538eb224deeb9241917a117205f16cb2
8ce7b68022c847b59b9a132ada3a75eea73bb57bae4683901c8df08fa255ba79
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 81abfd63eeb2fadc85b31541378babb1
09d3223c1a2a4e2cbfcba0381ead2cee5ee0a200
c7665c83165956c11bdbe0509ae03bf6af1b34ca68bf352fbfd629dc3a04b815
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/v14.0/plugins/like.php?action=like&app_id=415760977287361&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df32f1a566bda3bc%26domain%3Dcinecalidad.fit%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fcinecalidad.fit%252Ff22fc9a2e0fb21a%26relation%3Dparent.parent&container_width=590&href=https%3A%2F%2Fwww.facebook.com%2Fnuestrocinecalidad&layout=button_count&lazy=true&locale=es_LA&sdk=joey&share=true&size=small&width=
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/v14.0/plugins/like.php?action=like&app_id=415760977287361&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df32f1a566bda3bc%26domain%3Dcinecalidad.fit%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fcinecalidad.fit%252Ff22fc9a2e0fb21a%26relation%3Dparent.parent&container_width=590&href=https%3A%2F%2Fwww.facebook.com%2Fnuestrocinecalidad&layout=button_count&lazy=true&locale=es_LA&sdk=joey&share=true&size=small&width=
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v14.0/plugins/like.php?action=like&app_id=415760977287361&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df32f1a566bda3bc%26domain%3Dcinecalidad.fit%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fcinecalidad.fit%252Ff22fc9a2e0fb21a%26relation%3Dparent.parent&container_width=590&href=https%3A%2F%2Fwww.facebook.com%2Fnuestrocinecalidad&layout=button_count&lazy=true&locale=es_LA&sdk=joey&share=true&size=small&width= HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: R5aqt00LjjNPkPlIJptAGF4aFU34Mt3jYZ1/bnfCgO2PbhHj/701AUX1HbbiH10YJqvsr2eumzB2NgmW9VSfdw==
content-length: 0
date: Thu, 01 Dec 2022 19:43:42 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
goomaphy.com/impression/eCQcycC5GsdBtNM__uZa-C69gjsGE67fMMY3RL_oQyPjiT5HeXLBp32xHpWCzwY-o5je_jTXPHhXSUC0cneeSXOUQfbOxNyROZoLUaxwz48vzAlDBlrPAtlldoNMnqIEcBbhAuyHhHkZjiwzoDTqvRDndHC4llcd8CvE_aqKCF9GEIWP8_EV68WI6zZQK6dOmXKsa0pdVKkmNqKX3HahxQayDKF9_4zazvWGXEJeXXziMwYND5H6iRsCso0ak0LOnRmN7ZT8nNaUq0517XrJs24_pWyj2pkqyLd3pI6rlYhO7TVQksvx5RnYw1h0i0eIMXh_XEDtnGsuEIKbKtSWc0dLMJuWrU24WVmZiCqykWTT4n_Gbjtg6Y-fiwvMTW3UHM5AdbAXURm1EHyDT9emhYHyX9B0ySNknFiWdVVQNuh45FAzJuUpaA4irXkxseBWfSUepVE_vY_Zc48XnDWDb7A7Teeg7RtcTYh18r-4D21P-6ZoFbscsENbWtKvHHXm31MspJ2f5iHO6-Khr_i6rrAdMrLjfd1BRtVb2nCK_ejK_A-vsjWqFqJFjrmpMX7dNehO-vU6SZTaeHk7eCRK5jwWSB270s3Q?_z=5331042&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&pl=http%3A%2F%2Fcinecalidad.fit%2Fver-pelicula%2Fblack-adam-online-gratis-en-cinecalidad%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
139.45.197.239200 OK 43 B URL HTTP/2 goomaphy.com/impression/eCQcycC5GsdBtNM__uZa-C69gjsGE67fMMY3RL_oQyPjiT5HeXLBp32xHpWCzwY-o5je_jTXPHhXSUC0cneeSXOUQfbOxNyROZoLUaxwz48vzAlDBlrPAtlldoNMnqIEcBbhAuyHhHkZjiwzoDTqvRDndHC4llcd8CvE_aqKCF9GEIWP8_EV68WI6zZQK6dOmXKsa0pdVKkmNqKX3HahxQayDKF9_4zazvWGXEJeXXziMwYND5H6iRsCso0ak0LOnRmN7ZT8nNaUq0517XrJs24_pWyj2pkqyLd3pI6rlYhO7TVQksvx5RnYw1h0i0eIMXh_XEDtnGsuEIKbKtSWc0dLMJuWrU24WVmZiCqykWTT4n_Gbjtg6Y-fiwvMTW3UHM5AdbAXURm1EHyDT9emhYHyX9B0ySNknFiWdVVQNuh45FAzJuUpaA4irXkxseBWfSUepVE_vY_Zc48XnDWDb7A7Teeg7RtcTYh18r-4D21P-6ZoFbscsENbWtKvHHXm31MspJ2f5iHO6-Khr_i6rrAdMrLjfd1BRtVb2nCK_ejK_A-vsjWqFqJFjrmpMX7dNehO-vU6SZTaeHk7eCRK5jwWSB270s3Q?_z=5331042&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&pl=http%3A%2F%2Fcinecalidad.fit%2Fver-pelicula%2Fblack-adam-online-gratis-en-cinecalidad%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP 139.45.197.239:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
Analyzer Verdict Alert quad9 Sinkholed
GET /impression/eCQcycC5GsdBtNM__uZa-C69gjsGE67fMMY3RL_oQyPjiT5HeXLBp32xHpWCzwY-o5je_jTXPHhXSUC0cneeSXOUQfbOxNyROZoLUaxwz48vzAlDBlrPAtlldoNMnqIEcBbhAuyHhHkZjiwzoDTqvRDndHC4llcd8CvE_aqKCF9GEIWP8_EV68WI6zZQK6dOmXKsa0pdVKkmNqKX3HahxQayDKF9_4zazvWGXEJeXXziMwYND5H6iRsCso0ak0LOnRmN7ZT8nNaUq0517XrJs24_pWyj2pkqyLd3pI6rlYhO7TVQksvx5RnYw1h0i0eIMXh_XEDtnGsuEIKbKtSWc0dLMJuWrU24WVmZiCqykWTT4n_Gbjtg6Y-fiwvMTW3UHM5AdbAXURm1EHyDT9emhYHyX9B0ySNknFiWdVVQNuh45FAzJuUpaA4irXkxseBWfSUepVE_vY_Zc48XnDWDb7A7Teeg7RtcTYh18r-4D21P-6ZoFbscsENbWtKvHHXm31MspJ2f5iHO6-Khr_i6rrAdMrLjfd1BRtVb2nCK_ejK_A-vsjWqFqJFjrmpMX7dNehO-vU6SZTaeHk7eCRK5jwWSB270s3Q?_z=5331042&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&pl=http%3A%2F%2Fcinecalidad.fit%2Fver-pelicula%2Fblack-adam-online-gratis-en-cinecalidad%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: goomaphy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Cookie: OAID=c8ff2098e7b94f56b2327fdcadd98472
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:46 GMT
content-type: image/gif
content-length: 43
x-trace-id: ebc96a73d44c3cb5317a845e590510ec
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3519a58310eefa01756f0440e2acd7dd
50153382830684a6abb653dc7b4e41d7c7e386b5
5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3519a58310eefa01756f0440e2acd7dd
50153382830684a6abb653dc7b4e41d7c7e386b5
5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://cinecalidad.fit
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 86972
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://cinecalidad.fit
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 86993
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:43:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc2c1d47-fc4a-4f23-a6f7-5ac8f3a68490.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc2c1d47-fc4a-4f23-a6f7-5ac8f3a68490.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash acffcb88ce68b2d70c9c046a7b5a4aa8
cd016e6c0bf5c6eef06e933c9a5257ff4fca9bc1
692d782ac1d812de6dadbcfe46034b6b5d8bbd586e56beedd96dc4d65445dd4c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc2c1d47-fc4a-4f23-a6f7-5ac8f3a68490.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12035
x-amzn-requestid: 2711a135-b390-43ef-9e95-92438058bc27
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz81FIpIAMFs9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd1e-742f7f293df074340ab6a217;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ygs-Qd7UU_k4t4_breZTyqkHqGjJzlH1UMa9ncww5_IGpJ1n781jfg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:51:55 GMT
age: 78712
etag: "cd016e6c0bf5c6eef06e933c9a5257ff4fca9bc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cinecalidad.fit/wp-content/litespeed/css/5e52b9eec265ab23515f977327a55dab.css?ver=55dab
188.114.96.1200 OK 0 B URL HTTP/2 cinecalidad.fit/wp-content/litespeed/css/5e52b9eec265ab23515f977327a55dab.css?ver=55dab
IP 188.114.96.1:0
GET /wp-content/litespeed/css/5e52b9eec265ab23515f977327a55dab.css?ver=55dab HTTP/1.1
Host: cinecalidad.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 08 Dec 2022 19:43:41 GMT
last-modified: Thu, 01 Dec 2022 19:43:41 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w%2FHuYnPXpRuOm%2F6d8ZsW6yFIZ5s%2B1Twrp%2BJwwU3Au7tHBMTJ044Y%2Bflce1HKpCF8kJT4pqCn6f52P8f6anSuhg0PgRd45GP0paqc6uXjJvR%2BMMtL5OzTlb4hRIcswWY5O6c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772e50243f4ab4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
172.67.194.45200 OK 0 B IP 172.67.194.45:0
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:43:40 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 15:07:42 GMT
etag: W/"637e373e-32a6"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5165
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J1fdPZcprdMkMu59um75Dt%2FXEKwuJiA0m3TEAKxGYGZ%2Fulhg61DGJGkonpxQhz9yHby5Yhi7oa2i6p7q%2FjWB7DZez1PvRRY5dbKjwyWefQlKWKrsSWxGmL538OkNKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772e50250cd1b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
krjxhvyyzp.com/aas/r45d/vki/1950706/tghr.js
62.122.171.6200 OK 0 B URL HTTP/2 krjxhvyyzp.com/aas/r45d/vki/1950706/tghr.js
IP 62.122.171.6:0
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /aas/r45d/vki/1950706/tghr.js HTTP/1.1
Host: krjxhvyyzp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: application/javascript
last-modified: Tue, 15 Nov 2022 12:20:41 GMT
vary: Accept-Encoding
etag: W/"63738419-10f52"
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
krjxhvyyzp.com/get/1950706?zoneid=1950706&jp=_cloyujjn5d45dhws203foo&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=672390080933985
62.122.171.6200 OK 0 B URL HTTP/2 krjxhvyyzp.com/get/1950706?zoneid=1950706&jp=_cloyujjn5d45dhws203foo&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=672390080933985
IP 62.122.171.6:0
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1950706?zoneid=1950706&jp=_cloyujjn5d45dhws203foo&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=672390080933985 HTTP/1.1
Host: krjxhvyyzp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2212011443228eb1f364a847ec83aeecb1a8; Path=/; Expires=Fri, 01 Dec 2023 19:43:41 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
goomaphy.com/500/5331042?excludes=&oaid=c8ff2098e7b94f56b2327fdcadd98472&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=2&pl=http%3A%2F%2Fcinecalidad.fit%2Fver-pelicula%2Fblack-adam-online-gratis-en-cinecalidad%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
139.45.197.239200 OK 0 B URL HTTP/2 goomaphy.com/500/5331042?excludes=&oaid=c8ff2098e7b94f56b2327fdcadd98472&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=2&pl=http%3A%2F%2Fcinecalidad.fit%2Fver-pelicula%2Fblack-adam-online-gratis-en-cinecalidad%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP 139.45.197.239:0
Analyzer Verdict Alert quad9 Sinkholed
GET /500/5331042?excludes=&oaid=c8ff2098e7b94f56b2327fdcadd98472&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=2&pl=http%3A%2F%2Fcinecalidad.fit%2Fver-pelicula%2Fblack-adam-online-gratis-en-cinecalidad%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: goomaphy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: http://cinecalidad.fit
Connection: keep-alive
Referer: http://cinecalidad.fit/
Cookie: OAID=058f1b35b2a14f10887b66bcbf746400
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: application/javascript
x-trace-id: 6b8de47b37af5a5a72aea37752e93e16
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
vary: Origin
access-control-allow-origin: http://cinecalidad.fit
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=c8ff2098e7b94f56b2327fdcadd98472; expires=Fri, 01 Dec 2023 19:43:41 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700
IP 142.250.74.106:0
GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 01 Dec 2022 19:43:47 GMT
date: Thu, 01 Dec 2022 19:43:47 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
iifvcfwiqi.com/get/1951164?zoneid=1951164&jp=_cl9w1a68jm9q71sepmvh51&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=6020414638338636
62.122.171.6200 OK 0 B URL HTTP/2 iifvcfwiqi.com/get/1951164?zoneid=1951164&jp=_cl9w1a68jm9q71sepmvh51&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=6020414638338636
IP 62.122.171.6:0
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1951164?zoneid=1951164&jp=_cl9w1a68jm9q71sepmvh51&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=6020414638338636 HTTP/1.1
Host: iifvcfwiqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cinecalidad.fit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:43:41 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2212011443475e97f8c17c49cc82d16966f9; Path=/; Expires=Fri, 01 Dec 2023 19:43:41 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2