{"report_id":"78c9c2cc-6586-4aaf-8cec-919adb7a5dd7","version":6,"status":"done","tags":[],"date":"2025-12-24T00:57:14Z","url":{"schema":"http","addr":"yts.lt/movies/avatar-2009","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"yts.lt/movies/avatar-2009","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"title":"Avatar (2009) YIFY - Download Movie TORRENT - YTS","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"yts.lt/movies/avatar-2009","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-28T00:57:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"yts.lt","ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-21","domain_rank":919418,"first_seen":"2025-10-23T12:05:56.641474Z","last_seen":"2025-12-23T08:41:09.161101Z","alert_count":35,"request_count":35,"received_data":2024273,"sent_data":20381,"comment":"","tags":null,"fingerprints":[{"name":"Varnish:5.2","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Varnish:6.5","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"img.yts.lt","ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-21","domain_rank":0,"first_seen":"2019-06-07T12:44:25Z","last_seen":"2025-12-19T19:58:04.336708Z","alert_count":24,"request_count":24,"received_data":367754,"sent_data":13280,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"adexchangeclear.com","ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-27","domain_rank":24943,"first_seen":"2025-07-16T08:40:02.47428Z","last_seen":"2025-12-23T12:28:48.35446Z","alert_count":1,"request_count":1,"received_data":1628,"sent_data":1215,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"usrpubtrk.com","ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":6824,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2025-12-17T19:44:19.819274Z","alert_count":5,"request_count":1,"received_data":536,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"905994081158abfdedd44ca748e87b82","sha1":"5c2e7bf710518c1abe8de99c429a7d7ec075fe10","sha256":"d6059e35dd1f5f38a197b66dc726a2115cc17b5f78ec6e2fb9171b69220d585b","sha512":"f821acd2d59a29699e3ba773b3fafeec78a4f71df90f9209cbf0f9506cf657a72662ec864cc1f27a2ddc6c6c9abef756bbde90ef51c6c136446c127e6bbb2f84","ssdeep":"","tlshash":"58d0239569b9883173d9024610b6f3b8266131b07f11e140c2edcd1fdf11fd345b1a5c","size":217,"data":"","first_seen":"2025-12-24T00:57:19.787666Z","last_seen":"2025-12-24T00:57:19.787666Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/minified/modded1.js?yify=16","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d5b2122df8ce5f88f66459515b5f5d4","sha1":"9606b9e421c249ab747ed9e1678a952e6eac6829","sha256":"4445b4cbfdbf7c9882fde0d686163c201f342a16484bfa8f20cc35a556a13961","sha512":"9d98eba72ee84122b0f002e1fbea168cc2a1ec8c69710ccddefd37a44e789c5262abd029d0828a5e6b10780a426cc6f94610b9c05b2478602f0cd9a7b35bcf23","ssdeep":"1536:wCiROaq6JgInuFkbrAkknYQaoLyrq0LfxDX5cw4j7BIBxYSMHzJX0oqTDAGegnMX:ja6ZMDYIB6bp0RpnMEUOQKJbTc","tlshash":"6bf329cdb6d5702243bb30b9106f950ab233546b680d8840f16cd8e96fbce5a5277fad","size":163528,"data":"","first_seen":"2025-08-05T13:30:33.062819Z","last_seen":"2026-01-02T09:31:06.385682Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/movies/avatar-2009","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ba7236fa66f20d22dc4b3ead239a538","sha1":"ba7122b170ed9bc322c4824577781aef50c17141","sha256":"79399382c28b30e087f0403624d7305d7a44a41635ff5ab421592b8ccb31147c","sha512":"8fcf05b7d7621390e82e5b9410ef3c45affe279d7d16f0d95e0dc07c123ff29668193ff0d403d87c95b262293a491c01a48a26754c06925018fe8bfae7ee1c16","ssdeep":"12288:4dqeHntKnhYZiahM40lN0R5Jr9OnaYuqFFObnpe9AUTpKWZVfmuenM5xkr:4HtbhM40/0RRIZDFObnpe9AUTpKWZVar","tlshash":"fdd4501837844587371b4ebb773ba5d1e40b38da7609488ff6087c65a1965a3fbe8332","size":612040,"data":"","first_seen":"2025-12-24T00:57:19.788623Z","last_seen":"2026-02-05T23:23:35.145718Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1569b55cc3ff16b806df9d3c78c47c6e","sha1":"6bc88d0769a87e05524cda0c4c63a9549ea28e83","sha256":"0b0dba4a937231e95ad4a3dddaf4ccc703b35d98de075c2e248f5e8224614015","sha512":"ad774d5d091805fefb3ec7cb54b627ad3d9906204505a4c40c464410740335f4de710e0b3cc256fadb53113a053aed6ae413fa7b7e9ca51510eb824046bd0432","ssdeep":"192:Mp8nWkrWoJwL8o/3yQ7x2FWZnTqMvt6ngAZ9SPadbMW7hqNfafMBL83lE:Mpw5rWoJCR7F6D9SPabFhYk+L83lE","tlshash":"1d2208cebe89f00463992cf8486739c7469cbd641404e21782d898a87b3979e166ff47","size":10380,"data":"","first_seen":"2025-12-24T00:57:19.778972Z","last_seen":"2025-12-24T00:57:19.778972Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-05T11:48:54.197191Z","times_seen":94693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"419f553b5aa1de5a08dd61f68c3b9615","sha1":"e10ce306851d24a815aefcc90ee8ab78febbf230","sha256":"c29bf52545ac0e8f20315d6f9ec6b0f78246a36ce8eebbc396f9e692681849c1","sha512":"5ae56180c421d1bf613e6796b10c897f7d3cd8cc826aeb83c9f07d5c6d6235162886a9f05bc710000256bc43da1e70ed71481fc0295ab04f93571d7d0e2b38fe","ssdeep":"192:XYp8R9knhCKL8D9yhN5JcNz4nK3sMTnzUS45mkbGyz9BGnCc6xEN8483a:XYp8z5/T4S45mkbGo9BG36xR483a","tlshash":"8d22e78ebe89b00433a62cfc48773ac3465ec9642804e61793d45ca4bf39b6b555fe4b","size":10422,"data":"","first_seen":"2025-12-24T00:57:19.759878Z","last_seen":"2025-12-24T01:27:02.294656Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/movies/avatar-2009","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c09b818fb63419800fd3b343fff3341","sha1":"b0d9fd6f4f1fd4780ac3b7e1a824ee25aebbea86","sha256":"58334dc0b81bc09bfee99618d6cf8cb2b7f144d37f6bb4ef308e238f2d272dcc","sha512":"f2e21a5d308cd452a0de50f7287cd468abacf9f47db4b17058c3332ce1d575117339cfdaf6a63ce4312b678cc39556caff6aeb4d25766a41939636a34467e957","ssdeep":"","tlshash":"40119c757b1a6534d6c6418b317ee7a93e3260717e02a084c36ccc299d18e8714afdbe","size":902,"data":"","first_seen":"2025-12-24T00:57:19.789395Z","last_seen":"2025-12-24T00:57:19.789395Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"905994081158abfdedd44ca748e87b82","sha1":"5c2e7bf710518c1abe8de99c429a7d7ec075fe10","sha256":"d6059e35dd1f5f38a197b66dc726a2115cc17b5f78ec6e2fb9171b69220d585b","sha512":"f821acd2d59a29699e3ba773b3fafeec78a4f71df90f9209cbf0f9506cf657a72662ec864cc1f27a2ddc6c6c9abef756bbde90ef51c6c136446c127e6bbb2f84","ssdeep":"","tlshash":"58d0239569b9883173d9024610b6f3b8266131b07f11e140c2edcd1fdf11fd345b1a5c","size":217,"data":"","first_seen":"2025-12-24T00:57:19.787666Z","last_seen":"2025-12-24T00:57:19.787666Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/movies/avatar-2009","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7a52cfbdc7541c18fa0b0f49ff6b7b4","sha1":"edff205f0226afb4e89b68f43f5a87c709247eb0","sha256":"6657317375753a0d47cbaa385b9692901c95c06c8bf9149f85ce8e4f771fe097","sha512":"91ce5d0b0a6a08db5975e220ae304c7d62f2948496fba30b71237ffb478b597945e13c339097c3a32ffe63d280448a54462056b0aea3796491aa065d5741b27c","ssdeep":"","tlshash":"1db0026a056281266663281c5a6e8d68605e0103984aa5ca3a9c81e48f24096205a504","size":123,"data":"","first_seen":"2025-10-23T12:06:07.290242Z","last_seen":"2026-03-01T20:48:51.065214Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"yts.lt/assets/images/website/ajax-spinner.png","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/ajax-spinner.png HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/assets/minified/2bacb5de663bc55f0cbed2b4a7d1504dc.css?2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb; cf_clearance=_IQgEvT0h7X_QbgwkUOUHO5YOgohEdjtbTjs422T3uw-1766537809-1.2.1.1-iu9xd6XXjPpalz0qCskPc7mAP2GYt5Dl04D0GNXZQqUww6AP9yX9c5vnSHl2hUJskBklWK1CputeD0JfmSjNo_9G3I.6Q0LXhsgRGJFPhA9v2m6K8OqGFwrWhXuCk4rJ4jLSCUaRK5Wy09T_ZrSpKT.tYJcOLXM0g6M8SgYItTVkbGfQXFwElfWFxEKL37R4ycvrwteZOQ5l8D0ax2XV4.ieGn4Dj8uCIQtB946CvnA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1076\r\nreferrer-policy: same-origin\r\nlast-modified: Sat, 31 Oct 2015 22:05:31 GMT\r\netag: \"56353b2b-3128\"\r\naccept-ranges: bytes\r\nx-varnish: 12947192\r\nvary: accept, accept-encoding\r\nvia: 1.1 varnish (Varnish/5.2)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-xss-protection: 1; mode=block\r\ncf-polished: ok\r\nexpect-ct: max-age=86400, enforce\r\nage: 923\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XEGi2oM5XqpaMaGxJeK4QAMhx7G5%2B%2FP1NmF7UBIC6ras1Zw%2FWFpB3sANytzp8KpczfDRMb6EfjsGTSstSFSqe6SO0g%3D%3D\"}]}\r\ncf-ray: 9b2c241f98bfb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:5.2","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"220cb901cd20914827bfcee48c42c64f","sha1":"1d556a034616b298a86043695abfde8241491f21","sha256":"932b09e9f9b70da500e2101c20c3500ce5a645b7b31cff8ed28bc3d32fd7dca1","sha512":"f1e841b460518809ee5e53412b05a77ebabd206a9895e29a9e24c050afc0884ff8cad0b5cccdbf0558ae197d99a0ad478364054ed226b3ed816bf5b992811deb","ssdeep":"","tlshash":"ee11e5dafa90060cac03724ac29b9e1805b9ee934c8c3527b29f4d80015030abb5e879","first_seen":"2025-12-03T18:54:25.595116Z","last_seen":"2026-02-28T15:26:20.426026Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.8610489303140711:1766536135:2ZlsIvhBz3SDWjTcFzHE8oI7kVLt-XyCO81jOWRIJfY/9b2c24161bdb56b5","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.8610489303140711:1766536135:2ZlsIvhBz3SDWjTcFzHE8oI7kVLt-XyCO81jOWRIJfY/9b2c24161bdb56b5 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12156\r\nOrigin: https://yts.lt\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yts.lt/movies/avatar-2009\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb; cf_clearance=_IQgEvT0h7X_QbgwkUOUHO5YOgohEdjtbTjs422T3uw-1766537809-1.2.1.1-iu9xd6XXjPpalz0qCskPc7mAP2GYt5Dl04D0GNXZQqUww6AP9yX9c5vnSHl2hUJskBklWK1CputeD0JfmSjNo_9G3I.6Q0LXhsgRGJFPhA9v2m6K8OqGFwrWhXuCk4rJ4jLSCUaRK5Wy09T_ZrSpKT.tYJcOLXM0g6M8SgYItTVkbGfQXFwElfWFxEKL37R4ycvrwteZOQ5l8D0ax2XV4.ieGn4Dj8uCIQtB946CvnA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12156,"data":"fiS-t93KMNCQ3Q8MQ3FDbPbCP-fMbf-3L3PySb6-kLCGbuF77ZgoVLCDS+1bC-7hobIK2-CPbyII$sbJaIBsbks96NybfTkmtbPh6M4ktmLQmmbPU80+-whpkbkFfEXMkpMSClmH24xbfbsvqNJ8b+ok3KJKoJGeZbkdb8FCi8N9mHf9mtobhNo0NuGsDb3BUX-NQuoCaSUdk2b3XH-b2bkvWyx3vPnLHYlXGIgS+iFzlFz8ZZb3hK-bpZqWngZF7v-bjATDsG-eMbbBUSIbAkb3$pl6dkbymbC$+CIkCa4FmZbbvKW3+H-N03qeum8bTbztiNRftA-bCM$3Lwy3L7sL7FLSbK9ybpTLwSbkJ3bSG5fMQSbUg9Q$9CUkgFwRFdo6WQZ9GvdLKsNDCLRyxZ9t4-bkxaokboAz7y5XobogR5X9MyR8SCRARUJWHZJlKsHh8+ZsG69bPzMYbTyyXpv5V0ixvF-bQvq65SvLgmrA1Pnh$gBqm7hNnFNd$ShJ7hbC0oWYKUkIkXJhKok6tKllZ0QZUSGCeAWLDC0ZHYO3ydWwiD9y4L7HCn8sDMg2RJ$9WBwn+J++lzGXwNEoWNf$GBoVdKlHHV2$WPB9mHGIo3PRwQH6akuRX69LvUTpyadFjMURbHBD3xKv+SVbqEnpoH1VOaXxKAI19iGCjerkrax0iYTRuQZ9bwbvq5SiE9lGn$qPZ1l2sGSsTYRLT05m1-LPDn6uUXoIbKUSH25gn$7+Q7q3lXRxTj2XanQ6CYNoM-bP1wDS8SQ3iqCklNXVRpgF3MYje1wlbn9PNiuWEYzDbak7n-D0L56769fx+VSi9Blb1olbSdCQDK+3N3m3Wv0T3WMzLwo+fotbMtxmMfSka9ffxwJKNo7s3foS6-CNL-9MSsRX4-V-8lbV09lMexx4nS3W7M1C930yylNkL3$38L-+t8B47AY87PZoL-z0wLMsS0bxOpQpYztx1blNwYBvVBdMAJzp0ilNS98MwL9f+d2v$DSuDB0N2WCrk5MehNidCr-zri2Y1Mwp-Ktypvxv0RBY7W$Nuy1kL24XXiuyVb0wD$$dhRQK79SltoabzC8tlu$Qtbzf0fF2oMq3PhylRZpdtAy0qZybSjwt1L3qbTYzxQS5MyPoV-Kk0uCpp-yNxaCMfSxLLm-mCLTQtxGmhRxkXkPowSlN0XkZSJmNOV8hNydJZrKfom3-lM4kKxLvbHXBrbHho2d-Mymf9k7dfmKoi2ovtE-h3wx4kpKxWRGS$VzjLH2ibL5p-INJI+lb8rSsbARpDwGI3Cz23-fQ0Jglbm3Ez0LxztMK-F0nlJEzhMW-n097EB1D9FtWytf+0x$-zVdwAsU2b90SLCESvfdiCzdb57utblp9Wwl39aGyS4SC0D1P-lpeG6-2NJQ-fIa9YV-G2kMxxWfEI+39qTG6WfTWa$jaJ+jspf+QNkkeipeb9F0TIxImrw9S-Qseu6gsOYqzse9nmN-suokJv8ujCEmJXy-PR7I4xZBOz8308sbLf5SYOe8lNusVpdZXe-COJ5+bSms35Sbs53-oVsCbpb3w2erjasenJCKM6i0hGKNuD3HMo3GGwpOt3oMKkLNI9bbia616rIN7uf-Kml1nD9SryGbbdr-L-lSlMjfSATfbehiMT+of-eMC3YfDQ4NUkLWCMMjTIzsq$YigwT$og+f-AbL4SknpbsK70kGkYYL-i-TkOCw+ShD36Zt3oat$kx4-+3vJg7hPiP8G6FtL9gNoJ9bohJKyi2zENJbYNrqijy29uSx-NpLkTNxKWGb$2-MkySxvib9BkOk8$i4o6SBBlUseYY1Mj0S0-jJkY-0sBY8-ARR0$MLKHtTC0EXnw63YjSgRR69VFlbZ+FQz4ACRp-ZHLnHCBDTtisknNNEAC80kF7L3gCOrmv1K7YRKWivQ6vCRm3nC$SNMyMFtbACHJQnrJDeY8bV0NSwhP4yutADzUBtT63Q6maYLQv723E6XzRyQ9NVfl-Z7btMAQ87HMSFj7qNo4xvnvJzobHJkfSHzgRhJmrMTwinZ-JnjVuU1rsBI8j4fNbKvjImo9yVkzuKggJECjvARoU6v3Wo1MgFwuFQKCCwm7YIKh36Lo+m6CByoBdsCEBVvyFnloOvqVmCzkvbbufhmyPhvyFrYwxOz3UWx3LGN0eIVYdd84iqR4sTY4Ah484+zUjtE3fhJHznSK7wJ7$sj1nqkA$CTNohilSakKPU+smjlwUEH3eJyvGA6qCmm+KQOvdbjiwg9zzOjFyOvsa3Bpbj2$3vOMerKLfSJO09dGZQwxkh-Dhy1rlqvLbrXMz0L9PhiN0vilf7JNoy-03Vsu$vpbMUzX3lCyKkikHWrtSskzwoZsjyNu0lDszVAq7QQI$oNxVNGMWPIDBJBaIko4BlK776x-lwog39bJi7orA-0kCQd-zKPXmgUAPQoezK6NpNFwa5QUd43gf7tHkM9OF4q6lKwxukJ3vUEArD-ONLLXPK28y11A9uCdh$GadANRh93FfoNh0H8MXUQFbMNFqah9VaZ-oeYzC3FVS70+1qW9Cug1KmNbAmPUYGChxE6p-OvXTSiWNUTuD4q7LOX7FLHOvvSbSu-xGyPYbkWSRKtCu8mkls2wyGUWMp1poVYzk6Hpb$St93Kno8HXN5RQfEAK0IVCbmD-bXR417F8dL98lKYIXhhQgWPkEux9gdJQx5DSNk$$ZIvri6wqeLnIXTAqnLGBXep-$Ss7LN7qW+bLBxQoj0koqC9Ey+KC8VgOIlx4DMk+QUe61kKs2WNRBXoW9KwW+J0qeCoQLQSpekoRdiGebi+Q-zmFo3GuzlxrSIIwg0AUFjW9ImzPpThyZk5SuUYvVsHxtJlyPtGGYkKpnV6nbQ78NvxXgRqPTLhgqXPg$Db0aEpD9lxH1-9CL0nwG2xpCZ3w3BnhW6039hQOYES5mPlS-+hd30Rspd7nQ1zFyQSPS9b16LponVxHahFSFQbOd0M63Lp-z5hsEzrzhvvG-fIOPzg8dCjIMJz4BNm5WUJ9-2EoIkpfAoZRZLF+IMkdWztHZA0S1LXXDDfGwyjp-Z7ZRUGFbLE61jmJArh6v7MBjkUXX8hD8s21bs6vN2HorB+vN4-908AdAVeV2yhUl$HY1nMMyOfAFSfz1thXkICKSmsLWOnsubiy1C7RvFqzKQxLRhGamwBlwhFInRqMwbZy5xJmlCb7XYN0yFUrPy8dVFyEnggOWJLeDSPrSbN2Rky87ATwE465DkDAEoA6Q0vNJAIPiA4Q5CZrX75JI2iDBENl1yGJbmbejPhJLfZudnruGLRE2S75PoLgRsinrqrNwCTYTpb$uz16qYiJxvJgJT4Cv6E2bR+udSa6GSDJQND3UmkpeBjUU$CjEbkzbyxEo6g+gZMrxHIafXiAhfzXI9tIiB1o6IhpnRHF3rxq7bI-uybNJ6E9xru81fSlbNRpnQCGIFuKUfWvHsXJjQHKT3jvSuW9HJXYMxmRMyb--9H5AInxX0h$CvL0xp3pbLhLLYV0zdhQ--XO1DRCH$LCoYnYUAoWbCJ0mg7qbUs0HWxbhqCpMaEBopRjtb7-0e1oWGMQMQE3n71NUS-RnRUN7yCSuMSP1GAP1ICkCFs6M+b-96iKxvjHUxuRbMbQs5RQVCnRhLhTk8kRx-0fjyVoksXszCHWjHlfbu7WMhJBXHl2JVUn17HYIx9qjRtMoo1AS5RFI6Eh-vnQJlW6io6etKb7oGX4iysr1TECT$THR0Sx1RT2uj7NsxW9EJx31v7W1Gjgk4h3Ex0OSF0kVIIkbs0o9sH1tA66km13jBk2XJVlnwJ7byIKMkbCluzmlUHiHf9gVgkqn+k-3NzR6st-H9uY6vkMEF0gou6p3yHAoKtgupMtXC0ZxH1GxPx8Mp1q16U2EXtNuIoPz-nWCWiFHJj0A--QMALymnH31ASsWyTrVCn$3sbwETVnXwC7LqEwotTGjtlfM1L-vTX5TvIKzFbajUomszE5h-WDxCLGhI3j3A7O7xVC1nA51NvZzQz-9qLGHJT13M9ZVpEHbOkJXBJYMgk5A5oCL3jJ1NxVCNCRCLx2L3jHUQJBRYIElHUazoWEl1z01tx84Ih1zux+b0mbkx-nUK1vR8YM4kMyCVIpVK1-W1k+396OSQ7$XMbQ7QtQsfL9YdJhlzbOMMm5HFX8W7IKCNCp3fzw7OS8uu-HAi0q90T9X-HuEKCuEwRCH9U-4QvA7995MOjo65iKSX-hRkb-1jCeo93NtVMIh54Y3$V1EyCPHOM$sYxvj1SQ7aCy3HLplCJGFY4WL6vCkOz7Ys4-L$CKCw3h44LKUMk8YuuvskLO36REhpbVhOM61NIOo5v-Chxz3rmf4tTGlWSJjk4MoWvGJ6izuKb7iNn$CSzoWtH6YuSA3YEr19RqFmTSYxY1M2MhA6Jrv-uKLH0zXA0utBXL1qj74fiyh8SpSZMChSu93f4MFOYTlo-C0FFSWfXHMTFYSOMkC2jATvCxVyVLLOv7VniblO4YWQCt-NJdkOFaEaEYB6R$kgIVSvvbEvFusB4-iI4l9kIHCVU9nEoF3wJlWUHQzlVv0FmrJWAtF-DBE-yXlXSUhrmGTN1X0$3RBw38bjbjvtSw4JxbiWJiM$tvS31orxlqJMA$kzrJCvIMV$R9kjIvIWviT-39-wMKsPBOiHUQCa1RBOX0SJVw3JYT40tEjPjwIWS4EBsIsHxpoQFKrb4N0Uto-nm8XElvLeJ7vWzY0tSmYGLbHxWFR8bGJn1vRxi$3aCIbl3viPHinPnai5C9k$FoEPAjBaAOtAHquNjIm4ufBPXF7gJZ1+yEth3yXi3AjotzBo-eE-YzSlbEk+0--4shRATF0nSGH+yD4EJ3uhWiW+CKMwLzMSV7TRsCXeBqn9WIC7sLHARe0AS13yMSybjI45uHI3MWmGuDxAYME7HOkl1iMhD0Juui4rsZb1C6tmRkMq0nUChn3BbQbQrmRfyiT3ofXAbKBbFfbr1zv6Btt9BIkOF17f4Ou7rx0$kSR63x47rvxCEGxwdnBAktJ$XNwUIXz0Ukn$VIAMC$X5BpvVy--UxCVe-Eij3oG9UWMghADh7dLR45JqV0SsW1MznwD-73I0zkGMrwvgofDiHSxpSeT3o-a+oh3go+CAJaHfuGEkbVjwmgDgEtD6VGGgkhYjwYtZ3C7$1CF844rvs9TLTUmNriD9T6yukFE6jEXRCHCI4YdeVCjOE9hwC9MWCJb2y1MYJuDZrl-lhaulWkvvsWsj4byGL1C7kwyBlSmQCW0ttEFXSGHCbbhbXkC8V0vX13vClFMW0G1GudIpbJyKzwo+IVvIyFXGULnwFy0$lCX$tqx5Hhk1bnuOn4TFlSwRjLG9FL4ornhdH6bArwMNXEMHj649sLylvpT9SCInymDDlwx7B3nqmRnZ1H3RnGaft0BwJim5kYtIJsYv1vEts8in45EArv3aoUijRWX+aAbg6g9Q4ovbUSWolw36UBspJH3rxA0zLeEmljlPFOiKxld2M10PFvux4iD84fXo6GvtHAUaaFE9hdXBiiuXB3vO7BdSmIM$sOBVDyfQos9mGkr6j-Yz3Yz5JgB9-nmutZ3hodm4UZbI7nApjWsV04uB0fx$i$VTFYxga9klCTn9Pjsw3slfBdHJ4w3ow8U0A8uUsS4nJoiOv7E-YbFWmq3qMZCsLUxvjdwiIT7-szM5Ps1DjOv--Y4--GHHn2rRM-UpAftEkbXi9ASA6UpEw-M3GwAq1RN+C7mNIZzDVAbVMohEHg0GfaMSW8TDaO0gzWmfvpV$3e4bfLGUwYz1S1dyG3FnridwwNaI70d1bj3jMsLFBQ13FMfotYlvrCB2LpjqUaTniqnqnhFv4b18B-E7xWsCHxExEj70HHTbGauEVh44F0JCPjCjbjBHvQihJN3oYwD1tY9EyO40otIyb4JCCP0WGSxUxFloSOSFVhdRP1Y1b8LjjtTq4n0Nxvjqd4UzkQojlD30Id4y0y3wlOCnTi7sb9ses5DnJ+HPN6Fg41dFLXWQopPDHgCOLOF80NWVa+o83jl8wOSfdA7ZiyriypdkTLHHm$hW3zP89IlMy3LKxul7Lip9p4NzMrPWfC4Tw9M6GF3+yGDepVSMGtJtAorPB4uqG$GYsSgCH$kiTwDxiA6OpBLlbxPybtGmmjvDFlvwDBBQ2Ba-HKQwBGnYfla+DtumI6xfPtT9Sdj$ojMChGU0GyHCjQaiGHqMaiHzBvwOX7BFnqMCXzuJzI79MCpmBwonotUB4BpniKs$LlU-VHFNw1jyVIRpCpMNlMNvbKAGFUEjv7dA70PfC5DF1PB$w6F0V1wRNvdNGlFrFfMkH0Rz4QXaTfkCNfumuuP8D-1B4Y-sjE7dY649rOGiaB2Qkdjr0PG+u1hCsYIpdju4A9MlPF3gGxkYd9C33UiGhsFwbf1+Bz1-WfnYj$RQbUiKoyPQJaCqyLLOMlauGx-Ufh2p32t3dyF0ayQzwvPQ3Gb$FBQazeM63goxWba$n+Csa3QinPV6fGrr1H3rpTPLNgILfrxMXNuqHm49iFMIMFMOyvENNiuhdwfXqjTeNzhQdm2tJMaoZ0GvsC4GG9TMw9MmvYiHRO7mns7+RX0CLeG8w+rwbp70qs09-s1+oL4jurt4ds2rPOF0YM0+BV1duhqIgsXfnlbv1Sukb9zfxICjpKlwUlYG4ZViXNUMNutHK6sZFmFf9LLqC6XQA7fxDv1DNQMABQldQrQL$us0r0tWf2lPxDagpdf$l7FMuMu7pzNI7klo$lNFhmGDYRwL1uzshKwmqKB41FmY7OMCER3XaqpA3wngnSxh34YrH0JHBshbgJfCyg6nfvbFCfKyYYzHvaREYpE6$+2b$23oDiEi1MgXaw+SrR44FKUXyJ7J7BnhgCpY-A4sMX1l$3rmJ6EWfOS8qPErgAUkIEbKm-gYynwZ3mt1G5a8T6yHHsyOY5rs$OPZheu$T1PSlZb1IACZzjRMyRpMrVnfYlb8pFIx1+RuJlQ3Vu-dBRnk0ONwBFa338N3R+PlX935jrq7qhkh3r2raouGsHu+qehaSSyvNDl8qUzpCVgiOBS3FUVvt1aPL+byNTa9nYqT6N+K$qIk8F$Y5aZbtiLD2pCw7BGzMMDx9GoUJ95vEnaWZAMaDzCH0gLgYbyDfXEe90Gt$ijVY5Xxn6N1uUlo9sH11QoxXuR9Q89uA5tF4zZAENDf6M-PKBrLQ4r7MCh$FRmsYsMzvNER1rxsW+MzC3A+AXwNK0qUZ2LH$5oBDszj$ESXuPOyMgVeT$osfsPhozfOCEgmrpM$heF4q8SuU44dFfFtTPQv1f4HH0Ron0oqp6puU6P3qC7fPWseteztnTDbevoyl9v$lkdqO$5G8-bTGeMz2gK2j+ZqtkrCuDpx$ZmRUgVWO3n+vSVIk1MDDJeJhQGkG7Y8XsO-u6$v7DKuPzMdlM00BA7saPoylR43378ZM1TvlwKGhu5ZlSACnJ9HFbLlRNZL4iMjMuw8PZYSuzKAwo-0TTKbwfqTbjCsKaLgphmqMD$tovUKh9rDbL0Ih3hPgZMSx3$rLA-dxFSrRt3wsDRwC8zisB3UKkHuNq8yWqR26pxCsX3V-vbzkFBkGbsnUN1RJgNp6PjXbyTg2fjbLkG3ix1Get$6urWxMX33-ajNblKBN3v7h3lxKozeVBUSmxNK-9I6CMHUAkv3wyRoAYbloHoSsN-fK2q6wlCm1kn-kA3nkQWi3MlSq0oAQ0f-43xR83kETM3RW$SAbuyy9qTV3uk-o6KHNS$Sb9V-wNoroHSKtx0mmMYkZYzSKP39kM1DTyNLY7XCCxGhbo6ou$YYSz0bv6SWbFkt6rxTvCz6pyhvMr4U0kL4TWoPTyMbHlTMxwlbvG0-pbsb69Lg1hTAQkyCvbxbSxwTLf6HlpAe5xiyT+gvl7oY9QNx98FNCkbIB7jOTyTL-IOCSNHzUxQo7ndCAGYdMGx6TKKtK94C98soESHYzHAmMQ6OTLs01AzVYv9oCkoZVL-GMZCELVxBiAQ0T-93S+hPLYlw-s61orTooWLpWbGRo9$Mbo8oKR060f$4TP6PUnJIQWSWnNUSeTJTB0IL9LM8Sdj0wMFjanMT6SgkD9f+9T126QyZvY9GK66A9o-x+67$Gz0b-hL3oYzS3BWWAAboeS10PN41kXbGYeQkqti0ATQWD-q5fl3zNvseh6xLT1WNKkNsS8xAL-4WTIw+Jb9PLSbELymYImDAsLUwRfQP3A0no9sjsRY+r6xkKm8s2FLSAYkqkF$9ooS2VYKS8b6q9o8-9l3jSQ0-9iw7TmTlHpeCnoV6xLwNyjSjRX$uYzo2KqoVF3Nih38xUsPSJbC7W-mYxqN+hkmmhWxF7o4NhIktu1W15-SX03gk5WC-+bvLjkDNCQ0z0MbSS3o0mbUlqMQy1gbihwfH07CU55bSuFltNHTqOozyNVv66l0bWD9ILe$MzzN3YTeslqoBqDPiMd9nmTSVwHGYWSQoFmjiiKlNVUWXWFmmShK7LJjJ$oM6aQL2bDSGC7xVswSkL$QGMXi3QmJYh9fyPaR+Axl3oOCtD600s3UbXbPj0SmQ-5qboOixM$xV3uhB4-V9LKN4CiiJMDwwkEiLTV-X5QEbli-8+N4o4vmbodyXzF40DzQTYxOx+8PSVxbMbCbJLvV-ndwWR$o63-fpNv-A9WxNYYlP9Sk0NMSiZNtkxjpCb$JUoBsS-r9r-bw-5bA7SbrLvvJwJ0Sn7l2JgPIGfiDx5YNSA-QymTuNTBDmtzyhS3h1PiCbWxCw2-kpjEvUL+ZRTbgxu7XfTTJksrpd93jlb48Ex3o0zFn-FdQD4-VJVnv59PLuSVTWb6oNoSb6Qzwo79$MBQV7AKDx-kTfASNbbbntTNsCLVDb7+0jpBbSMqlBnAkfqRbuSakCK7vgPvHFfKvI9sMN-f9RmCiSa3k1Z7+sVoAKF6CSM$3khhe4PpUFy0wDq3HrzxYQ0Xb$GQrrUyyMUHO36b-wYTvErHvJeJDA-WLl4WLMeRH71qLKl0zE0CMiwDVZw3$BMjHLPAfbb8FjPRuk-lLxokyBMCt-nWOotyve45zNCIJ9o6zkyR1FK-99E--qhHSZG7MTmMbVNkyJDflRpJqyJp+6SepNUwQP62xHk7Hy5YITf+-StsfUpz4aJ8NSTikzM0XVC-XS59+CFgP6VNb2SaRVloy7akzbhmewGsS4G74k-8hKSRFyFbWCzAsR7azLV1VoEPbWbXoAVzV-nk5CNMvb0QB3dV9b-3bRwyoSUpeMC31ATxLTljNQ3BNIoqblib8lzJbnrn5w7okFbHUMAzm1KzsVK09Ef3TRgQa$ntV912LHzAQGt6I3YnFsuSBbJFoBMN69MvF+bzsbh0V6DAqSgYAGLqVFbUo4-1QBGLgzK3AKJjtQq9zxCQ0rxuSfNRPrTl8CpqCPwKqTFBlWvELb1Xk$iDVNQ--nGYXkmGhhli3AsGSiNZLlF4IF6sobgQn-VENMHBIrT2HAGRGSM6B9j1JK5eqIJCvqsiT$mJgXGFWWgIj1soXJujBXF4Bl1Vkhtzrz5sPsToXFXFrrzw3abJgVQ41CIw$vl3TgLKTxtukQMPIAQw-R-B1RQWEIQys-ggZ2tg9PIqHB8iETBCrv6IqH6yreSlBf-aI0bx8jS0hlHC2vC1WQE5+S36bjsDbO8ezfA6J4bzq+3i25BuxB6dso0OKj3+5y2v6slSM0rI0hMY36mVhy-$8q-2v7izhbn5PgH13WJF1Vhb-U+o1zQ60ep1tbCU7SJC4t3ATWM8sT2N$YY8qQ7y$FVqFYMpbWQ6Q4pFSC-XQtQ-G3Az4rpSFZnl0s7R6+bgw1O1v1+sAZpXVLBY1HmWQ9lDSCg9U0x0bVNWfM0YDPsFSSFKArnsqkZsA0BTnFSLuCYHA5imjC3HU7B-wxwLGMnmHL0Ov6IGL7xyxN-gSrgzESwKfmJi2WFwt206F33BiTMDbz31iRvDfapby7whYbR9mN4-ZF+AYvSRd7KstCFC36hYTaTCLu-Dq38vTQeLrL3XW+ILmiKGFP-QEWBzG0LKd-3$vkssk30IRgK4Qvf-WskGdjK39iqOjGzMUJNAnrrST1E7xluQS5RnWjDYxt0zMub9IoHyqsuS2NEb9j6HBDoO6WIKCzQQDyXtPv8sggDQ2qWWt9MTR0hAyUzsGsM-n-BsP1CCvvxCYuHzgtoU+Dzn-yd8QPyMNS30zuSIbVoPLGM3Ot-0XJK3BvABuh3Q8WQj-3kM6v6IOv6dtmo0MXVI8N0nwXjBop8DvkaQiMQLtEv7W91DK99mHBoT6SQb9BYS0QDSb7rFIsBrsggyp39Im8uSTl$HSEzhyCBbisKXPDs24viR$SrMEi$ogRne1VTARxkSVP+BpJ6SEx$9lKNvD$mXv59VCQ1V3Vsu26EkJ9CMVZ1S6A6IM1i$h30FTw7BlxCGKHqjMF3zvxiAmRkuFFFuXB6FPHBHnD0FUE83JtU$qvfryIXFPUhwDopeC+bQNZsKQokQAi6Uf-nRdl6lTvY9snhD-MfXXS7Xk6rhhloDDjQeF-9XB4KD-tEtJYnUDbEsQL32SuFzUL15MEf+DnY3msjbt-bqojTI45IjdFKxd$4fvyPxi8eH8T0ZCtyvIY1eHwqDjTyCBI8dGHqgoDuXFWt0BYjxI3PqEo7z1dsoR7LHuXvVtndL8Q$Apf7-fuh1DtHkAKUrY0uMye8xdRDudBXzE8y9Z$+xC6R+tCB78Q6$FT2Ffm0BCzdeXZNC-C$CBW86oNO7pr2ua1aR8eAbnOFSkbAr8urWkTty-z0dGHY3Bbu-wxt3dkle8QgQBy-zO09Ud3$Yk$0guN0MU2CLqkfRluS13HsPyoQByYz3iVCXfAo2EDwXnlxl56++PIBNtKfdsB6RaNByKtlgaMeK4xUaSCMaBbMiAHmqkyyX6fPb-qRS3YrwXCB89Uv$7gyrbHgQKWtWDjQwrHt6m9U2Ah0-Xrlz2swF4bDgQYdDzY1hKEfrLnkuMUTgzRnaPmqQw6zEdvl-7h6uxw3zkf7l-7XbnKw6zwfEFY7B3gIBmtJbQlxdyYnMw+T+ARiEeAYQ9ahzLqjlYnAH2zyfU8vzDiTMj2JDGIUvbs6IAwgRmJUaB3DwFfQTGFzURqJNkIXwTFrXuEf3HQ1+bszwdXIv$Mi0bdglrPTjSxlY1oKQzaUHevvb$hhBUGBqzgm-GiX$ygUwQ3+qWDwFNdUgrhXlzn-$8rUUY3Ko76dieXJq7Otv9m-ZMQ4019LbRHJbERSEhI6Zu56vx$xDYKRVXylkSbRLkTCK0zrmU2zqiIXlNCoUX3ETb-oOv+wdVIIf-vYbMHxYAlzHZ3BYJ$2$Ssw7ub$wSGfXiC+a-E5BfiEqnwks-y9Yxu-lhMSk-bb3jZV$S0PMIRSb-YfsM5IfbyAEx8MARPT6g3USvSRLP$kLlGxabD$P9V9kFVkU1Ubb3pNVoCx3QoQMli7Qk8-+bnshTSt-iBUWyAA6zi5kVKM9lzAsn09JKVtnuVzj8bRbCL7-01wbbzpxt+bbMyTg5r$xMHSqyYx0-0-N6CfdGMxb6zzrHw3vaij$$+gOrJXQTk93+$DSr4o+0dwb3gr4JXq-J3E1-L+a4Hu3-bTbVoggiaXIgOASmUb5PTy7-bpCnEwe2P9AlNlwWI38$wbDpXuufa2v9bZKN7kFMJdQ3R7l-VE$i0wmXyYxD-bbtJY6Y6Kg-0$TM3DX-FetbB2Bw3xbFoPey8X2DKMJ3yb6SWbb0Ax0b9i06xDwg-ATPv3F-Yyv5$aYLvb9DArmaYXdkFVvbA6FeBkBMzrNUSUmeA7oQ+vkMPY6sgLu9HUfrMJCqu8$u-ATVukaG+$koS3NwNJnkMYEto0dXLkLCf343aeTP42h50JwP6yeZk7btIQxML3SbRb+bS-KpMTAUhFlHUChMmdi3-yuPYHD+Snl-o-R31bYRAS9COE5TG-0-3-ZbN-3C72bLZ7HVTP+URTn32b7HCl0UUfTMNd-yFbbCkM5ebU3lga0iDwhTVVHyo7dkjR$swZVZB3j4ijA3aR12D4QxMt6oSMNKo3i4Pbb3ZVowbb"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nreferrer-policy: same-origin\r\ncf-ray: 9b2c2420f8c4b51b-OSL\r\ncf-chl-out-s: EtLre8Tw7PmcGwATPyBcvQ==$c5ow6ulUlc/MZHpEESw/hw==\r\nset-cookie: cf_clearance=lU0Tf8x5PsLOQz2A1scNwxZQ0oQXpuDvhcwwIcG78vM-1766537810-1.2.1.1-bj1_nNvBntXTZFM2zKgao38rlOYle9VJuhYlU8n4BF8KR_UYUNiTJvOBbibz6zOq2dbXr8n4bDgri3qrvijUFZlXP81cWPpX7iQ.EjH_avxMWMBXwjab8mAXZp52lVZSdOZZO8BzBG93DxOyiYMdD2BMld5yzuIAldGXJEAba42LscL8pios6RcL6GmRzqXs_nHHXfeRqpePzghSuApt3.DflbyIbd1Q63oLkQfTc3o; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=yts.lt; Expires=Thu, 24 Dec 2026 00:56:50 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2B7wExmkwtZIHecU8temNjBVdgPxe119FIXNPYnd2J35ZeFdTix8jWxs99mgyg%2BTxxZ71FLgfVtS46KdkSBzdL%2BoYYSkTeU7L%2BU8zjO%2FYS6fWmCQVaEfmxw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=711\u0026min_rtt=540\u0026rtt_var=218\u0026sent=428\u0026recv=99\u0026lost=0\u0026retrans=0\u0026sent_bytes=433291\u0026recv_bytes=38862\u0026delivery_rate=23860653\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=45780\u0026ss_exit_bw=23860653\u0026ss_exit_reason=2\u0026cwnd=51786\u0026unsent_bytes=0\u0026cid=b179da6d5fb5e3dd\u0026ts=1085\u0026inflight_dur=173\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/users/thumb/61395161612078070.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/users/thumb/61395161612078070.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=lU0Tf8x5PsLOQz2A1scNwxZQ0oQXpuDvhcwwIcG78vM-1766537810-1.2.1.1-bj1_nNvBntXTZFM2zKgao38rlOYle9VJuhYlU8n4BF8KR_UYUNiTJvOBbibz6zOq2dbXr8n4bDgri3qrvijUFZlXP81cWPpX7iQ.EjH_avxMWMBXwjab8mAXZp52lVZSdOZZO8BzBG93DxOyiYMdD2BMld5yzuIAldGXJEAba42LscL8pios6RcL6GmRzqXs_nHHXfeRqpePzghSuApt3.DflbyIbd1Q63oLkQfTc3o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1760\r\nlast-modified: Sun, 31 Jan 2021 07:27:50 GMT\r\netag: \"60165bf6-6e0\"\r\nexpires: Fri, 23 Jan 2026 00:56:50 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VcICuayB2p9DOWCpTnhjyqjkLJFCZtoQd9UJPmScUaw8z7WpG4Hqg%2BK6UK4UDmYdJwodI4unwQ9dM29%2BYB1HNCwOEwgdo74%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9b2c2421b8cdb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1760,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 60x60, components 3","md5":"99b5c1fba39e44f1f946c06c8889d12a","sha1":"78bdf8e8d552f950a77f29aaaac4d02bc8e0b6fa","sha256":"5479527e22cba4b51a7d9619390878b8a5d2335202cfa453e7a37f198f1504a8","sha512":"c7028f67760975a5d68823acddf391b3dbaf2e9ba4f7d359ef5c9f2b5cc380dabeb40ca79dc32534c2c2903e23678333733ce43b4813889ef785102cfeefa2b5","ssdeep":"","tlshash":"af31f83a076117d0fc27a0b588573d5592dc87c33358d21aaaf94282d820fc1502979f","first_seen":"2025-12-24T00:57:19.744631Z","last_seen":"2025-12-24T00:57:19.744631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/users/thumb/14003541469095909.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/users/thumb/14003541469095909.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=lU0Tf8x5PsLOQz2A1scNwxZQ0oQXpuDvhcwwIcG78vM-1766537810-1.2.1.1-bj1_nNvBntXTZFM2zKgao38rlOYle9VJuhYlU8n4BF8KR_UYUNiTJvOBbibz6zOq2dbXr8n4bDgri3qrvijUFZlXP81cWPpX7iQ.EjH_avxMWMBXwjab8mAXZp52lVZSdOZZO8BzBG93DxOyiYMdD2BMld5yzuIAldGXJEAba42LscL8pios6RcL6GmRzqXs_nHHXfeRqpePzghSuApt3.DflbyIbd1Q63oLkQfTc3o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2993\r\nlast-modified: Thu, 21 Jul 2016 10:11:49 GMT\r\netag: \"57909fe5-bb1\"\r\nexpires: Fri, 23 Jan 2026 00:56:43 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iR7TF%2BhGU4w%2BCmE%2BDaCvzPXabuPFLx1tXSFMpu1PD6XXsoqBYVXXHOh6YCEkm1jKNI3T%2F5zLNsl6eHLIVlcacRN4YXxt7JU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9b2c2421b8c9b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2993,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 60x60, components 3","md5":"b2e33c17f4b4980a5e32b3a25714fd77","sha1":"a11aedcdf9957db037b021e432f2cd78def0dbae","sha256":"98c006bf8624230fa2ecd5b287fa2c2c7c96407bab6f0145933b3ab356004010","sha512":"ad40e95cbc7dc977e408743c8994a59c0b22bbd038729fc79b4134238721dc69b479be503407561f49499833fcbccf1deaf6400aedd594fd240c17ef58e13f04","ssdeep":"","tlshash":"d0515b066f2253c07e22b9a7c9b96f25c7e0db8279d187a313e80212d5a1fc9c045438","first_seen":"2025-12-24T00:57:19.746331Z","last_seen":"2025-12-24T00:57:19.746331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/users/thumb/64309691658944730.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/users/thumb/64309691658944730.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=lU0Tf8x5PsLOQz2A1scNwxZQ0oQXpuDvhcwwIcG78vM-1766537810-1.2.1.1-bj1_nNvBntXTZFM2zKgao38rlOYle9VJuhYlU8n4BF8KR_UYUNiTJvOBbibz6zOq2dbXr8n4bDgri3qrvijUFZlXP81cWPpX7iQ.EjH_avxMWMBXwjab8mAXZp52lVZSdOZZO8BzBG93DxOyiYMdD2BMld5yzuIAldGXJEAba42LscL8pios6RcL6GmRzqXs_nHHXfeRqpePzghSuApt3.DflbyIbd1Q63oLkQfTc3o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2438\r\nlast-modified: Wed, 27 Jul 2022 17:58:50 GMT\r\netag: \"62e17cda-986\"\r\nexpires: Fri, 23 Jan 2026 00:56:50 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UP5%2BljkNqoKabY7MxXwlG3wInm0omOYx56y0RowVOZcgHAIh%2BIPy8bj9rchmjcOMhRzgWiEO6T6x9qDfEx9%2BRH8lJ7UOEsg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9b2c2421b8cab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2438,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 60x60, components 3","md5":"b6fa56d2dc3f4b587a8934c5be34e891","sha1":"ffdfc76818ed72cf1b7de55a11a7d55166b217cc","sha256":"310378b790471510213f56c9ae78721b454ce73b9da92c5223e1026a4e9ac826","sha512":"04c7dcc7c1b1f6fed0dfb3c572fee7cdf1f0a5105a745e1ba8c53f9e9e011037247e4466e37f51b84b6e096876e86cfc4c0bee4bad6cca30a5084b2cdc9b3419","ssdeep":"","tlshash":"81410a1de6250becb826d6a34c381fe185f8cc362070439d0ef44735ca98ae864b8949","first_seen":"2025-12-24T00:57:19.747755Z","last_seen":"2025-12-24T00:57:19.747755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/1080p-quality.svg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/1080p-quality.svg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/assets/minified/2bacb5de663bc55f0cbed2b4a7d1504dc.css?2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1357\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Oct 2015 00:26:32 GMT\r\nvary: Accept-Encoding\r\netag: \"563167b8-b77\"\r\ncontent-encoding: gzip\r\nx-varnish: 3053538\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.6)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 7095\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbhmYXlRKThq5RjkS4J3NXrT5%2BpUyo19EVPkiYJf9rWiUA%2Batvc%2FCuy0ppv5Nyj8tSonPbt6r2xjfx85O1lBmtaOTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\ncf-ray: 9b2c241ad897b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2935,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"634e5a7bc26a159347b0467a54722675","sha1":"579c580fb208d3b38725dc4a14d1dc52dea203fc","sha256":"42e51d1c340334256885e2518dddfe787bc86afafa7f91bc9074f5a01ab41ff9","sha512":"a4075b8e99ff4bf2a85d931647a347fe4a2441a577b84cf7a7c623c1489797fa28c727e9d1e4ca1da29fd402b9e3a54725ce8d0d1023bc39cbd9051a95b78bb5","ssdeep":"","tlshash":"3351854c6335d8c571f5ba2c0e283ac33b1554bf79b041dcfb0b592a8d497da6a90fa8","first_seen":"2023-10-14T23:19:15Z","last_seen":"2026-04-04T21:56:29.511771Z","times_seen":83,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/2160p-quality.svg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/2160p-quality.svg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/assets/minified/2bacb5de663bc55f0cbed2b4a7d1504dc.css?2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/svg+xml\r\nexpect-ct: max-age=86400, enforce\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 16 Jun 2020 15:52:05 GMT\r\nvary: Accept-Encoding\r\netag: \"5ee8eaa5-e52\"\r\ncontent-encoding: gzip\r\nx-varnish: 3607229\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.6)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 4628\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDq9xLLC0vqgLA77C3Q%2B4D3B3ynFjoDp0fLpcd2zweN8UIBRRORWo6zMB8cyxi33vTNlZ%2FMZ%2B9ViD6HJci9R6sL9GQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2c241ad898b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3666,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e2ec4373866f4fd5de3a9b8d18d9963","sha1":"c7364d9f85879b12c0a2257c1c2f193f571630e5","sha256":"773ac1f6a22f5f51e9f601eb65c2eb7fd25a15a9363a02e239ab1f6956f8f78e","sha512":"abe3b207d746c783d76f52899f49fdceff300a2795e6b566e5270c46b0bc6b5210dc026c0f110388e7d51122873cdbcf8570a66e6019bbea03c6eaeb05b32851","ssdeep":"","tlshash":"99714290f1a94cc8617e898174ed7962a105206b86f54c17feec08788fc35e773aa3de","first_seen":"2023-12-30T23:52:13Z","last_seen":"2026-02-28T15:26:20.410284Z","times_seen":28,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/movies/until_dawn_2025/small-cover.jpg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/movies/until_dawn_2025/small-cover.jpg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-length: 0\r\nlocation: https://img.yts.lt/assets/images/movies/until_dawn_2025/small-cover.jpg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bAVgKUuMXs6VJFlriNrippNdeUT6RPjN4BTlIfV1YICWhahyIc81DJlJWDq2l0xQ9H0mVX%2FV0NQenIjvv%2FiHFP9PKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9b2c2419ccfc56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2476,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/movies/Avatar_2009/medium-screenshot3.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/movies/Avatar_2009/medium-screenshot3.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36490\r\nserver: cloudflare\r\nlast-modified: Thu, 12 May 2022 18:34:57 GMT\r\netag: \"627d5351-8e8a\"\r\nexpires: Fri, 23 Jan 2026 00:56:48 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Ut5mtvDgW3AG97n1WWymawmKUmTvHW0LOgVVg7h0YPXXfCGoMXTYxnjQHtt9ypaJj1LyNs9auO0f7uIasQ24mKWsvlZxHw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ed1356b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36490,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 350x197, components 3","md5":"d9b0a08371fb0bf753c1e61acd0a089d","sha1":"0ee24867452eb9c98321983618b102e60d5bf3a4","sha256":"ce04660d48d3d993b1f71e2dfe98975b4daca8638b7b273c84f566aa3b805bcf","sha512":"cbc3e52ccbcfe8d7501573f9382da030080e0582ec45ba05f3b48ffef69dd93344da8c00b69b73f0983f32dc4b19492de17082e93c19cb335e82d179d0d163c5","ssdeep":"768:rGGfUAgfQY3L0tLYLYwd1cD7Bjktt+zRFGC2i5zEB/+RMEbw/9Ax6rwpQmZ2:rGGfUAgfQY3LRfd6yt2GC2iBTRME0FgI","tlshash":"b5f2d1adb62510c2b4124575d0b98ef891f5c35ea1ee8d855082acf8c8f3a15e9717f2","first_seen":"2025-12-24T00:57:19.749912Z","last_seen":"2025-12-24T00:57:19.749912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: application/javascript\r\nexpires: Wed, 24 Dec 2025 01:44:48 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZ7vOaLWIuSgjMeM1qBmI0LfPUMR8KD839S5ZFFWE7daZh87%2FYUZAa3K0nk7CJkeID%2Bfs9kNhgcr%2FrxYai1D3%2FMhSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b2c2419ed0856b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-05T11:48:54.197191Z","times_seen":94693,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/movies/until_dawn_2025/small-cover.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/movies/until_dawn_2025/small-cover.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2476\r\nlast-modified: Sun, 07 Dec 2025 06:08:44 GMT\r\netag: \"693519ec-9ac\"\r\nexpires: Fri, 23 Jan 2026 00:56:47 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IvkN0FbXE1U97xlXS6LGxBnCU6axbxLsqvJFL4FdVu4XYio5W0CyXJ7FrYggJhDU3l3uJ%2BQQNSRVqCVFbhQ0NrlHw3ZWf%2Fs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9b2c241ab891b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2476,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 45x67, components 3","md5":"df0501e9cfc4804ce5bbe19a30d3da5f","sha1":"4dada74ef9a2253edeb342fd2553d3ff6d68bd52","sha256":"68f7e8da1f02d51f81ec3baebac92310e911d5b64c7699ec85916e31cf5a80bc","sha512":"8565b98caf7545a8399b84e8356249ae5afa7bbb241a7ff54eb601b3517ac6de274099da54db5ccd43f78a29efdb0f9f8b2435c5907cdef78cd2771bb2552c2c","ssdeep":"","tlshash":"2d510ae6879395c5bd72c7b9c6072c9191d891a119151ec6bad309d0c0718d0ec59dec","first_seen":"2025-12-07T09:33:03.753751Z","last_seen":"2025-12-29T10:14:51.88467Z","times_seen":24,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/play-trailer.svg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/play-trailer.svg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/assets/minified/2bacb5de663bc55f0cbed2b4a7d1504dc.css?2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/svg+xml\r\nexpect-ct: max-age=86400, enforce\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Oct 2015 00:26:35 GMT\r\nvary: Accept-Encoding\r\netag: \"563167bb-122a\"\r\ncontent-encoding: gzip\r\nx-varnish: 3083612\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/5.2)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 4767\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AuD1hvmlL1azSwtCgkA3sS6JqLBUIKIypW4B8KXRzssebwenwrB4HqnFIrnR92C13SED6UhZ81Y7vz7veW4e9az2SQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2c241ad899b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:5.2","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4650,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6a353847068da76562a91534d8f656cd","sha1":"eda8e959c42e2ad8fe89508f8dce56867cd2f0dc","sha256":"791b2284384c1d1671b43a9019ad495d2250784f359d86b237c88e30c48a4244","sha512":"0a4911333f9290b856633b8fbda99a5ae2a2ecfabb65cb8402a78c99a9061997df8e9bb23cbd1df37f50acf268cfb5073d743038a27f89aad859ad73dc432707","ssdeep":"96:7OKfensb/xm5h8y4I8UBkRh1iNMuvhlNI86y+B:SoAEN1kkR8Mmn6yA","tlshash":"5ea1b58c432de6d0b909028d1e6839e1067a5ade607111f4b7832c27e847ab5193cffe","first_seen":"2023-08-25T20:46:20Z","last_seen":"2026-04-04T21:56:29.530632Z","times_seen":78,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.8610489303140711:1766536135:2ZlsIvhBz3SDWjTcFzHE8oI7kVLt-XyCO81jOWRIJfY/9b2c24161bdb56b5","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.8610489303140711:1766536135:2ZlsIvhBz3SDWjTcFzHE8oI7kVLt-XyCO81jOWRIJfY/9b2c24161bdb56b5 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12158\r\nOrigin: https://yts.lt\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yts.lt/movies/avatar-2009\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12158,"data":"fiS-t93KMNCQ3Q8MQ3FDbPbCP-fMbf-3L3PySb6-kLCGbuF77ZgoVLCDS+1bC-7hobIK2-CPbyII$sbJaIBsbks96NybfTkmtbPh6M4ktmLQmmbPU80+-whpkbkFfEXMkpMSClmH24xbfbsvqNJ8b+ok3KJKoJGeZbkdb8FCi8N9mHf9mtobhNo0NuGsDb3BUX-NQuoCaSUdk2b3XH-b2bkvWyx3vPnLHYlXGIgS+iFzlFz8ZZb3hK-bpZqWngZF7v-bjATDsG-eMbbBUSIbAkb3$pl6dkbymbC$+CIkCa4FmZbbvKW3+H-N03qeum8bTbztiNRftA-bCM$3Lwy3L7sL7FLSbK9ybpTLwSbkJ3bSG5fMQSbUg9Q$9CUkgFwRFdo6WQZ9GvdLKsNDCLRyxZ9t4-bkxaokboAz7y5XobogR5X9MyR8SCRARUJWHZJlKsHh8+ZsG69bPzMYbTyyXpv5V0ixvF-bQvq65SvLgmrA1Pnh$gBqm7hNnFNd$ShJ7hbC0oWYKUkIkXJhKok6tKllZ0QZUSGCeAWLDC0ZHYO3ydWwiD9y4L7HCn8sDMg2RJ$9WBwn+J++lzGXwNEoWNf$GBoVdKlHHV2$WPB9mHGIo3PRwQH6akuRX69LvUTpyadFjMURbHBD3xKv+SVbqEnpoH1VOaXxKAI19iGCjerkrax0iYTRuQZ9bwbvq5SiE9lGn$qPZ1l2sGSsTYRLT05m1-LPDn6uUXoIbKUSH25gn$7+Q7q3lXRxTj2XanQ6CYNoM-bP1wDS8SQ3iqCklNXVRpgF3MYje1wlbn9PNiuWEYzDbak7n-D0L56769fx+VSi9Blb1olbSdCQDK+3N3m3Wv0T3WMzLwo+fotbMtxmMfSka9ffxwJKNo7s3foS6-CNL-9MSsRX4-V-8lbV09lMexx4nS3W7M1C930yylNkL3$38L-+t8B47AY87PZoL-z0wLMsS0bxOpQpYztx1blNwYBvVBdMAJzp0ilNS98MwL9f+d2v$DSuDB0N2WCrk5MehNidCr-zri2Y1Mwp-Ktypvxv0RBY7W$Nuy1kL24XXiuyVb0wD$$dhRQK79SltoabzC8tlu$Qtbzf0fF2oMq3PhylRZpdtAy0qZybSjwt1L3qbTYzxQS5MyPoV-Kk0uCpp-yNxaCMfSxLLm-mCLTQtxGmhRxkXkPowSlN0XkZSJmNOV8hNydJZrKfom3-lM4kKxLvbHXBrbHho2d-Mymf9k7dfmKoi2ovtE-h3wx4kpKxWRGS$VzjLH2ibL5p-INJI+lb8rSsbARpDwGI3Cz23-fQ0Jglbm3Ez0LxztMK-F0nlJEzhMW-n097EB1D9FtWytf+0x$-zVdwAsU2b90SLCESvfdiCzdb57utblp9Wwl39aGyS4SC0D1P-lpeG6-2NJQ-fIa9YV-G2kMxxWfEI+39qTG6WfTWa$jaJ+jspf+QNkkeipeb9F0TIxImrw9S-Qseu6gsOYqzse9nmN-suokJv8ujCEmJXy-PR7I4xZBOz8308sbLf5SYOe8lNusVpdZXe-COJ5+bSms35Sbs53-oVsCbpb3w2erjasenJCKM6i0hGKNuD3HMo3GGwpOt3oMKkLNI9bbia616rIN7uf-Kml1nD9SryGbbdr-L-lSlMjfSATfbehiMT+of-eMC3YfDQ4NUkLWCMMjTIzsq$YigwT$og+f-AbL4SknpbsK70kGkYYL-i-TkOCw+ShD36Zt3oat$kx4-+3vJg7hPiP8G6FtL9gNoJ9bohJKyi2zENJbYNrqijy29uSx-NpLkTNxKWGb$2-MkySxvib9BkOk8$i4o6SBBlUseYY1Mj0S0-jJkY-0sBY8-ARR0$MLKHtTC0EXnw63YjSgRR69VFlbZ+FQz4ACRp-ZHLnHCBDTtisknNNEAC80kF7L3gCOrmv1K7YRKWivQ6vCRm3nC$SNMyMFtbACHJQnrJDeY8bV0NSwhP4yutADzUBtT63Q6maYLQv723E6XzRyQ9NVfl-Z7btMAQ87HMSFj7qNo4xvnvJzobHJkfSHzgRhJmrMTwinZ-JnjVuU1rsBI8j4fNbKvjImo9yVkzuKggJECjvARoU6v3Wo1MgFwuFQKCCwm7YIKh36Lo+m6CByoBdsCEBVvyFnloOvqVmCzkvbbufhmyPhvyFrYwxOz3UWx3LGN0eIVYdd84iqR4sTY4Ah484+zUjtE3fhJHznSK7wJ7$sj1nqkA$CTNohilSakKPU+smjlwUEH3eJyvGA6qCmm+KQOvdbjiwg9zzOjFyOvsa3Bpbj2$3vOMerKLfSJO09dGZQwxkh-Dhy1rlqvLbrXMz0L9PhiN0vilf7JNoy-03Vsu$vpbMUzX3lCyKkikHWrtSskzwoZsjyNu0lDszVAq7QQI$oNxVNGMWPIDBJBaIko4BlK776x-lwog39bJi7orA-0kCQd-zKPXmgUAPQoezK6NpNFwa5QUd43gf7tHkM9OF4q6lKwxukJ3vUEArD-ONLLXPK28y11A9uCdh$GadANRh93FfoNh0H8MXUQFbMNFqah9VaZ-oeYzC3FVS70+1qW9Cug1KmNbAmPUYGChxE6p-OvXTSiWNUTuD4q7LOX7FLHOvvSbSu-xGyPYbkWSRKtCu8mkls2wyGUWMp1poVYzk6Hpb$St93Kno8HXN5RQfEAK0IVCbmD-bXR417F8dL98lKYIXhhQgWPkEux9gdJQx5DSNk$$ZIvri6wqeLnIXTAqnLGBXep-$Ss7LN7qW+bLBxQoj0koqC9Ey+KC8VgOIlx4DMk+QUe61kKs2WNRBXoW9KwW+J0qeCoQLQSpekoRdiGebi+Q-zmFo3GuzlxrSIIwg0AUFjW9ImzPpThyZk5SuUYvVsHxtJlyPtGGYkKpnV6nbQ78NvxXgRqPTLhgqXPg$Db0aEpD9lxH1-9CL0nwG2xpCZ3w3BnhW6039hQOYES5mPlS-+hd30Rspd7nQ1zFyQSPS9b16LponVxHahFSFQbOd0M63Lp-z5hsEzrzhvvG-fIOPzg8dCjIMJz4BNm5WUJ9-2EoIkpfAoZRZLF+IMkdWztHZA0S1LXXDDfGwyjp-Z7ZRUGFbLE61jmJArh6v7MBjkUXX8hD8s21bs6vN2HorB+vN4-908AdAVeV2yhUl$HY1nMMyOfAFSfz1thXkICKSmsLWOnsubiy1C7RvFqzKQxLRhGamwBlwhFInRqMwbZy5xJmlCb7XYN0yFUrPy8dVFyEnggOWJLeDSPrSbN2Rky87ATwE465DkDAEoA6Q0vNJAIPiA4Q5CZrX75JI2iDBENl1yGJbmbejPhJLfZudnruGLRE2S75PoLgRsinrqrNwCTYTpb$uz16qYiJxvJgJT4Cv6E2bR+udSa6GSDJQND3UmkpeBjUU$CjEbkzbyxEo6g+gZMrxHIafXiAhfzXI9tIiB1o6IhpnRHF3rxq7bI-uybNJ6E9xru81fSlbNRpnQCGIFuKUfWvHsXJjQHKT3jvSuW9HJXYMxmRMyb--9H5AInxX0h$CvL0xp3pbLhLLYV0zdhQ--XO1DRCH$LCoYnYUAoWbCJ0mg7qbUs0HWxbhqCpMaEBopRjtb7-0e1oWGMQMQE3n71NUS-RnRUN7yCSuMSP1GAP1ICkCFs6M+b-96iKxvjHUxuRbMbQs5RQVCnRhLhTk8kRx-0fjyVoksXszCHWjHlfbu7WMhJBXHl2JVUn17HYIx9qjRtMoo1AS5RFI6Eh-vnQJlW6io6etKb7oGX4iysr1TECT$THR0Sx1RT2uj7NsxW9EJx31v7W1Gjgk4h3Ex0OSF0kVIIkbs0o9sH1tA66km13jBk2XJVlnwJ7byIKMkbCluzmlUHiHf9gVgkqn+k-3NzR6st-H9uY6vkMEF0gou6p3yHAoKtgupMtXC0ZxH1GxPx8Mp1q16U2EXtNuIoPz-nWCWiFHJj0A--QMALymnH31ASsWyTrVCn$3sbwETVnXwC7LqEwotTGjtlfM1L-vTX5TvIKzFbajUomszE5h-WDxCLGhI3j3A7O7xVC1nA51NvZzQz-9qLGHJT13M9ZVpEHbOkJXBJYMgk5A5oCL3jJ1NxVCNCRCLx2L3jHUQJBRYIElHUazoWEl1z01tx84Ih1zux+b0mbkx-nUK1vR8YM4kMyCVIpVK1-W1k+396OSQ7$XMbQ7QtQsfL9YdJhlzbOMMm5HFX8W7IKCNCp3fzw7OS8uu-HAi0q90T9X-HuEKCuEwRCH9U-4QvA7995MOjo65iKSX-hRkb-1jCeo93NtVMIh54Y3$V1EyCPHOM$sYxvj1SQ7aCy3HLplCJGFY4WL6vCkOz7Ys4-L$CKCw3h44LKUMk8YuuvskLO36REhpbVhOM61NIOo5v-Chxz3rmf4tTGlWSJjk4MoWvGJ6izuKb7iNn$CSzoWtH6YuSA3YEr19RqFmTSYxY1M2MhA6Jrv-uKLH0zXA0utBXL1qj74fiyh8SpSZMChSu93f4MFOYTlo-C0FFSWfXHMTFYSOMkC2jATvCxVyVLLOv7VniblO4YWQCt-NJdkOFaEaEYB6R$kgIVSvvbEvFusB4-iI4l9kIHCVU9nEoF3wJlWUHQzlVv0FmrJWAtF-DBE-yXlXSUhrmGTN1X0$3RBw38bjbjvtSw4JxbiWJiM$tvS31orxlqJMA$kzrJCvIMV$R9kjIvIWviT-39-wMKsPBOiHUQCa1RBOX0SJVw3JYT40tEjPjwIWS4EBsIsHxpoQFKrb4N0Uto-nm8XElvLeJ7vWzY0tSmYGLbHxWFR8bGJn1vRxi$3aCIbl3viPHinPnai5C9k$FoEPAjBaAOtAHquNjIm4ufBPXF7gJZ1+yEth3yXi3AjotzBo-eE-YzSlbEk+0--4shRATF0nSGH+yD4EJ3uhWiW+CKMwLzMSV7TRsCXeBqn9WIC7sLHARe0AS13yMSybjI45uHI3MWmGuDxAYME7HOkl1iMhD0Juui4rsZb1C6tmRkMq0nUChn3BbQbQrmRfyiT3ofXAbKBbFfbr1zv6Btt9BIkOF17f4Ou7rx0$kSR63x47rvxCEGxwdnBAktJ$XNwUIXz0Ukn$VIAMC$X5BpvVy--UxCVe-Eij3oG9UWMghADh7dLR45JqV0SsW1MznwD-73I0zkGMrwvgofDiHSxpSeT3o-a+oh3go+CAJaHfuGEkbVjwmgDgEtD6VGGgkhYjwYtZ3C7$1CF844rvs9TLTUmNriD9T6yukFE6jEXRCHCI4YdeVCjOE9hwC9MWCJb2y1MYJuDZrl-lhaulWkvvsWsj4byGL1C7kwyBlSmQCW0ttEFXSGHCbbhbXkC8V0vX13vClFMW0G1GudIpbJyKzwo+IVvIyFXGULnwFy0$lCX$tqx5Hhk1bnuOn4TFlSwRjLG9FL4ornhdH6bArwMNXEMHj649sLylvpT9SCInymDDlwx7B3nqmRnZ1H3RnGaft0BwJim5kYtIJsYv1vEts8in45EArv3aoUijRWX+aAbg6g9Q4ovbUSWolw36UBspJH3rxA0zLeEmljlPFOiKxld2M10PFvux4iD84fXo6GvtHAUaaFE9hdXBiiuXB3vO7BdSmIM$sOBVDyfQos9mGkr6j-Yz3Yz5JgB9-nmutZ3hodm4UZbI7nApjWsV04uB0fx$i$VTFYxga9klCTn9Pjsw3slfBdHJ4w3ow8U0A8uUsS4nJoiOv7E-YbFWmq3qMZCsLUxvjdwiIT7-szM5Ps1DjOv--Y4--GHHn2rRM-UpAftEkbXi9ASA6UpEw-M3GwAq1RN+C7mNIZzDVAbVMohEHg0GfaMSW8TDaO0gzWmfvpV$3e4bfLGUwYz1S1dyG3FnridwwNaI70d1bj3jMsLFBQ13FMfotYlvrCB2LpjqUaTniqnqnhFv4b18B-E7xWsCHxExEj70HHTbGauEVh44F0JCPjCjbjBHvQihJN3oYwD1tY9EyO40otIyb4JCCP0WGSxUxFloSOSFVhdRP1Y1b8LjjtTq4n0Nxvjqd4UzkQojlD30Id4y0y3wlOCnTi7sb9ses5DnJ+HPN6Fg41dFLXWQopPDHgCOLOF80NWVa+o83jl8wOSfdA7ZiyriypdkTLHHm$hW3zP89IlMy3LKxul7Lip9p4NzMrPWfC4Tw9M6GF3+yGDepVSMGtJtAorPB4uqG$GYsSgCH$kiTwDxiA6OpBLlbxPybtGmmjvDFlvwDBBQ2Ba-HKQwBGnYfla+DtumI6xfPtT9Sdj$ojMChGU0GyHCjQaiGHqMaiHzBvwOX7BFnqMCXzuJzI79MCpmBwonotUB4BpniKs$LlU-VHFNw1jyVIRpCpMNlMNvbKAGFUEjv7dA70PfC5DF1PB$w6F0V1wRNvdNGlFrFfMkH0Rz4QXaTfkCNfumuuP8D-1B4Y-sjE7dY649rOGiaB2Qkdjr0PG+u1hCsYIpdju4A9MlPF3gGxkYd9C33UiGhsFwbf1+Bz1-WfnYj$RQbUiKoyPQJaCqyLLOMlauGx-Ufh2p32t3dyF0ayQzwvPQ3Gb$FBQazeM63goxWba$n+Csa3QinPV6fGrr1H3rpTPLNgILfrxMXNuqHm49iFMIMFMOyvENNiuhdwfXqjTeNzhQdm2tJMaoZ0GvsC4GG9TMw9MmvYiHRO7mns7+RX0CLeG8w+rwbp70qs09-s1+oL4jurt4ds2rPOF0YM0+BV1duhqIgsXfnlbv1Sukb9zfxICjpKlwUlYG4ZViXNUMNutHK6sZFmFf9LLqC6XQA7fxDv1DNQMABQldQrQL$us0r0tWf2lPxDagpdf$l7FMuMu7pzNI7klo$lNFhmGDYRwL1uzshKwmqKB41FmY7OMCER3XaqpA3wngnSxh34YrH0JHBshbgJfCyg6nfvbFCfKyYYzHvaREYpE6$+2b$23oDiEi1MgXaw+SrR44FKUXyJ7J7BnhgCpY-A4sMX1l$3rmJ6EWfOS8qPErgAUkIEbKm-gYynwZ3mt1G5a8T6yHHsyOY5rs$OPZheu$T1PSlZb1IACZzjRMyRpMrVnfYlb8pFIx1+RuJlQ3Vu-dBRnk0ONwBFa338N3R+PlX935jrq7qhkh3r2raouGsHu+qehaSSyvNDl8qUzpCVgiOBS3FUVvt1aPL+byNTa9nYqT6N+K$qIk8F$Y5aZbtiLD2pCw7BGzMMDx9GoUJ95vEnaWZAMaDzCH0gLgYbyDfXEe90Gt$ijVY5Xxn6N1uUlo9sH11QoxXuR9Q89uA5tF4zZAENDf6M-PKBrLQ4r7MCh$FRmsYsMzvNER1rxsW+MzC3A+AXwNK0qUZ2LH$5oBDszj$ESXuPOyMgVeT$osfsPhozfOCEgmrpM$heF4q8SuU44dFfFtTPQv1f4HH0Ron0oqp6puU6P3qC7fPWseteztnTDbevoyl9v$lkdqO$5G8-bTGeMz2gK2j+ZqtkrCuDpx$ZmRUgVWO3n+vSVIk1MDDJeJhQGkG7Y8XsO-u6$v7DKuPzMdlM00BA7saPoylR43378ZM1TvlwKGhu5ZlSACnJ9HFbLlRNZL4iMjMuw8PZYSuzKAwo-0TTKbwfqTbjCsKaLgphmqMD$tovUKh9rDbL0Ih3hPgZMSx3$rLA-dxFSrRt3wsDRwC8zisB3UKkHuNq8yWqR26pxCsX3V-vbzkFBkGbsnUN1RJgNp6PjXbyTg2fjbLkG3ix1Get$6urWxMX33-ajNblKBN3v7h3lxKozeVBUSmxNK-9I6CMHUAkv3wyRoAYbloHoSsN-fK2q6wlCm1kn-kA3nkQWi3MlSq0oAQ0f-43xR83kETM3RW$SAbuyy9qTV3uk-o6KHNS$Sb9V-wNoroHSKtx0mmMYkZYzSKP39kM1DTyNLY7XCCxGhbo6ou$YYSz0bv6SWbFkt6rxTvCz6pyhvMr4U0kL4TWoPTyMbHlTMxwlbvG0-pbsb69Lg1hTAQkyCvbxbSxwTLf6HlpAe5xiyT+gvl7oY9QNx98FNCkbIB7jOTyTL-IOCSNHzUxQo7ndCAGYdMGx6TKKtK94C98soESHYzHAmMQ6OTLs01AzVYv9oCkoZVL-GMZCELVxBiAQ0T-93S+hPLYlw-s61orTooWLpWbGRo9$Mbo8oKR060f$4TP6PUnJIQWSWnNUSeTJTB0IL9LM8Sdj0wMFjanMT6SgkD9f+9T126QyZvY9GK66A9o-x+67$Gz0b-hL3oYzS3BWWAAboeS10PN41kXbGYeQkqti0ATQWD-q5fl3zNvseh6xLT1WNKkNsS8xAL-4WTIw+Jb9PLSbELymYImDAsLUwRfQP3A0no9sjsRY+r6xkKm8s2FLSAYkqkF$9ooS2VYKS8b6q9o8-9l3jSQ0-9iw7TmTlHpeCnoV6xLwNyjSjRX$uYzo2KqoVF3Nih38xUsPSJbC7W-mYxqN+hkmmhWxF7o4NhIktu1W15-SX03gk5WC-+bvLjkDNCQ0z0MbSS3o0mbUlqMQy1gbihwfH07CU55bSuFltNHTqOozyNVv66l0bWD9ILe$MzzN3YTeslqoBqDPiMd9nmTSVwHGYWSQoFmjiiKlNVUWXWFmmShK7LJjJ$oM6aQL2bDSGC7xVswSkL$QGMXi3QmJYh9fyPaR+Axl3oOCtD600s3UbXbPj0SmQ-5qboOixM$xV3uhB4-V9LKN4CiiJMDwwkEiLTV-X5QEbli-8+N4o4vmbodyXzF40DzQTYxOx+8PSVxbMbCbJLvV-ndwWR$o63-fpNv-A9WxNYYlP9Sk0NMSiZNtkxjpCb$JUoBsS-r9r-bw-5bA7SbrLvvJwJ0Sn7l2JgPIGfiDx5YNSA-QymTuNTBDmtzyhS3h1PiCbWxCw2-kpjEvUL+ZRTbgxu7XfTTJksrpd93jlb48Ex3o0zFn-FdQD4-VJVnv59PLuSVTWb6oNoSb6Qzwo79$MBQV7AKDx-kTfASNbbbntTNsCLVDb7+0jpBbSMqlBnAkfqRbuSakCK7vgPvHFfKvI9sMN-f9RmCiSa3k1Z7+sVoAKF6CSM$3khhe4PpUFy0wDq3HrzxYQ0Xb$GQrrUyyMUHO36b-wYTvErHvJeJDA-WLl4WLMeRH71qLKl0zE0CMiwDVZw3$BMjHLPAfbb8FjPRuk-lLxokyBMCt-nWOotyve45zNCIJ9o6zkyR1FK-99E--qhHSZG7MTmMbVNkyJDflRpJqyJp+6SepNUwQP62xHk7Hy5YITf+-StsfUpz4aJ8NSTikzM0XVC-XS59+CFgP6VNb2SaRVloy7akzbhmewGsS4G74k-8hKSRFyFbWCzAsR7azLV1VoEPbWbXoAVzV-nk5CNMvb0QB3dV9b-3bRwyoSUpeMC31ATxLTljNQ3BNIoqblib8lzJbnrn5w7okFbHUMAzm1KzsVK09Ef3TRgQa$ntV912LHzAQGt6I3YnFsuSBbJFoBMN69MvF+bzsbh0V6DAqSgYAGLqVFbUo4-1QBGLgzK3AKJjtQq9zxCQ0rxuSfNRPrTl8CpqCPwKqTFBlWvELb1Xk$iDVNQ--nGYXkmGhhli3AsGSiNZLlF4IF6sobgQn-VENMHBIrT2HAGRGSM6B9j1JK5eqIJCvqsiT$mJgXGFWWgIj1soXJujBXF4Bl1Vkhtzrz5sPsToXFXFrrzw3abJgVQ41CIw$vl3TgLKTxtukQMPIAQw-R-B1RQWEIQys-ggZ2tg9PIqHB8iETBCrv6IqH6yreSlBf-aI0bx8jS0hlHC2vC1WQE5+S36bjsDbO8ezfA6J4bzq+3i25BuxB6dso0OKj3+5y2v6slSM0rI0hMY36mVhy-$8q-2v7izhbn5PgH13WJF1Vhb-U+o1zQ60ep1tbCU7SJC4t3ATWM8sT2N$YY8qQ7y$FVqFYMpbWQ6Q4pFSC-XQtQ-G3Az4rpSFZnl0s7R6+bgw1O1v1+sAZpXVLBY1HmWQ9lDSCg9U0x0bVNWfM0YDPsFSSFKArnsqkZsA0BTnFSLuCYHA5imjC3HU7B-wxwLGMnmHL0Ov6IGL7xyxN-gSrgzESwKfmJi2WFwt206F33BiTMDbz31iRvDfapby7whYbR9mN4-ZF+AYvSRd7KstCFC36hYTaTCLu-Dq38vTQeLrL3XW+ILmiKGFP-QEWBzG0LKd-3$vkssk30IRgK4Qvf-WskGdjK39iqOjGzMUJNAnrrST1E7xluQS5RnWjDYxt0zMub9IoHyqsuS2NEb9j6HBDoO6WIKCzQQDyXtPv8sggDQ2qWWt9MTR0hAyUzsGsM-n-BsP1CCvvxCYuHzgtoU+Dzn-yd8QPyMNS30zuSIbVoPLGM3Ot-0XJK3BvABuh3Q8WQj-3kM6v6IOv6dtmo0MXVI8N0nwXjBop8DvkaQiMQLtEv7W91DK99mHBoT6SQb9BYS0QDSb7rFIsBrsggyp39Im8uSTl$HSEzhyCBbisKXPDs24viR$SrMEi$ogRne1VTARxkSVP+BpJ6SEx$9lKNvD$mXv59VCQ1V3Vsu26EkJ9CMVZ1S6A6IM1i$h30FTw7BlxCGKHqjMF3zvxiAmRkuFFFuXB6FPHBHnD0FUE83JtU$qvfryIXFPUhwDopeC+bQNZsKQokQAi6Uf-nRdl6lTvY9snhD-MfXXS7Xk6rhhloDDjQeF-9XB4KD-tEtJYnUDbEsQL32SuFzUL15MEf+DnY3msjbt-bqojTI45IjdFKxd$4fvyPxi8eH8T0ZCtyvIY1eHwqDjTyCBI8dGHqgoDuXFWt0BYjxI3PqEo7z1dsoR7LHuXvVtndL8Q$Apf7-fuh1DtHkAKUrY0uMye8xdRDudBXzE8y9Z$+xC6R+tCB78Q6$FT2Ffm0BCzdeXZNC-C$CBW86oNO7pr2ua1aR8eAbnOFSkbAr8urWkTty-z0dGHY3Bbu-wxt3dkle8QgQBy-zO09Ud3$Yk$0guN0MU2CLqkfRluS13HsPyoQByYz3iVCXfAo2EDwXnlxl56++PIBNtKfdsB6RaNByKtlgaMeK4xUaSCMaBbMiAHmqkyyX6fPb-qRS3YrwXCB89Uv$7gyrbHgQKWtWDjQwrHt6m9U2Ah0-Xrlz2swF4bDgQYdDzY1hKEfrLnkuMUTgzRnaPmqQw6zEdvl-7h6uxw3zkf7l-7XbnKw6zwfEFY7B3gIBmtJbQlxdyYnMw+T+ARiEeAYQ9ahzLqjlYnAH2zyfU8vzDiTMj2JDGIUvbs6IAwgRmJUaB3DwFfQTGFzURqJNkIXwTFrXuEf3HQ1+bszwdXIv$Mi0bdglrPTjSxlY1oKQzaUHevvb$hhBUGBqzgm-GiX$ygUwQ3+qWDwFNdUgrhXlzn-$8rUUY3Ko76dieXJq7Otv9m-ZMQ4019LbRHJbERSEhI6Zu56vx$xDYKRVXylkSbRLkTCK0zrmU2zqiIXlNCoUX3ETb-oOv+wdVIIf-vYbMHxYAlzHZ3BYJ$2$Ssw7ub$wSGfXiC+a-E5BfiEqnwks-y9Yxu-lhMSk-bb3jZV$S0PMIRSb-YfsM5IfbyAEx8MARPT6g3USvSRLP$kLlGxabD$P9V9kFVkU1Ubb3pNVoCx3QoQMli7Qk8-+bnshTSt-iBUWyAA6zi5kVKM9lzAsn09JKVtnuVzj8bRbCL7-01wbbzpxt+bbMyTg5r$xMHSqyYx0-0-N6CfdGMxb6zzrHw3vaij$$+gOrJXQTk93+$DSr4o+0dwb3gr4JXq-J3E1-L+a4Hu3-bTbVoggiaXIgOASmUb5PTy7-bpCnEwe2P9AlNlwWI38$wbDpXuufa2v9bZKN7kFMJdQ3R7l-VE$i0wmXyYxD-bbtJY6Y6Kg-0$TM3DX-FetbB2Bw3xbFoPey8X2DKMJ3yb6SWbb0Ax0b9i06xDwg-ATPv3F-Yyv5$aYLvb9DArmaYXdkFVvbA6FeBkBMzrNUSUmeA7oQ+vkMPY6sgLu9HUfrMJCqu8$u-ATVukaG+$koS3NwNJnkMYEto0dXLkLCf343aeTP42h50JwP6yeZk7btIQxML3SbRb+b7bb$Mt6oSdNICfB3Q6Lj8bxzB4RftpkyWoSo7b8-R7SYA3OeOyXoMxkxp-lob6Ya-NpYqbNVpB7yN-a-kq3WMdBlw3lHxzJbb393Z+-BbWrX98tHNwCWqzSkj9$7P1HpW2U-eJ8$S-EnKauJGLbwCUk3lPSb8J4bbb2uTHbb"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nreferrer-policy: same-origin\r\ncf-ray: 9b2c241d68a9b51b-OSL\r\ncf-chl-out-s: 2cMTh62zCgtD/74/xr+/ZQ==$CQNQUOk0+Y+d7fEOB1Y4yg==\r\nset-cookie: cf_clearance=_IQgEvT0h7X_QbgwkUOUHO5YOgohEdjtbTjs422T3uw-1766537809-1.2.1.1-iu9xd6XXjPpalz0qCskPc7mAP2GYt5Dl04D0GNXZQqUww6AP9yX9c5vnSHl2hUJskBklWK1CputeD0JfmSjNo_9G3I.6Q0LXhsgRGJFPhA9v2m6K8OqGFwrWhXuCk4rJ4jLSCUaRK5Wy09T_ZrSpKT.tYJcOLXM0g6M8SgYItTVkbGfQXFwElfWFxEKL37R4ycvrwteZOQ5l8D0ax2XV4.ieGn4Dj8uCIQtB946CvnA; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=yts.lt; Expires=Thu, 24 Dec 2026 00:56:49 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PMiZhgPF5r1x7Z5AM7RUnAwzi540Ey49uVtegeApNBhvvdpI7zhHEyp51Vk242uavbtItEUlXGBFH7EZvkRbqCS%2FN%2FXdoTDjKnL5kUsSfB%2BlZQpIo1NaFA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1549\u0026min_rtt=573\u0026rtt_var=936\u0026sent=252\u0026recv=62\u0026lost=0\u0026retrans=0\u0026sent_bytes=250106\u0026recv_bytes=21798\u0026delivery_rate=23860653\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=45780\u0026unsent_bytes=0\u0026cid=b179da6d5fb5e3dd\u0026ts=518\u0026inflight_dur=114\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/users/thumb/60788851723496318.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/users/thumb/60788851723496318.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=lU0Tf8x5PsLOQz2A1scNwxZQ0oQXpuDvhcwwIcG78vM-1766537810-1.2.1.1-bj1_nNvBntXTZFM2zKgao38rlOYle9VJuhYlU8n4BF8KR_UYUNiTJvOBbibz6zOq2dbXr8n4bDgri3qrvijUFZlXP81cWPpX7iQ.EjH_avxMWMBXwjab8mAXZp52lVZSdOZZO8BzBG93DxOyiYMdD2BMld5yzuIAldGXJEAba42LscL8pios6RcL6GmRzqXs_nHHXfeRqpePzghSuApt3.DflbyIbd1Q63oLkQfTc3o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4790\r\nlast-modified: Mon, 12 Aug 2024 20:58:38 GMT\r\netag: \"66ba777e-12b6\"\r\nexpires: Fri, 23 Jan 2026 00:56:21 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jogu%2FR3BzplVkhwRhviJn8KYoF0SM3VSRptVrQH7q63STZUSmyVVTZk84HXLUEKO0wAC4pfcZlrNsp5fQVAOIUMLq%2BxYfZg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9b2c2421b8c7b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4790,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 60x60, components 3","md5":"650f2f00fed8398502f098aa6d006841","sha1":"581e3dcb7cdc674c4b2b1fa4cc41c39a61256a0d","sha256":"88e785a857cdd0f8533918cd8401bf4630b8d8c54b9d896d8e84a98ffa37f887","sha512":"6e10343c5f6a5aca35e38ecd749f1952efd5db98d44180ef409c5e9dfada89b14ca12b3e36758b0c3006daf4ab7ee8da50644a78d3c7bd44b87460b8e63a4fc3","ssdeep":"96:rjE7mbFRR2TJ1SAkwupQ2yE9RYFLmfaSEq5UFYUuLZsA:/dbYTPSA3upQi9RsmfaqKnKj","tlshash":"91a17e381ed10be9380a407df20e4dd9d1e4cc2224cc9a869feb5422ee65ec4fd7595c","first_seen":"2025-12-24T00:57:19.752779Z","last_seen":"2025-12-24T00:57:19.752779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/fonts/fonts.css","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/fonts/fonts.css HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 1158\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Sep 2023 17:40:55 GMT\r\nvary: Accept-Encoding\r\netag: \"64f373a7-28e4\"\r\ncontent-encoding: gzip\r\nx-varnish: 429655\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.6)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 960\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gso%2FUousaB4oJeLMGWzkryRRRYzs5Xr4ZBPgDrvdSmb9T%2B%2F8hc7OrFFSjlz9cPRXHNYHXBVTg%2FQF%2BvRm4E%2BE%2FZ2yjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ccf856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10468,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"16f046bf0f4dad79916f43b7ff9a1249","sha1":"d8bd40f6d6581bead93325936072535525e5a70b","sha256":"b2ef8bbd38be7ad7d410f3954727446174cc89337b3e6ed3824add66e37af165","sha512":"2346a5d8a1d4138a52ed956b503fea71dbbcc0c81dae5d6ddafa9d9c6a8ec46c90d13435b89e11eebe8d7f10f57ea48e33cfaa15169a1726a354204e1f9b3690","ssdeep":"192:/Dl+PDlbDlpDlGDleADlRDlF1DlAD0+PD0bD0pD0GD0eAD0RD0F1D0CDx7wAeewI:/Dl+PDlbDlpDlGDleADlRDlDDlAD0+Pu","tlshash":"e3225940585f7440fb475c8a67cf3a265a4ca1472402ea217ffa3aa8ffe3d2153a475d","first_seen":"2023-09-18T13:26:14Z","last_seen":"2026-03-12T19:13:09.758056Z","times_seen":149,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/logo-YTS-lt.svg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/logo-YTS-lt.svg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 08:07:56 GMT\r\nvary: Accept-Encoding\r\netag: \"691ecc5c-aaa\"\r\ncontent-encoding: gzip\r\nx-varnish: 4030589\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/5.2)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 2976\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Nx3vnIVWd%2BYA3qhwolMSTT%2Ba%2FnMDTxOWdrfDlWjeQtvDdtB0sjZ1Oiy2AjYglWEcbnp3gHIoE8R3hfFWioFx6GV0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ccfa56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:5.2","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2730,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e91334454034d6857890f1fd1a2b99d","sha1":"669f804f71ec9912bcba0239bc31b9b5609bd3bc","sha256":"f302c2ed97f00b049483bc7eac8a74f51377ed68fb130297a9075f4789c1e34f","sha512":"e157be9eaf5f83ce8e7a6ed42c37034e6d79cf9b5ea748934c2ddba0819b4b84f1ca48f30354a069d75e3516a09d449af5173a55f9c0f7719f5b515a8068e9cf","ssdeep":"","tlshash":"8751544dc3fc49a9f0868d0cf3bb67963b3c998507158a44f2b8989659b3db3114eec6","first_seen":"2025-11-21T03:33:30.866772Z","last_seen":"2026-03-01T20:48:51.027571Z","times_seen":46,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/actors/thumb/nm0002332.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/actors/thumb/nm0002332.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1781\r\nserver: cloudflare\r\nlast-modified: Thu, 24 Jul 2025 13:08:16 GMT\r\netag: \"68823040-6f5\"\r\nexpires: Fri, 23 Jan 2026 00:56:49 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BHjilXuU%2BUsRZnoU2OYdAmS9sciQh4JzsCbUwVsrFU7IH8RcbjX8m27UFh3pIW%2FJF9NuFxB7t5nZcHlH7JNijLx3ITs2Xy8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c241a2d2b56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1781,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80\", baseline, precision 8, 60x60, components 3","md5":"31f79f4e7526a0b97b1d5aabc82414ba","sha1":"6c05242a343093356d21d545e5f32d5a13c591ff","sha256":"5dc5b08255eb80ad52427d5779387e48cdec375b4ca198da17c43049c923ea80","sha512":"f282c8591dc75b6aaaaa7231b1450c1b075aa311bb5e481685dd038023e5045eddc9823eaaf8ca9d65a98fef2a3c4f5de39783a46a2578c88db17fd77ba284f3","ssdeep":"","tlshash":"0531087f73b6c2905833d97b989e10de739c119178a90f0d376902e5c5605fe9899a8c","first_seen":"2025-12-24T00:57:19.756449Z","last_seen":"2025-12-24T00:57:19.756449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\nreferrer-policy: same-origin\r\ncf-ray: 9b2c241bf8a3b51b-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sHaMyzPBh%2BRi4SGkcoWcY5er%2FG0%2BsOhPczlN4FVNZ%2BCSv07iVddb7u3CcidnhLxIJQfVT98Cnyow2kA1M53KkcdFUKD0Vu1%2BCiKHOCO%2BYMCZN5rmJWgL9A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nexpect-ct: max-age=86400, enforce\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1574\u0026min_rtt=573\u0026rtt_var=1364\u0026sent=230\u0026recv=48\u0026lost=0\u0026retrans=0\u0026sent_bytes=236356\u0026recv_bytes=8406\u0026delivery_rate=23860653\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=45780\u0026unsent_bytes=0\u0026cid=b179da6d5fb5e3dd\u0026ts=287\u0026inflight_dur=86\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/users/thumb/default_avatar.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/users/thumb/default_avatar.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=lU0Tf8x5PsLOQz2A1scNwxZQ0oQXpuDvhcwwIcG78vM-1766537810-1.2.1.1-bj1_nNvBntXTZFM2zKgao38rlOYle9VJuhYlU8n4BF8KR_UYUNiTJvOBbibz6zOq2dbXr8n4bDgri3qrvijUFZlXP81cWPpX7iQ.EjH_avxMWMBXwjab8mAXZp52lVZSdOZZO8BzBG93DxOyiYMdD2BMld5yzuIAldGXJEAba42LscL8pios6RcL6GmRzqXs_nHHXfeRqpePzghSuApt3.DflbyIbd1Q63oLkQfTc3o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1070\r\nlast-modified: Wed, 16 Mar 2016 16:31:41 GMT\r\netag: \"56e98a6d-991\"\r\nexpires: Sun, 04 Jan 2026 09:11:14 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-polished: ok\r\npriority: u=1,i=?0\r\nvary: accept, accept-encoding\r\nx-content-type-options: nosniff\r\nage: 1611935\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nexpect-ct: max-age=86400, enforce\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T3TPehoGc58p8icBQL2vouwQ%2FV45wtXJfLQYn6INeuV%2BZHDjH2jdmBzLsJKmnGKhnVGuB%2FBRsRIoQlRGc3nKnlDz8M9KTfs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2c2421a8c5b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de35b892c975c3d219296ff943e2db5c","sha1":"7c966632933df337b7328f1aed741df1301f8df8","sha256":"42e48f0fd9324e60ed4b90c654a88d8098b0ddc8bb7ac2a02fdc67e7bb4872c2","sha512":"171a3c53ca755edfb9fdbb89116e6ce842600af9b6dc2043e7b845272b216826d6b83df99f4cf79150481ff83225035540bfebbcbfaf483f9b4fd8591b8a885c","ssdeep":"","tlshash":"7d11e925884287bb333ddce3e3f387d9a481f8406c499cdd0c112ed0d1a41931f0b681","first_seen":"2025-12-03T18:54:25.578668Z","last_seen":"2026-02-28T15:26:20.405874Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/users/thumb/17496181573693059.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/users/thumb/17496181573693059.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=lU0Tf8x5PsLOQz2A1scNwxZQ0oQXpuDvhcwwIcG78vM-1766537810-1.2.1.1-bj1_nNvBntXTZFM2zKgao38rlOYle9VJuhYlU8n4BF8KR_UYUNiTJvOBbibz6zOq2dbXr8n4bDgri3qrvijUFZlXP81cWPpX7iQ.EjH_avxMWMBXwjab8mAXZp52lVZSdOZZO8BzBG93DxOyiYMdD2BMld5yzuIAldGXJEAba42LscL8pios6RcL6GmRzqXs_nHHXfeRqpePzghSuApt3.DflbyIbd1Q63oLkQfTc3o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2364\r\nlast-modified: Thu, 14 Nov 2019 00:57:39 GMT\r\netag: \"5dcca683-93c\"\r\nexpires: Fri, 23 Jan 2026 00:56:50 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ir82iz8ERSej4m%2FSOE6KyBzh6rooYkrZlKO9lOayYlfoPpE3U%2BQFjbriLjumZIsQpx%2BeDeemOsitwnAXTfJ53YVipado83I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9b2c2421b8cbb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 60x60, components 3","md5":"58369b5a713dde3cf60013417ccd8e3b","sha1":"c44a69193eba186d8bc10ba81a94b45938b7bcf2","sha256":"58937d6f56373fac7c5d0102917408e6b8fd2e3c1e8ec2a9054669810a833f80","sha512":"31be713a2202218902d42701cd3fd771978da4ded61caf79e264dd6612d6e94a7fbb40b20d53674cbc12a0450b4c9b80e58c7467c9284537561f7bb3d425a4cc","ssdeep":"","tlshash":"0e411955571003e8785301f63999fea3e5eced197042b70c3fe650b846544d6d15c6ec","first_seen":"2025-12-24T00:57:19.757789Z","last_seen":"2025-12-24T00:57:19.757789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/rt-upright.svg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/rt-upright.svg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Oct 2023 07:21:26 GMT\r\nvary: Accept-Encoding\r\netag: \"65322a76-17a3\"\r\ncontent-encoding: gzip\r\nx-varnish: 2306351\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/5.2)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 747\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0EbAJnFh3JzIZQESdNbdDH%2FtxEQXVSa9FAAps7hu5U8PBBRNDhEqXX0e3m6cUGmB0Uf%2F0XwTSysQsl6HNehH0PVUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ccff56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6051,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"553059e7de50671b19807fc89d815967","sha1":"d249964046c2e5755791b80e775611883b99567b","sha256":"bea979b7fd6310552b27f5c400ac1d1decc57a0bd61174ad96ccb90f5cf2d9f7","sha512":"2bbd1b83a74c448667b3533b3f82b4f4c0fc6a3fba177191d9f82b8389a80a6e2dd4b911e2469dd141b77b3045346dc865150d7964c8fded846539efa5507a7f","ssdeep":"96:1jRJuD11S56kz4ym5X+YbaqZfF9hzxmriWSpELxLuW77n/Uw0SWh+JTo6r:3k51U6dy0XRfzVm+l4h7MS0+JTl","tlshash":"ffc1f944a3d4c3b0a141d2fc929699692fa724f736a1422cf55efe176f335c101abc9b","first_seen":"2025-04-08T05:25:38.349023Z","last_seen":"2026-02-17T09:30:20.598804Z","times_seen":25,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/actors/thumb/nm0000116.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/actors/thumb/nm0000116.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1609\r\nserver: cloudflare\r\nlast-modified: Thu, 24 Jul 2025 12:44:19 GMT\r\netag: \"68822aa3-649\"\r\nexpires: Fri, 23 Jan 2026 00:56:48 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IPAks3DedhAUk3Ylay0%2FREJ4ROtnSwgfL7S0J1jPOEDi0YDtfSiS9zHO5lXtxTxaWrafZxrkXpQc5vYkw43uCvVZziYZ9VQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ed1556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1609,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80\", baseline, precision 8, 60x60, components 3","md5":"05a74ae6e5124aca35766514b8627808","sha1":"8f6b45791f89e406e6393626e4a9f0b5329cfb1f","sha256":"ad30eead20ff6f9f8777f73d6517b35a2e86d59cfae66ca96e91c70cb55eb690","sha512":"3a54aba72d40a5492eae12343847f851f083640dcb710b930a48d200708c6602b458ff7535d1a2cdc50bde1c5cae8f856381862e3e9772540704e46f0a985b8b","ssdeep":"","tlshash":"77310ad9362313728415c43f5c5d0216f28d3241fdae9fcd3ab20106a250b91d54d47c","first_seen":"2025-12-24T00:57:19.759099Z","last_seen":"2025-12-24T00:57:19.759099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js? HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\ncf-ray: 9b2c241c58a7b51b-OSL\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vWbKlabZYhYT0sufeUHR2mbeIq47%2FPbwH%2Bx09ASBs6ieI7abr1nTcUWJRfdsBVucirp3rWRQJ4VbliGFwYJPRPcJ7upZuY%2FCLacrytBHhwNzfaARKzWS2A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1611\u0026min_rtt=573\u0026rtt_var=1083\u0026sent=238\u0026recv=51\u0026lost=0\u0026retrans=0\u0026sent_bytes=244053\u0026recv_bytes=8787\u0026delivery_rate=23860653\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=45780\u0026unsent_bytes=0\u0026cid=b179da6d5fb5e3dd\u0026ts=341\u0026inflight_dur=112\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10422), with no line terminators","md5":"419f553b5aa1de5a08dd61f68c3b9615","sha1":"e10ce306851d24a815aefcc90ee8ab78febbf230","sha256":"c29bf52545ac0e8f20315d6f9ec6b0f78246a36ce8eebbc396f9e692681849c1","sha512":"5ae56180c421d1bf613e6796b10c897f7d3cd8cc826aeb83c9f07d5c6d6235162886a9f05bc710000256bc43da1e70ed71481fc0295ab04f93571d7d0e2b38fe","ssdeep":"192:XYp8R9knhCKL8D9yhN5JcNz4nK3sMTnzUS45mkbGyz9BGnCc6xEN8483a:XYp8z5/T4S45mkbGo9BG36xR483a","tlshash":"8d22e78ebe89b00433a62cfc48773ac3465ec9642804e61793d45ca4bf39b6b555fe4b","first_seen":"2025-12-24T00:57:19.759878Z","last_seen":"2025-12-24T01:27:02.294656Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/ajax/comments/342?offset=0","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /ajax/comments/342?offset=0 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb; cf_clearance=_IQgEvT0h7X_QbgwkUOUHO5YOgohEdjtbTjs422T3uw-1766537809-1.2.1.1-iu9xd6XXjPpalz0qCskPc7mAP2GYt5Dl04D0GNXZQqUww6AP9yX9c5vnSHl2hUJskBklWK1CputeD0JfmSjNo_9G3I.6Q0LXhsgRGJFPhA9v2m6K8OqGFwrWhXuCk4rJ4jLSCUaRK5Wy09T_ZrSpKT.tYJcOLXM0g6M8SgYItTVkbGfQXFwElfWFxEKL37R4ycvrwteZOQ5l8D0ax2XV4.ieGn4Dj8uCIQtB946CvnA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\nx-varnish: 14682104\r\nage: 0\r\nvia: 1.1 varnish (Varnish/6.5)\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreferrer-policy: same-origin\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYu9FXjlFO6jkdEq%2FZINY7W%2FkMcf5aFC35Zx2AZnEWusNwZnl5nTKPBuW%2BI3wozD4RDu4fsEKFx4w9uKs8SFSHHexw%3D%3D\"}]}\r\ncf-ray: 9b2c241ed8bab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.5","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17321,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17320), with no line terminators","md5":"854a2768cb7c6a385d0a9c6f2f14e22c","sha1":"cc7c9bd65213a64f9fae5348db59b56d0e03653a","sha256":"4269eb83b8297e200ca934a42680dc576710c6e58ca330d3ce12e066dfed6924","sha512":"458666c25e3d2156e1172c4e6c74cdd80e19e843c2c37a35a092f744bebc986aa5f5af8b0fd5622282d2480f84f7b96cb5274c592f76f21ad843a9a8725c2847","ssdeep":"384:t0xtjO1e7TfyN/KNs6hww/5O7eS44k7P+4X6lC7h9+:OwgO7ebC","tlshash":"0372cef7d9c7523b1263b9d0bf6d3f5ae2c6024ed983050c61ffc3950ae9d99a860528","first_seen":"2025-12-24T00:57:19.760761Z","last_seen":"2025-12-24T00:57:19.760761Z","times_seen":1,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/users/thumb/40409301628762654.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/users/thumb/40409301628762654.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=lU0Tf8x5PsLOQz2A1scNwxZQ0oQXpuDvhcwwIcG78vM-1766537810-1.2.1.1-bj1_nNvBntXTZFM2zKgao38rlOYle9VJuhYlU8n4BF8KR_UYUNiTJvOBbibz6zOq2dbXr8n4bDgri3qrvijUFZlXP81cWPpX7iQ.EjH_avxMWMBXwjab8mAXZp52lVZSdOZZO8BzBG93DxOyiYMdD2BMld5yzuIAldGXJEAba42LscL8pios6RcL6GmRzqXs_nHHXfeRqpePzghSuApt3.DflbyIbd1Q63oLkQfTc3o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3026\r\nlast-modified: Thu, 12 Aug 2021 10:04:14 GMT\r\netag: \"6114f21e-bd2\"\r\nexpires: Fri, 23 Jan 2026 00:56:50 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sauehyi%2FslYz2o9KqCyEUtJN3cvlFicJ2alwChI%2FHgPeDRGUXiDdNxYVPqiy%2F02BKMxPUfp%2FbHAQ%2FBLIbwfw2sP%2B54NLPn4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9b2c2421b8c6b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 60x60, components 3","md5":"6840b6be966393f52c3d0b2d701fcdd6","sha1":"3c1f4aa652661380e6b61af48e36c317ef764e0e","sha256":"64df6594e9d3e09917d996f90117b5ce43d8e524a371af8e69b805b0f7b53bc0","sha512":"29b75beffaada2028a72893b4c926da2213f6fc9e75a34d7189441e661cfadf001745c59ea980f44ca906a852ab9a2e5afc7329bc5a37e2b19056acc4c4853eb","ssdeep":"","tlshash":"09512aee478391d07e2159bead072de145f94d123984618202f959c1ca6f9a79c0fb3d","first_seen":"2025-12-24T00:57:19.761623Z","last_seen":"2025-12-24T00:57:19.761623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/users/thumb/12986341461802105.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/users/thumb/12986341461802105.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=lU0Tf8x5PsLOQz2A1scNwxZQ0oQXpuDvhcwwIcG78vM-1766537810-1.2.1.1-bj1_nNvBntXTZFM2zKgao38rlOYle9VJuhYlU8n4BF8KR_UYUNiTJvOBbibz6zOq2dbXr8n4bDgri3qrvijUFZlXP81cWPpX7iQ.EjH_avxMWMBXwjab8mAXZp52lVZSdOZZO8BzBG93DxOyiYMdD2BMld5yzuIAldGXJEAba42LscL8pios6RcL6GmRzqXs_nHHXfeRqpePzghSuApt3.DflbyIbd1Q63oLkQfTc3o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2015\r\nlast-modified: Thu, 28 Apr 2016 00:08:25 GMT\r\netag: \"57215479-7df\"\r\nexpires: Fri, 23 Jan 2026 00:56:50 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDXFU4TOAklRlk5%2BAV4JhWFrP%2BZ1ivOnsjGRXPD7W7atFFyN8gia35s%2FHAQzGDiDkIvPKHLYZEP1w0Ez24%2By7jmF9HjopP0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9b2c2421b8c8b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2015,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 60x60, components 3","md5":"d551e2dac39f30b2443053101b9dc58f","sha1":"fd835dc2ad24c1294108427b18cf0f8c955e2f8e","sha256":"c55b29ca11770c0bea38c17e3116151aec76c4b7827416dcd7344e0e3a92b501","sha512":"e1ac5baf1b6a6109054575f6d82222c2424ce5442fad7629806d9aa034ae54d9b4b750cf5410bbec8df8fe55f72525a71cb116d18217a2203eac26e8bc6f0253","ssdeep":"","tlshash":"3d414c3ecb820be0beafa4e1a1a05d97d5d83b8436e3966a2af801314854c84d648a1c","first_seen":"2025-12-24T00:57:19.762386Z","last_seen":"2025-12-24T00:57:19.762386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/users/thumb/63787561652990792.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/users/thumb/63787561652990792.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=lU0Tf8x5PsLOQz2A1scNwxZQ0oQXpuDvhcwwIcG78vM-1766537810-1.2.1.1-bj1_nNvBntXTZFM2zKgao38rlOYle9VJuhYlU8n4BF8KR_UYUNiTJvOBbibz6zOq2dbXr8n4bDgri3qrvijUFZlXP81cWPpX7iQ.EjH_avxMWMBXwjab8mAXZp52lVZSdOZZO8BzBG93DxOyiYMdD2BMld5yzuIAldGXJEAba42LscL8pios6RcL6GmRzqXs_nHHXfeRqpePzghSuApt3.DflbyIbd1Q63oLkQfTc3o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2525\r\nlast-modified: Thu, 19 May 2022 20:06:32 GMT\r\netag: \"6286a348-9dd\"\r\nexpires: Fri, 23 Jan 2026 00:56:50 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cY%2FebDCDl%2FWMRzJu7tcTu2FO3InzphVUGgfAEV9VeidJou5d90ezP34pbPNwqapB9Bry2RX06u6kqTet4OkkzLLSLX42zRc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9b2c2421b8ccb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2525,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 60x60, components 3","md5":"437bd2709077ee5f02779a713e197a88","sha1":"0894e5dee553be1096adb76a06eccce0f2aaa82f","sha256":"196f6532607e9723c0cf5192bda35c4abbac97ab9018eaabc2f865ca2c9795f4","sha512":"e315d73ab2294832da105206d311a9333d5ffd66060b91eebbdf6d7e7f9ef24355e063d2c9565e454448efc93549ace08712def6b0b0fb6cf58b463b4164c8a5","ssdeep":"","tlshash":"73512a7731a023c4b923467384c6eda1ebd405f13114a26b5bf522f1d3a06c4bbc812e","first_seen":"2025-12-24T00:57:19.763208Z","last_seen":"2025-12-24T00:57:19.763208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/icon-search.svg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/icon-search.svg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/assets/minified/2bacb5de663bc55f0cbed2b4a7d1504dc.css?2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/svg+xml\r\nexpect-ct: max-age=86400, enforce\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Oct 2015 00:26:34 GMT\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nx-varnish: 5194332\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/5.2)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"563167ba-37e\"\r\nreferrer-policy: same-origin\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ub7LIXs4YnoW5psrIk2xhu3v5ETCw2jwpI%2BofWRgpiY28Ug981zzq3HDlhXRZoVUYPPFAjYydL4oS3uX4SJ%2Bpd%2FCGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2c241ac892b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:5.2","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10c10634d2bb0228cd4d4e884613abb1","sha1":"bdb85d8d0c1d13f0170cffe097c34c0b2f88ba03","sha256":"1d3766a87712c953b7768cd1ffe2146e07e9bd555cd894c9eb0bdda6c0e6baf6","sha512":"b08b887ec1a35c57c4e51fb85e99ff00c439538ec22462fbb1c965df6c9049349410322b9fe7049b58b04e6da8bec03ceb8658608f3383f4a83d0f52877e9126","ssdeep":"","tlshash":"1a11044f47b5f4acf048831593b876d76b31204180f21558ca41397a64841f09a9ca3a","first_seen":"2023-05-21T19:21:49Z","last_seen":"2026-04-04T21:56:29.503621Z","times_seen":332,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/magnet.svg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/magnet.svg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/assets/minified/2bacb5de663bc55f0cbed2b4a7d1504dc.css?2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/svg+xml\r\nexpect-ct: max-age=86400, enforce\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Oct 2015 00:26:35 GMT\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nx-varnish: 1321817\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.5)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 4504\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"563167bb-3d6\"\r\nreferrer-policy: same-origin\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDak9n3fQH6reHvymVvtRDZnv9gY2%2BLjaqPxqNX96wpInH6jqZmlUt6beOW3h6xwP%2FgKMRogJ1qkbD3c%2B40TAzJ9rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2c241ad895b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.5","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"552614a7d6c75ee483127af16c07ebc0","sha1":"58148fe9d06f27fbc82e6675f05ebe2b85d73ea3","sha256":"af6135bd77515be4540390717935575c9afba38868a1d13d88f5474ff00f6ea9","sha512":"91fced5759757fe3032fa35f2118bd193d27976bcd4d0718ac8cd36c7f7935ec11695db048d32ec396f2f8052b43c5891f2406a35a50f6e297b3c31207c3b086","ssdeep":"","tlshash":"f91154ccd7ddd4f5748497392efda6c10331509996c296d88b123e79e4182ba35c8bac","first_seen":"2023-05-26T14:58:36Z","last_seen":"2026-04-04T21:56:29.533186Z","times_seen":87,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/fonts/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/fonts/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://yts.lt/assets/fonts/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18364\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 17 Feb 2022 10:11:15 GMT\r\netag: \"620e1f43-47bc\"\r\naccept-ranges: bytes\r\nx-varnish: 4494232\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.6)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 6562\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ku%2FNRr%2BYay74yJew7Dw5QJNPbWHSGh4xmxV2UequqpyN0uhzeWyFfUzA9TmXdbA3bMjPZxBmlnZLJgYcvaKZ8YvHpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\ncf-ray: 9b2c241ad89ab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":18364,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18364, version 1.0","md5":"d3ee727b257658b2ec8ef91639815c2c","sha1":"5a7721c4680c382bfd251f10123027e843079ebd","sha256":"ad69e547e43620390c7d7e192a4d00959602042fecd2be1e131a0a9b3398a36d","sha512":"3b5f194eb5f6069dff92e1556eaf3fba2cddb91efb377f88bd31f780e2d9dd0a7e462a747ccc684d364d44c3df93d6c1a65f1f2b61cdda68b6cbaead888b97a3","ssdeep":"384:mcHtuT+CDVCvs75TZjw6wHENGDinds2FW8pnARNovDCEm+T:HHtwDVJFw6wkQ0Ga1INIDCO","tlshash":"9f82d0c557e6b8abdad38e37af886d63801d40438270cdc69c34246e698fb467c69663","first_seen":"2023-04-08T10:57:03Z","last_seen":"2026-03-12T19:13:09.620967Z","times_seen":211,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb; cf_clearance=_IQgEvT0h7X_QbgwkUOUHO5YOgohEdjtbTjs422T3uw-1766537809-1.2.1.1-iu9xd6XXjPpalz0qCskPc7mAP2GYt5Dl04D0GNXZQqUww6AP9yX9c5vnSHl2hUJskBklWK1CputeD0JfmSjNo_9G3I.6Q0LXhsgRGJFPhA9v2m6K8OqGFwrWhXuCk4rJ4jLSCUaRK5Wy09T_ZrSpKT.tYJcOLXM0g6M8SgYItTVkbGfQXFwElfWFxEKL37R4ycvrwteZOQ5l8D0ax2XV4.ieGn4Dj8uCIQtB946CvnA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\nreferrer-policy: same-origin\r\ncf-ray: 9b2c241e98b1b51b-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=i3g9faUHdIcJzIBhJAr26tC6iiZKnBU66zM3xQk230MlgS2kFyZK5pjsTg%2FYzH7CNXARYfdJZzejtBTA42pF0qUnslT2DrEvvq3lK30Kh%2BYvwETbwz%2FHCw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nexpect-ct: max-age=86400, enforce\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1592\u0026min_rtt=573\u0026rtt_var=787\u0026sent=255\u0026recv=65\u0026lost=0\u0026retrans=0\u0026sent_bytes=251257\u0026recv_bytes=22932\u0026delivery_rate=23860653\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=45780\u0026unsent_bytes=0\u0026cid=b179da6d5fb5e3dd\u0026ts=697\u0026inflight_dur=136\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10380,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=5655310\u0026cbur=0.23264330507628128\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=Avatar%20(2009)%20YIFY%20-%20Download%20Movie%20TORRENT%20-%20YTS\u0026cbpage=https%3A%2F%2Fyts.lt%2Fmovies%2Favatar-2009\u0026cbref=\u0026cbdescription=When%20his%20brother%20is%20killed%20in%20a%20robbery%2C%20paraplegic%20Marine%20Jake%20Sully%20decides%20to%20take%20his%20place%20in%20a%20mission%20on%20the%20distant%20world%20of%20Pandora.%20There%20he\u0026cbkeywords=yts%2C%20yify%2C%20yts%20yify%2C%20yify%20movies%2C%20yts%20movies%2C%20yts%20torrents%2C%20yify%20torrents%2C%20yts.lt%2C%20yts.ag%2C%20yts.am%2C%20Avatar%20(2009)\u0026cbcdn=bklihaatruags.website\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1766537809737\u0026srs=ecbfc2af5cd01c41735814a54d115795\u0026atv=74.0\u0026btp=0.01\u0026abtg=1\u0026adbv=3-cdn-js","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 23:08:46 GMT","end":"Sat, 07 Mar 2026 00:07:30 GMT"},"fingerprint":{"sha1":"D5:B9:71:11:A1:C5:BD:EA:60:68:49:87:01:4B:0B:CB:81:8B:FA:6C","sha256":"66:19:A7:E1:FD:B7:41:C7:AE:CB:33:20:81:70:04:52:48:C8:D0:0E:66:96:B3:F7:FE:B5:FC:10:FE:48:0A:44"}}},"request":{"raw":"GET /script/suurl5.php?r=5655310\u0026cbur=0.23264330507628128\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=Avatar%20(2009)%20YIFY%20-%20Download%20Movie%20TORRENT%20-%20YTS\u0026cbpage=https%3A%2F%2Fyts.lt%2Fmovies%2Favatar-2009\u0026cbref=\u0026cbdescription=When%20his%20brother%20is%20killed%20in%20a%20robbery%2C%20paraplegic%20Marine%20Jake%20Sully%20decides%20to%20take%20his%20place%20in%20a%20mission%20on%20the%20distant%20world%20of%20Pandora.%20There%20he\u0026cbkeywords=yts%2C%20yify%2C%20yts%20yify%2C%20yify%20movies%2C%20yts%20movies%2C%20yts%20torrents%2C%20yify%20torrents%2C%20yts.lt%2C%20yts.ag%2C%20yts.am%2C%20Avatar%20(2009)\u0026cbcdn=bklihaatruags.website\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1766537809737\u0026srs=ecbfc2af5cd01c41735814a54d115795\u0026atv=74.0\u0026btp=0.01\u0026abtg=1\u0026adbv=3-cdn-js HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yts.lt\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvCxCgWdH2g%2BWxrsGcBqa8OLFHKcLPttRJ9Rf8X%2FJxZ%2B%2BEnHsyQkFY%2B4r%2Byc%2FSKTd%2B3N2q1%2F8FtiYxbAbFeGN7ERsqOATDzFI%2FoyyrKQM%2BKr\"}]}\r\ncf-ray: 9b2c2421cb0956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d06e1c6e130a735cc6598fb54bce619c","sha1":"66375dffb8c386be8cd5e0f197f40439c0e31621","sha256":"c7de9bcce31553409ff6b5752a7144e909bcb99f51faa21c84d603f3746ab306","sha512":"bdc4ca1efb8bdff01ad7617a60f11df546eb4f2ffa5865b23efa0a37c1b33eeb09e48bc90be65d6474dee4a649d82686325a0c00510a275264fd318e4e87f539","ssdeep":"","tlshash":"3b11b7b10fe84831a0af30eead76a23dbf1eccc50728975790c460a981e05d45bed12a","first_seen":"2025-12-24T00:57:19.766039Z","last_seen":"2025-12-24T00:57:19.766039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":225,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/rt-certified-fresh.svg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/rt-certified-fresh.svg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Oct 2023 07:21:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65322a77-eef4\"\r\ncontent-encoding: gzip\r\nx-varnish: 1973044\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/5.2)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vl%2B04bhnMSBYgx7R52DzUD88t3iGLqzqBwcGU0u0y5Zc8fvwHU0htNLCtCrkxu3YRxg8%2BMGCLYwcP7PeasE%2B%2Bz0NSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ccfe56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:5.2","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61172,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9f7a5b4130914b6a64b62a28cd9d5c6c","sha1":"dfa82f29b48c576082844d92f1a375c85184f2bf","sha256":"6fd565b33089e6b65fe6cbbdeb61db19a5056b51a1e8007c05c3774ac807ce9f","sha512":"bcfa46d751d5a2fc46c249df3e00f5c7ed45d61e81348f864719c3a9b4763b3099ed4656ced3128452d470fd2f0a28d7d407d5b1b587441de38b3f349507ee6a","ssdeep":"1536:PxpYraYNa7KdncS4WF6vi0Wm0lWl45gxZ2ldl74c/YNiSOOEb31ROWKQOE:o","tlshash":"2153f7d0637785fa6b1167be540524317a2324feba51135cfa8e9a1527278cc0faf8cb","first_seen":"2023-10-24T17:37:31Z","last_seen":"2026-02-28T15:26:20.453338Z","times_seen":34,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/movies/Avatar_2009/background.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/movies/Avatar_2009/background.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51821\r\nlast-modified: Thu, 12 May 2022 18:34:57 GMT\r\netag: \"627d5351-ca6d\"\r\nexpires: Fri, 23 Jan 2026 00:56:49 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3rep91VT%2B0MM3d9WI8aNMQNegPMbfOOPe5Ax7NvNE4jOXnqI0mZJa7yHUmx%2B0WC485WSuXHONpHHmOeKDotccUwp0M4nb2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9b2c241ac894b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51821,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 896x504, components 3","md5":"8ed04abe7d107f71d402f104c25c67c7","sha1":"2fc5432b2e77b8230b5c9c74cac09112de1032d8","sha256":"ac0c94d4f3cf1ad154c5d1355e774faf1a2c3ac338f03d24cdb61abbfcabeffe","sha512":"a2b556d02a902a7f4b3cbad7dcdaa976c8a09f54b855f9a6cc8dc16e72185ea641047be6d4b66d03a18867dd504dda8ec84f55c1f932e58e3dd1a3527463df6f","ssdeep":"768:nlW9Pz70Dj00N37gT0pfZ3HtJxigzAjpVjuMuEgLwWlQ0aE43pCwjEIxFE0BxnSK:n6PYj7vfZ3fQQPxfFCpCyTZ21vZChAu","tlshash":"9a33020a85d5fb55b838f6edf14aff8493dac188142450c3a6d74e9e70bf81678ec262","first_seen":"2025-12-24T00:57:19.767465Z","last_seen":"2025-12-24T00:57:19.767465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/movies/The_Avengers_2012/medium-cover.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/movies/The_Avengers_2012/medium-cover.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34874\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Oct 2015 12:09:43 GMT\r\netag: \"56335e07-883a\"\r\nexpires: Fri, 23 Jan 2026 00:56:42 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7omG%2FXBCkJ36gfdQUf7tQ0yL8ppk%2F%2BD1BImG9knNMyeXS9negCB8Tq5MvYvw1ocaOCsihdFeaimh1u%2FOhTUTmlGFhL5gIs4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ed0d56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34874,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 230x345, components 3","md5":"f887201dfbeca046f93e0b2a618a9bbe","sha1":"1973f4ae5d272a3b481c9a4b96fcc468a6a618d0","sha256":"1643b2c2dc1939d0ea7a723bcc1cc8fc0c0a3e9888bd8773dd431dc0674695f2","sha512":"b4d210fe946e43c659e3e0cc52f34272e5e3735ab1c7e98782439b4534a494d1a8c46ef222a74b3bdf85e67c48b2ca1419f9616564950c7b93147b28747a45ad","ssdeep":"768:qrgGm3dlVKNdxy+OsBIq8dwF2d+FKOoTg+6KUlxZsG7OGBorLM:qdsl8NdxyQHwhAwOm96KUlxf7HoE","tlshash":"eef2f1fff61ed1f93d4c78c328085e41aad56d3782596e0a84ceeb98a834648d95ae04","first_seen":"2025-12-24T00:57:19.768316Z","last_seen":"2025-12-24T00:57:19.768316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/movies/Avatar_2009/medium-screenshot1.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/movies/Avatar_2009/medium-screenshot1.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41276\r\nserver: cloudflare\r\nlast-modified: Thu, 12 May 2022 18:34:57 GMT\r\netag: \"627d5351-a13c\"\r\nexpires: Fri, 23 Jan 2026 00:56:48 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2BTNDPH2dD9X3JjIGiM3zrtfscZGqZFVwBsjQIuxU93jZsBfbzDD5UFzxqod83go2B9k2%2FQOGO1xu3RtHDtsifcETpJbUwU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ed1156b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41276,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 350x197, components 3","md5":"716a70243378e5ea67a51fd17b8e014f","sha1":"213deec0f5bf6facf33e4131dd2bc7cb3bcd0416","sha256":"d790c786c8997c6b9742842a817ac6caaf5d0005ee0da5d3cff9c14660d26560","sha512":"3db56a4d7924abd4c940cd0f061c2e07bd3eecf8907a79465f29837cb067150afaf167f0d75b1cb334a31ab7e10d899486cad7ece2f1afb154d60935c6670ef6","ssdeep":"768:r42Us1n6WuiyXuguyBTqNZ+mACUha0m9BW36mcOVwqNh5bblBA5Q2o2hkqGNc:r4oDhyX2UTqymVF83fcYwi5bbL+Q2o2L","tlshash":"f903f1610b8195e8a72dd2f853b97e5ab1c31412f044e04b2bd666ae5fb00befe8058d","first_seen":"2025-12-24T00:57:19.769159Z","last_seen":"2025-12-24T00:57:19.769159Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/actors/thumb/nm0000244.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/actors/thumb/nm0000244.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1736\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2025 22:07:48 GMT\r\netag: \"6887f4b4-6c8\"\r\nexpires: Fri, 23 Jan 2026 00:56:42 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMpmsV2ZU91cmZtQjNniam4WK3qwZxBwebjCyf6yMkUlPgG%2Fkw3khPU%2FAChJ7KCgnpSzBEx3qiNShBINdPipFEv55%2BMVnoQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c241a1d2356b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1736,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80\", baseline, precision 8, 60x60, components 3","md5":"052277058085d56a002d90d649dd1170","sha1":"f8cd0b4c1191959f83e241f6e2c5215dfb2c74b2","sha256":"a90f6efb287f945c1e1a232fc86f5915b5a59adc8467ae136a5c31348bbcdf6a","sha512":"58c126adbdc93519270fbbb025f7612cc7d99ef4c2c16bd9e256ff88fde4ace5223c647df0aed03d15f79adc3580bbac6a9f5baae2fdeff93425da123b4c4e2c","ssdeep":"","tlshash":"5a31d63e710203649c17d076d8f542d3b2af69c625b44b0e8622c7148e549fa90cdacc","first_seen":"2025-12-24T00:57:19.770081Z","last_seen":"2025-12-24T00:57:19.770081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/favicon-16x16.png","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/favicon-16x16.png HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 492\r\nreferrer-policy: same-origin\r\nlast-modified: Tue, 27 Oct 2015 00:51:44 GMT\r\netag: \"562ecaa0-26b\"\r\naccept-ranges: bytes\r\nx-varnish: 6409270\r\nvary: accept, accept-encoding\r\nvia: 1.1 varnish (Varnish/5.2)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-polished: ok\r\ncf-bgj: imgq:100,h2pri\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\nage: 2972\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b6jSWsI5GRkbwLq1sUADcYdnGni38v7XTjX48u0m7HXo9bWDrm6EdQ7ttS%2Buy1mKGu7TVCqjV7v%2B2gqf8mvD8riEPQ%3D%3D\"}]}\r\ncf-ray: 9b2c241c08a5b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:5.2","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":492,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"050264802504294ff2e2ca5dcd57505e","sha1":"f11c9a8fabadedf2eebfa7bd3463a21f2433bf4b","sha256":"391387cd6c9a951ab91cbc4c2905920bde47a67e78ba19502e9689f0ff2ed96a","sha512":"2d868e74873757990dafa6a281d519a1dadad94484f96148673833a73e65e372ac83ce699eccd265b82bcdc1bcef68e0d71513d0797c4bc875e8b4bcd247777b","ssdeep":"","tlshash":"b2f00eb08044c7ea28cd6cc8047c08459bbc4acceba68b4ecb0923a21425aa4e99eb50","first_seen":"2023-12-13T16:12:14Z","last_seen":"2026-03-19T05:02:23.57819Z","times_seen":46,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/movies/avatar-2009","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /movies/avatar-2009 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb; cf_clearance=_IQgEvT0h7X_QbgwkUOUHO5YOgohEdjtbTjs422T3uw-1766537809-1.2.1.1-iu9xd6XXjPpalz0qCskPc7mAP2GYt5Dl04D0GNXZQqUww6AP9yX9c5vnSHl2hUJskBklWK1CputeD0JfmSjNo_9G3I.6Q0LXhsgRGJFPhA9v2m6K8OqGFwrWhXuCk4rJ4jLSCUaRK5Wy09T_ZrSpKT.tYJcOLXM0g6M8SgYItTVkbGfQXFwElfWFxEKL37R4ycvrwteZOQ5l8D0ax2XV4.ieGn4Dj8uCIQtB946CvnA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\nx-varnish: 2363957\r\nage: 0\r\nvia: 1.1 varnish (Varnish/6.5)\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreferrer-policy: same-origin\r\nexpect-ct: max-age=86400, enforce\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LobGLCthxMkEIqqI7IFSxIFrD0N5RMC4YDnxxg1kO6VDRUqvT86dWKCxKZ6ku%2FQWA1sw0Be74nNS29oRfzikrMLNqw%3D%3D\"}]}\r\ncf-ray: 9b2c241e98b2b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":690062,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (744)","md5":"b602440c44996747432a5312b9321f35","sha1":"487aab46ba1135af59fb8ee12d2422f22c3ebafa","sha256":"bc579a1fd040bf3c6992d9f05869e89d97021849efc88fdd38e5adfad9ea88e8","sha512":"29f098d0520670e65aec9d5f1d4eeadd628dc43ba8ee882c1aa92c8c87392cbfaee258e6be72250980750e4857edc6aacd4f687f0b1dccc3a3bb7d0b4b63f96e","ssdeep":"12288:qcruPDuVHBdqeHntKnhYZiahM40lN0R5Jr9OnaYuqFFObnpe9AUTpKWZVfmueN5p:BHtbhM40/0RRIZDFObnpe9AUTpKWZVPs","tlshash":"e7e4611837844587371b4efb732ba5d1e40b399ab609488bf60c7c54a3965a3fbe9331","first_seen":"2025-12-24T00:57:19.771485Z","last_seen":"2025-12-24T00:57:19.771485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/logo-imdb.svg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/logo-imdb.svg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 28 Oct 2015 23:54:15 GMT\r\nvary: Accept-Encoding\r\netag: \"56316027-710\"\r\ncontent-encoding: gzip\r\nx-varnish: 2868302\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/5.2)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 608\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PX0cfIovN9tGvRhqTcD4BdaCoXJ8Pf5rrsZlNDjsoAdO2VEjMfzD3kzUPegaT1SKvZ1M98M4X3hFKmqCAO89SUBMyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419cd0056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b2f5fc8691f33a804fe6db49474a12e","sha1":"1173e43d75348cf3a675aadfa9ea488838fcb19e","sha256":"16d7e5b33ece4e844479e3b873bbb8842f73bd5083287559f7cc5895f4c973ec","sha512":"fc0d6e0a18e6e0ebc127fe4db8caeaab1adefdc02942cc5f90a5f771db510b2a2b27501add6eba042e307759e89cb2fcaef71e74bb2556de4057e22e06a42329","ssdeep":"","tlshash":"7d31a55fc31cda9df484127cec6463c7236160d6a860ec84f2493f38551bdbaaa1eb78","first_seen":"2023-05-29T09:04:14Z","last_seen":"2026-04-04T21:56:29.526436Z","times_seen":91,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/movies/The_Hobbit_An_Unexpected_Journey_2012/medium-cover.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/movies/The_Hobbit_An_Unexpected_Journey_2012/medium-cover.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21256\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Oct 2015 16:09:44 GMT\r\netag: \"56339648-5308\"\r\nexpires: Fri, 23 Jan 2026 00:56:48 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hiDMBWpeGR1gSdHdDXV%2FCYZs5iBGHwy6ju3M2rFwCLOPTu2eNzXiL77oVXDJ5Q6NQ%2BqnQXipT8LdyMnn6jg5JvaoC5QmX8c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ed0e56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21256,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 230x345, components 3","md5":"88dd810e1041bc0f727a4bf940eb0bf9","sha1":"9dc4077582a29b81dee514dd09c73e246ea0b152","sha256":"a23fa2e98e3919765833d24de96b13457688322594e29b918f94012aae3de9a9","sha512":"03e3c82c8a641210585f04da68bff1cbadaff1e20395fe3e9ea0d735c1be90787cee8aabfd0320e01f7a0e2515bb5d7fd9afe8ac683c227172ae0809d13f0dfc","ssdeep":"384:qQrXDHRPAZR+OLX0tR0EzMOgWdSjqDv0+8BNXu801eE1krGIiG:qsPAz+OLX0t6EAOOa0Vu804Db","tlshash":"ab92d1bcd7c616a375bc9a3da56269613bd97114b7c105cc14ed32508ea4a3fc74f01e","first_seen":"2025-12-24T00:57:19.772803Z","last_seen":"2025-12-24T00:57:19.772803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/actors/thumb/nm0757855.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/actors/thumb/nm0757855.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1905\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2025 22:05:37 GMT\r\netag: \"6887f431-771\"\r\nexpires: Fri, 23 Jan 2026 00:56:48 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSezZkGlOhdQou55HeovVtChFbLoRf9uJ6blJkBFQQjOfBIqQf4xjlkpjXtIVHaV8g5cipiqudxB5XiIVimFeHRFK4T3DWY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419fd1656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1905,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80\", baseline, precision 8, 60x60, components 3","md5":"27347c0c47210d385da62d70e160e254","sha1":"848956698a402918d587b1118e26e9253ca002e6","sha256":"10681122464b186507686a386460b5c757d23c461781aaa76647b591e8186192","sha512":"ec6dd9aa34622c01ef336ad8e87c0d0d4cac633e92253c18ec168c54ab07290820f850dde31a8d6f455024296d2520c292a8229dca9172583aaf4ab17497306d","ssdeep":"","tlshash":"b741d77f37824321a923c6fd48622117a3ae84deb968978d1f9141f29960cd5bc0e949","first_seen":"2025-12-24T00:57:19.773729Z","last_seen":"2025-12-24T00:57:19.773729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/720p-quality.svg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/720p-quality.svg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/assets/minified/2bacb5de663bc55f0cbed2b4a7d1504dc.css?2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/svg+xml\r\nexpect-ct: max-age=86400, enforce\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Oct 2015 00:26:32 GMT\r\nvary: Accept-Encoding\r\netag: \"563167b8-8e1\"\r\ncontent-encoding: gzip\r\nx-varnish: 142850\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.5)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 6981\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e2EfL7oNePDa0q%2FI55JP%2BvULb2kM2UXf7Ypd6T1eKKnFTnhRHFaCbf7ADBe9yxhJqow%2F3tHm1cgrMb8Z%2FC1wsWrrMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2c241ad896b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.5","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2273,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5aeb94417ec4ea45df9073b018e55c37","sha1":"d4e0e83ab37437aa33dcd7a1c9a0e45527eb3792","sha256":"e45d8d73fe1d94b36bc4296363ecb3eb37de6c5c2201962fda5a8ed38f005f7c","sha512":"6efc5cb00f2cf02572bae090ccedf145fb2c59d26bdeeab051d5bbcedca1e6628e5ebe276ac4eb7fabb0b2c03d30e3005d145fd80438fbdfecf3700bc01eaa7b","ssdeep":"","tlshash":"a84186989339d8cc76e0972c9f3875c17f3158ee6a3104dce7632d242c10ad65e84ea9","first_seen":"2023-05-26T14:58:36Z","last_seen":"2026-04-04T21:56:29.457578Z","times_seen":79,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/fonts/P5sCzZCDf9_T_10c9CNkiA.woff2","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/fonts/P5sCzZCDf9_T_10c9CNkiA.woff2 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://yts.lt/assets/fonts/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 20204\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 17 Feb 2022 10:11:27 GMT\r\netag: \"620e1f4f-4eec\"\r\naccept-ranges: bytes\r\nx-varnish: 82475\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.5)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 3903\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLdIQd1SflAfTKF311rAk4zkwKmK7%2B6Y9p%2BXUGBjXJnYtBYA0VBgzm4eHk%2FIgu4QALgFVQY%2B3JUuv4eJGp0Y7BNLWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\ncf-ray: 9b2c241af89db51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.5","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":20204,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 20204, version 1.0","md5":"a61c95149f6dc1bc43fc5380c7f00a93","sha1":"9e98d4c0e8462ed3a9002e92d2ea9e5cd90940b3","sha256":"171edf30a7806428bd01d1f6e895d93f1055ae215859dd2b31b9598a8f9d48e3","sha512":"751f2038692e4d1ad16e2536a0dabd911bf518f10fa455c3d31cf31274f8978afc4426712a520db19d7db31e4ba8e498b17b55246f57f1b5963c81302952d0db","ssdeep":"384:WOWrnhq7bAcCpdUoWQnwMBy6R1ObPNS5GZdLKtiK8/JbsEpIjza:DWtq70qoiMBy6YoS1KtExb1P","tlshash":"4292d0c8b4492330c9581455104b12ff6c4db10aaff85b4ad6727f87e39d57b7e8913a","first_seen":"2023-05-01T20:36:01Z","last_seen":"2026-03-01T20:48:51.02376Z","times_seen":87,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/movies/Avatar_2009/medium-screenshot2.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/movies/Avatar_2009/medium-screenshot2.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35263\r\nserver: cloudflare\r\nlast-modified: Thu, 12 May 2022 18:34:57 GMT\r\netag: \"627d5351-89bf\"\r\nexpires: Fri, 23 Jan 2026 00:56:48 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGg%2Bkf7fTe3Q1aAsB2fsYRdy5tNjd1cWDjQvkuY8vB0G59wFD%2BQrAkB0IOPtgItmhBV0aHxsN471KJemgGPWz5lBYCn29YQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ed1256b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35263,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 350x197, components 3","md5":"5cd7aebd059a5f764325669d0da81030","sha1":"4ca1c24fe7cd318e781d8a40ad41fd05b9a243c3","sha256":"bdbfc9af6660df402b61876e8605d80c051123dea5f6f42a0036992caeda8cb8","sha512":"53b9261bfd019dd0b0b083600b4021ce21fe8a4dacee7c76e16f050846fc8060e73d8655fc2123a3aeeab617351d3f410dc2294944d9e9662ad8a96d1961cc1d","ssdeep":"768:rA/wpQEkbLmTxpaAZqO3401mjYySznnp3JUgvdjSBqgAkU2p4y1z0Dssv3:rA4HkQpbZU01mEySTnpJTSvimPh0","tlshash":"1ff2f122584182d7f86bb1a92142fdfb70f737945c96ac1736ff2e64602e25e74082e7","first_seen":"2025-12-24T00:57:19.775557Z","last_seen":"2025-12-24T00:57:19.775557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/fonts/icomoon.woff?fmg7s2","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/fonts/icomoon.woff?fmg7s2 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://yts.lt/assets/fonts/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 3560\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 28 Oct 2015 23:04:07 GMT\r\netag: \"56315467-de8\"\r\naccept-ranges: bytes\r\nx-varnish: 7439994\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.6)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 5583\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n28P3ccwpJxT9sQc8wL6yoKPixIus5Bect1Sgg7g7okqsVQJpA2slKHCxj%2BUZ8dw%2F4RbCUwDffUxxpOQddrHe5e73g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\ncf-ray: 9b2c241ad89bb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3560,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 3560, version 0.0","md5":"4e54891305c71736de2da03f14b57434","sha1":"fbf29db32b5514cad7a908167ce63c76a91a2f12","sha256":"332ec1d337a38ad421deff49f3585da56563253756da3870b26b46bd025f96e4","sha512":"dc8a969e71477400a63cbd5d1aa00bd87c678ee6b98cf0c4041b3cfbf76f10866ed8468dcdd44d38b024082b273d156a1f70b276b0c24d9f51eb0f7a79582099","ssdeep":"","tlshash":"9771b6a697f23b43d1138f7864da7b147b319a94cf038753a2845a2818b1b93cd4871b","first_seen":"2023-04-08T10:57:03Z","last_seen":"2026-04-04T21:56:29.510789Z","times_seen":522,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/minified/modded1.js?yify=16","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/minified/modded1.js?yify=16 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: application/javascript\r\nexpect-ct: max-age=86400, enforce\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 26 May 2025 09:08:23 GMT\r\nvary: Accept-Encoding\r\netag: \"68342f87-27ec8\"\r\ncontent-encoding: gzip\r\nx-varnish: 7308415\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.6)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 1119\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2B2BawZX09Olqx3Gz%2Fs5F7jBVxDj0FoIjXHh3TZS3pIfMgwnd7kejVj%2FKRwe8t%2FvtrWPPBKESqwQhxw81i7h281FIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2c241bd8a2b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163528,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65452)","md5":"6d5b2122df8ce5f88f66459515b5f5d4","sha1":"9606b9e421c249ab747ed9e1678a952e6eac6829","sha256":"4445b4cbfdbf7c9882fde0d686163c201f342a16484bfa8f20cc35a556a13961","sha512":"9d98eba72ee84122b0f002e1fbea168cc2a1ec8c69710ccddefd37a44e789c5262abd029d0828a5e6b10780a426cc6f94610b9c05b2478602f0cd9a7b35bcf23","ssdeep":"1536:wCiROaq6JgInuFkbrAkknYQaoLyrq0LfxDX5cw4j7BIBxYSMHzJX0oqTDAGegnMX:ja6ZMDYIB6bp0RpnMEUOQKJbTc","tlshash":"6bf329cdb6d5702243bb30b9106f950ab233546b680d8840f16cd8e96fbce5a5277fad","first_seen":"2025-08-05T13:30:33.062819Z","last_seen":"2026-01-02T09:31:06.385682Z","times_seen":33,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/apple-touch-icon-180x180.png","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/apple-touch-icon-180x180.png HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4856\r\nreferrer-policy: same-origin\r\nlast-modified: Tue, 27 Oct 2015 00:51:42 GMT\r\netag: \"562eca9e-1b3d\"\r\naccept-ranges: bytes\r\nx-varnish: 2500036\r\nvary: accept, accept-encoding\r\nvia: 1.1 varnish (Varnish/6.6)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\nexpect-ct: max-age=86400, enforce\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncf-polished: ok\r\nage: 7171\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T6aS0E2Pl75Y0ldVHhKbfgmzT%2FWIHUaJEXiCeUbKICOI6d8tv6LINPW8DyJAvMn1HmxEI9TVO8nkV%2BSzVJYi2SYogg%3D%3D\"}]}\r\ncf-ray: 9b2c241c08a4b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2297db589e498ca5f3f7ccccf4890cb9","sha1":"898ff18f03f133c07ef244e38043123f092569c6","sha256":"27a82455873f7fa1081e1b2b65a0acf0a20d9a4998eac8b5d536bfc25ec31d31","sha512":"acf201ffa878e7c40fa158b90b24166db04f8e8a5cd6387e72f2ccebde2bcfff97218b1a2a4c345d33b11d6bd4aa2e4fa386593f410174d2e93346ee9b7510fd","ssdeep":"96:c36kFHgNCizj3XCiFopUnBKdlep3CaZfowRJA:cZFANLDSbpOulsycHC","tlshash":"0ea15bdb564a04c4672bc43eaa8cc4f8d00a40aa6ae44dd80bd67fa4647a5c3fd51ee4","first_seen":"2025-08-05T13:30:33.101986Z","last_seen":"2026-03-01T20:48:51.025662Z","times_seen":40,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js? HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb; cf_clearance=_IQgEvT0h7X_QbgwkUOUHO5YOgohEdjtbTjs422T3uw-1766537809-1.2.1.1-iu9xd6XXjPpalz0qCskPc7mAP2GYt5Dl04D0GNXZQqUww6AP9yX9c5vnSHl2hUJskBklWK1CputeD0JfmSjNo_9G3I.6Q0LXhsgRGJFPhA9v2m6K8OqGFwrWhXuCk4rJ4jLSCUaRK5Wy09T_ZrSpKT.tYJcOLXM0g6M8SgYItTVkbGfQXFwElfWFxEKL37R4ycvrwteZOQ5l8D0ax2XV4.ieGn4Dj8uCIQtB946CvnA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\ncf-ray: 9b2c242028c0b51b-OSL\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=r4zasbyHG8HodinZrtP4uYG%2Fu5SHmBhPosuD783jk81gsRECzrwMUfffVrf%2FeIFS3DsCgYuaAUkmwsN5RulYsXb2J8Q6RZv0avMlXKBzNRsFRprkwoiraA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1478\u0026min_rtt=573\u0026rtt_var=588\u0026sent=291\u0026recv=71\u0026lost=0\u0026retrans=0\u0026sent_bytes=288333\u0026recv_bytes=24807\u0026delivery_rate=23860653\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=45780\u0026ss_exit_bw=23860653\u0026ss_exit_reason=2\u0026cwnd=30780\u0026unsent_bytes=0\u0026cid=b179da6d5fb5e3dd\u0026ts=952\u0026inflight_dur=162\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10380,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10380), with no line terminators","md5":"1569b55cc3ff16b806df9d3c78c47c6e","sha1":"6bc88d0769a87e05524cda0c4c63a9549ea28e83","sha256":"0b0dba4a937231e95ad4a3dddaf4ccc703b35d98de075c2e248f5e8224614015","sha512":"ad774d5d091805fefb3ec7cb54b627ad3d9906204505a4c40c464410740335f4de710e0b3cc256fadb53113a053aed6ae413fa7b7e9ca51510eb824046bd0432","ssdeep":"192:Mp8nWkrWoJwL8o/3yQ7x2FWZnTqMvt6ngAZ9SPadbMW7hqNfafMBL83lE:Mpw5rWoJCR7F6D9SPabFhYk+L83lE","tlshash":"1d2208cebe89f00463992cf8486739c7469cbd641404e21782d898a87b3979e166ff47","first_seen":"2025-12-24T00:57:19.778972Z","last_seen":"2025-12-24T00:57:19.778972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.49225239011292077\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:50.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 12:57:52 GMT","end":"Tue, 10 Mar 2026 13:56:16 GMT"},"fingerprint":{"sha1":"77:2A:71:0C:1C:F9:2B:14:04:DB:13:5F:A6:57:67:6D:B3:A9:A0:95","sha256":"E0:53:FF:DF:EC:31:75:79:08:DF:B9:B1:56:18:5A:48:15:62:EF:8B:BB:4C:1B:05:1C:E8:DD:3F:0C:A4:80:41"}}},"request":{"raw":"POST /ut/hb.php?cb=0.49225239011292077\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1837\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1837,"data":"{\"clientHints\":{},\"isScrollable\":0,\"totalClicks\":0,\"sessionLength\":0,\"ippMissclicks\":0,\"visible\":1,\"caught\":0,\"lastevent\":0,\"isFullscreen\":0,\"isTabFocused\":1,\"eventImps\":0,\"retryCounts\":0,\"isScrolled\":0,\"isMouseMoved\":0,\"pagePercentageSeen\":100,\"belowTheFoldSeen\":100,\"touchEnd\":0,\"touchMove\":0,\"clicksByType\":{\"idle\":0,\"input\":0,\"video\":0,\"button\":0,\"link\":0,\"img\":0},\"browsingTopics\":[],\"ufp\":\"Win32/Mozilla/Netscape/true/false/1280x10240en-USunknown4824 bits\",\"sessionStartTime\":1766537810,\"sessionId\":\"ecbfc2af5cd01c41735814a54d115795\",\"timeZoneOffset\":0,\"zones\":[],\"pUrl\":\"https%3A%2F%2Fyts.lt%2Fmovies%2Favatar-2009\",\"pReferrer\":\"\",\"pTitle\":\"Avatar%20(2009)%20YIFY%20-%20Download%20Movie%20TORRENT%20-%20YTS\",\"pDescription\":\"When%20his%20brother%20is%20killed%20in%20a%20robbery%2C%20paraplegic%20Marine%20Jake%20Sully%20decides%20to%20take%20his%20place%20in%20a%20mission%20on%20the%20distant%20world%20of%20Pandora.%20There%20he\",\"pKeywords\":\"yts%2C%20yify%2C%20yts%20yify%2C%20yify%20movies%2C%20yts%20movies%2C%20yts%20torrents%2C%20yify%20torrents%2C%20yts.lt%2C%20yts.ag%2C%20yts.am%2C%20Avatar%20(2009)\",\"pHasIframes\":2,\"pWidth\":1280,\"pHeight\":0,\"vWidth\":1280,\"vHeight\":1024,\"inIframe\":0,\"bsd\":\"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\",\"sentTimestamp\":1766537810107}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Dec 2025 00:56:50 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5Y5R0WmxO%2BJi5QYwY7LS4mglgW4Jf3S%2B6tuCAJez%2Fk%2B2FIKvGXo69ML2VSgr7YSH0EXulMh8CrCoquJeKSR8PYepJZijMKPlgx%2BzHo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2c2421bae12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":145,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/movies/Avatar_2009/medium-cover.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/movies/Avatar_2009/medium-cover.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24037\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Oct 2015 03:15:26 GMT\r\netag: \"56318f4e-5de5\"\r\nexpires: Fri, 23 Jan 2026 00:56:47 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qay0ILzmKLqzCm2h7d2%2BQJNSrnUMQYC4rTtd5e68khLvl1ir3vHmY2l9xaleMFfTPTnR0GpHb1A8zVuSqzJhSdzmcwuoABE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ed0c56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24037,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 230x345, components 3","md5":"4b25c98f6802a34cd83563535799ee9f","sha1":"2138a9b7d475544fed47885d67242950ba6056f2","sha256":"2842f4abaf7763db84121bd0372dece185eb79972d62f21c7870b697b258c76a","sha512":"6fd2f01a61dbc300ef6db56abe9b5fc5bb2bbcf5e4617902e2d6e3a93800c0b4e70c4f93e00d842ac779b4231afdec713b805ab13e29e4472923fb12be0df778","ssdeep":"384:qb0hc4FTlamiw2LJ54iIkDlzA3VrYN7u2BYesSwYH5COmFvVHoggHD4YbYqlPfyl:qb02gTf8Jwkc+a2xHh6IRk9GyW+Mm7t","tlshash":"91b2d11b45ca26e074a2d2d6dfcb9cc793fcc95520d38006bade6c21992e7f0689895f","first_seen":"2025-12-24T00:57:19.779917Z","last_seen":"2025-12-24T00:57:19.779917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/3D-quality.svg","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/3D-quality.svg HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/assets/minified/2bacb5de663bc55f0cbed2b4a7d1504dc.css?2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: image/svg+xml\r\nexpect-ct: max-age=86400, enforce\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Oct 2015 00:26:31 GMT\r\nvary: Accept-Encoding\r\netag: \"563167b7-844\"\r\ncontent-encoding: gzip\r\nx-varnish: 2113908\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/5.2)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 2148\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIpruk59YkVtunhVAvcDGoov5iWE3gCEH%2FDI1nbtnNJuyDRZf9OOfOn798Vgs%2FGaMYU2mfv2zr3i0PmRLI473hf5wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2c241ac893b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:5.2","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2116,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4eb25068766aa560bb9e7b79b029bca","sha1":"4d1822698647a49e858e12532c32a952596494b5","sha256":"de8b123ae80c023fe53ecac9c493847200f380eb5d32b61752bc66d9dc8b3db6","sha512":"d02d2473ab46631281043e8be9e3e2fbc43286cb39808fbf092d59bef337a01f3ff69756558aab41dfff60864c427a3c1507d5a6ee3f6859627169ee9b68ba0d","ssdeep":"","tlshash":"c041c5899378d0d97100732c4d3c2bc22b3194ba59b150a8f7531838695c76b7eb02ac","first_seen":"2024-08-20T01:37:28.165093Z","last_seen":"2026-03-15T09:31:19.024168Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/fonts/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/fonts/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://yts.lt/assets/fonts/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18364\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 17 Feb 2022 10:11:15 GMT\r\netag: \"620e1f43-47bc\"\r\naccept-ranges: bytes\r\nx-varnish: 4494232\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.6)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 6562\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5c8NUtVNTbvJEk1CHrOcG1qRJxhgD9FyYvyZxXqouOXkR7cK5e8W%2B3pYHNGqqZBASIeIqaHoXt1C4rUXjOwhvmn48g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\ncf-ray: 9b2c241ae89cb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":18364,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18364, version 1.0","md5":"d3ee727b257658b2ec8ef91639815c2c","sha1":"5a7721c4680c382bfd251f10123027e843079ebd","sha256":"ad69e547e43620390c7d7e192a4d00959602042fecd2be1e131a0a9b3398a36d","sha512":"3b5f194eb5f6069dff92e1556eaf3fba2cddb91efb377f88bd31f780e2d9dd0a7e462a747ccc684d364d44c3df93d6c1a65f1f2b61cdda68b6cbaead888b97a3","ssdeep":"384:mcHtuT+CDVCvs75TZjw6wHENGDinds2FW8pnARNovDCEm+T:HHtwDVJFw6wkQ0Ga1INIDCO","tlshash":"9f82d0c557e6b8abdad38e37af886d63801d40438270cdc69c34246e698fb467c69663","first_seen":"2023-04-08T10:57:03Z","last_seen":"2026-03-12T19:13:09.620967Z","times_seen":211,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/movies/seoul_vibe_2022/medium-cover.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/movies/seoul_vibe_2022/medium-cover.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36418\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Dec 2025 18:25:31 GMT\r\netag: \"6946ea1b-8e42\"\r\nexpires: Fri, 23 Jan 2026 00:56:48 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HV%2BfmmAcLYTVnKdFylWiGHWEEKvf2XX6heTe1wK9dlpgH7yL%2BxMSJCh4Ld8GstdxdVUuMciTXs6J%2Fmez6xatCAynX3jnJdc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ed1056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36418,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 230x345, components 3","md5":"0ba9b256e895d64d7b3c51b8d5072f45","sha1":"3ba64afe8e8d2030cfe8c55c2c0907b865f35e3b","sha256":"08776270c8c6ed3c9856badf3eeecb6cc51f13eda3415a4f8571d94740001d32","sha512":"155ae7c76fd2ec09814491b2ae5c6c64640ba5d73a780563def80fd4b2117be9c767a3e7a04e0ed521271fb688ecfb4c6670ffa0e028735275ab8d59dcad142a","ssdeep":"768:jkCp1k8PPR7Scgon9cNc0JQGjFZ1BmaxpPBTGhFqM/fEZ+:jrnP4KWpJdv1BNLqgZ+","tlshash":"2ff2f1d17fa827c27d14bdac7737f141a6fe1e93ed55898558f1dc224558fa78100448","first_seen":"2025-12-24T00:57:19.781751Z","last_seen":"2025-12-24T00:57:19.781751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/actors/thumb/nm0941777.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/actors/thumb/nm0941777.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1721\r\nserver: cloudflare\r\nlast-modified: Thu, 24 Jul 2025 13:01:39 GMT\r\netag: \"68822eb3-6b9\"\r\nexpires: Fri, 23 Jan 2026 00:56:48 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0H7BmD1mlFFYdUg9kmYirhDufh4JMTiNyecKATcbmc1l4eSzlj2umlJK3AJmkKz68kr%2FU1ehoqLfCea6MB54F0i0ty4Bu14%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419fd1756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1721,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80\", baseline, precision 8, 60x60, components 3","md5":"f31a4c3d69f6dfe10384060312ffcadc","sha1":"174e8d154bd60acb976dac847063f3fff90ed569","sha256":"42123a2e20ba3bbdc3904b43cdaab4ce160046f0a10de19f39d0ed73eabe7745","sha512":"c42f5e83ea5198e93f404ddb20c01bf8c65a08d503e9c711086ddae87d3d269d9b8944ada03d206373e47b72b0487b7797176e3b8b4f858d0de2943dcfc7c9ad","ssdeep":"","tlshash":"6e31b8efbf234360c8dac5b24aa4256ff3de1f8165c43f1c7432569689208c9569cd99","first_seen":"2025-12-24T00:57:19.782613Z","last_seen":"2025-12-24T00:57:19.782613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/fonts/P5sCzZCDf9_T_10c9CNkiA.woff2","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/fonts/P5sCzZCDf9_T_10c9CNkiA.woff2 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://yts.lt/assets/fonts/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 20204\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 17 Feb 2022 10:11:27 GMT\r\netag: \"620e1f4f-4eec\"\r\naccept-ranges: bytes\r\nx-varnish: 82475\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.5)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 3903\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BlOsWY15F7QEE2%2F82gqajvi3SkIGKt1mHMyb1ymjH4gJDX%2B3nn%2BOmzBRIfMvfzPPKU%2BxUVECMNVVlXIDE8mncT3TUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\ncf-ray: 9b2c241b089eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.5","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20204,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 20204, version 1.0","md5":"a61c95149f6dc1bc43fc5380c7f00a93","sha1":"9e98d4c0e8462ed3a9002e92d2ea9e5cd90940b3","sha256":"171edf30a7806428bd01d1f6e895d93f1055ae215859dd2b31b9598a8f9d48e3","sha512":"751f2038692e4d1ad16e2536a0dabd911bf518f10fa455c3d31cf31274f8978afc4426712a520db19d7db31e4ba8e498b17b55246f57f1b5963c81302952d0db","ssdeep":"384:WOWrnhq7bAcCpdUoWQnwMBy6R1ObPNS5GZdLKtiK8/JbsEpIjza:DWtq70qoiMBy6YoS1KtExb1P","tlshash":"4292d0c8b4492330c9581455104b12ff6c4db10aaff85b4ad6727f87e39d57b7e8913a","first_seen":"2023-05-01T20:36:01Z","last_seen":"2026-03-01T20:48:51.02376Z","times_seen":87,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/movies/avatar-2009","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-24T00:56:48.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /movies/avatar-2009 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\nx-varnish: 9308751\r\nage: 0\r\nvia: 1.1 varnish (Varnish/6.5)\r\nreferrer-policy: same-origin\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpTaBxhFcFP7w8zc%2BcdmNNti%2BalyTL3NGpx7PzXnkP%2Fe3Dnio5aAfUpoib50vkJOigVGv7RJb2b0aJmHjYz%2BISNbyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\ncontent-encoding: br\r\ncf-ray: 9b2c24161bdb56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.5","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":691206,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (744)","md5":"0b22743162efcdd6435868ef10f2cf8b","sha1":"c9dd407830db613140af19f8c200ce50475abaf8","sha256":"11a387ae0fa3eb177f442073b556a17fe5c86d87154e83aa8a0aab29092eaba4","sha512":"2082d4202b729b7359aa401dba781eb7b24dc6d594f12aed71ce5fdbea73d730a27470d5ecf11804e59d84ddee582f4522d0c99a48532ec0d1bde618187115bf","ssdeep":"12288:mcjDwkLQGEdqeHntKnhYZiahM40lN0R5Jr9OnaYuqFFObnpe9AUTpKWZVfmuenMG:WHtbhM40/0RRIZDFObnpe9AUTpKWZVaR","tlshash":"1fe4711837844587271b4efb733ba5d1e40b38dab609488bf60c7c55a3965a3fbe9231","first_seen":"2025-12-24T00:57:19.78337Z","last_seen":"2025-12-24T00:57:19.78337Z","times_seen":1,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":23,"dns":7,"connect":1,"send":0,"wait":372,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/images/website/ajax-spinner.gif","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/website/ajax-spinner.gif HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 37942\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Tue, 27 Oct 2015 00:51:41 GMT\r\netag: \"562eca9d-9436\"\r\naccept-ranges: bytes\r\nx-varnish: 3980007\r\ncf-bgj: imgq:100,h2pri\r\nvia: 1.1 varnish (Varnish/5.2)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\npriority: u=1;i=?0,cf-chb=(782;u=3;i=?0 1588;u=3;i=?0 2895;u=5;i=?0)\r\ncf-polished: ok\r\nage: 3522\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jAaubBlhSDnt2fc4s5MezdwxyX2hUwiTXOXXLORXh5B8IUUCu0srNe2%2F4xM6d%2BkJByNzxa0A%2BUjHRcQShYj1PM%2BrEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9b2c2419ccfb56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:5.2","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37942,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 84","md5":"6c25b2f7efe1457cbe08ab4452e81589","sha1":"77029c58741ebead12614624d9765648d1bb82ff","sha256":"04a309929e0e1d64d9aed3b63dbe88f613004a37de9e1ddc8bd7cd6091846ef4","sha512":"363ff36ffaf836f9c5bf7ab77b3ffb48cdfef0fea07aff2afb59fcf52bbbd26d37bdbe66f28275979defe1707516803832c4503db2b49a23c623636ffd034a40","ssdeep":"768:rV62OxLAm955rGLfBwI7BMPCxU57z80RAnsn:RcLF5rGLfBz7B0T7z8La","tlshash":"cf03aeeb51ddbcf7c05fed3040283b6f93691062539f8c61fcadb56ac890a296bd0156","first_seen":"2023-05-01T20:36:01Z","last_seen":"2026-03-12T19:13:09.66822Z","times_seen":193,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.yts.lt/assets/images/movies/The_Hunger_Games_2012/medium-cover.jpg","fqdn":"img.yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/images/movies/The_Hunger_Games_2012/medium-cover.jpg HTTP/1.1\r\nHost: img.yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29999\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Oct 2015 16:20:52 GMT\r\netag: \"563398e4-752f\"\r\nexpires: Fri, 23 Jan 2026 00:56:42 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S4zXfebFU24lOEedjqblpuh8wvSuDZO0CJzn92e1nB%2B74eKoith4t9ET0XKSENGn5YLNAQDQzwiWodP3GvcC84aXV%2BTxc4g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ed0f56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29999,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 230x345, components 3","md5":"2afcdd04658a3d7aaa178af15b1d7474","sha1":"39ade7845ebbec8b1dab0bc11672b896a1946f19","sha256":"c2d40abaf8fa7a58d5af1258c0b2b3cc60e918683341bf42dbe0189f4bd30144","sha512":"e251baaad43eb9e17e58a5b82ca79e4dd1c2056b2a6ac0d41ccc87f52406a563edae88ebb4e6df940ccfe1a905458230b386f208f57c18a94459269864c799a6","ssdeep":"768:qNEOQI2c+5ujw4E4V8wY2WTIBJF4f3mYH7S:qN5QI275uUIq2W8BJF4dbS","tlshash":"cbd2e0940ae452c5aefd826e369b0fcd5380ebd06a5af24c3af56290ee1d47873d054d","first_seen":"2025-12-24T00:57:19.784802Z","last_seen":"2025-12-24T00:57:19.784802Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"img.yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/minified/2bacb5de663bc55f0cbed2b4a7d1504dc.css?2","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"104.26.2.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:48.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/minified/2bacb5de663bc55f0cbed2b4a7d1504dc.css?2 HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yts.lt/movies/avatar-2009\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 00:56:48 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Sep 2023 17:41:42 GMT\r\nvary: Accept-Encoding\r\netag: \"64f373d6-1d55d\"\r\ncontent-encoding: gzip\r\nx-varnish: 2165496\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.6)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nage: 4395\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17Ag1%2FrkRAtihFY6ltuQFFOkIQnm%2FiWa6sDf9oMtDxjmqs1EdIRHinP%2B4aG29uXIwHMbt0vxPkOW34SIsv4qQm5nLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9b2c2419ccf956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":120157,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57599)","md5":"20503e768e6b0dbdb2098b5a9806b11f","sha1":"62081e92eed00de421db667f1a789ab9ac9d6252","sha256":"fcdd83c16f11cd21de8e037bc60c8a9d348acd963e9641c0e88872d761c01bd7","sha512":"1da5e342e80ce540434f5df38965b68f8c0420f5e95ae9b0174194f9656cd277205b7d9e50660ab3e9f6edecefb9323ffa331bb171d8905086b9bfb69ab40367","ssdeep":"768:JZGxw7XAgWRWeEHH7NzLvQkaQmRikUJyOQSJngmlKseRChfOr0MtV:EwWHEHH7NzLKRikUPi9","tlshash":"8bc3bab1b510349bb237c559b1c0be8b3619a153d6234fbff66b74e8cb822d60263b15","first_seen":"2023-09-22T07:04:17Z","last_seen":"2026-03-12T19:13:09.727613Z","times_seen":149,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yts.lt/assets/fonts/glyphicons-halflings-regular.woff","fqdn":"yts.lt","domain":"yts.lt","tld":"lt"},"ip":{"addr":"172.67.72.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yts.lt/movies/avatar-2009","date":"2025-12-24T00:56:49.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts.lt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:02:11 GMT","end":"Sat, 14 Feb 2026 11:59:31 GMT"},"fingerprint":{"sha1":"D2:9F:6F:7A:06:39:7E:A1:E4:F5:37:A8:08:24:27:57:3F:28:36:72","sha256":"AD:00:EA:E6:33:44:8D:AB:92:CF:2D:93:E7:C0:A1:9E:EF:6C:6B:28:44:F2:EA:C7:4A:54:A4:09:77:6F:A6:A6"}}},"request":{"raw":"GET /assets/fonts/glyphicons-halflings-regular.woff HTTP/1.1\r\nHost: yts.lt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://yts.lt/assets/minified/2bacb5de663bc55f0cbed2b4a7d1504dc.css?2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=rhceuvmpv7dt0r2gpq37avkivb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 00:56:49 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 23320\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Oct 2015 00:23:11 GMT\r\netag: \"563166ef-5b18\"\r\naccept-ranges: bytes\r\nx-varnish: 525900\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish (Varnish/6.6)\r\nstrict-transport-security: max-age=63072000; preload\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9rNoHyQlvN8sFEMsT0wF7ouTLcsjLyUAEM1KSKgCj3swhGaJcpCruGKHq6lX%2F0NpHyN52xBQwHeUrCF2vIjrvmbjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\ncf-ray: 9b2c241b589fb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23320,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 23320, version 1.0","md5":"68ed1dac06bf0409c18ae7bc62889170","sha1":"22037a3455914e5662fa51a596677bdb329e2c5c","sha256":"fc969dc1c6ff531abcf368089dcbaf5775133b0626ff56b52301a059fc0f9e1e","sha512":"88beda715a3de8ea031048feb71fd3ffff9c695fd9874b06c8b1d31c88c7a8a653c4a67efab3b6f0b1f4dedc3c18a6436a4455984c0abce10a210baca0cb689d","ssdeep":"384:nPImthkcJE4kdRJe7gl601jRx2GbhjBrr7plKUl2yCIvSAF2KFXthj1D:PImth2Je70jxphjZp0UMyPSyhD","tlshash":"1ea2d0e7af93450ff75e1279c384429e368dac09a19b0dc546edac1d91c80bced426f5","first_seen":"2023-04-05T07:13:03Z","last_seen":"2026-04-05T08:25:28.612954Z","times_seen":5154,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"yts.lt","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}