Report - en.yts-official.mx/movies/scenes-from-a-marriage-1974/

Report Overview

Submitted URL
en.yts-official.mx/movies/scenes-from-a-marriage-1974/
IP
104.21.69.3
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 11:53:17
Access
public
Website Title
Scenes from a Marriage (1974) YIFY - Download Movie Torrent - YTS
Final URL
en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
24

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
accountantpacketassail.com	unknown	2024-02-15	2024-02-15	2024-03-03	896 B	47 kB	172.240.108.84
cdn.barscreative1.com	25648	2021-09-08	2021-09-16	2024-04-17	494 B	2.4 kB	45.133.44.4
en.yts-official.mx	unknown	2024-02-16	2024-02-22	2024-04-18	9.8 kB	419 kB	172.67.202.34
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-18	2.6 kB	98 kB	142.250.74.99
proftrafficcounter.com	unknown	2023-11-16	2023-11-21	2024-04-18	874 B	850 B	18.196.110.226
piledchinpitiful.com	unknown	unknown	No data	No data	489 B	467 B	172.240.108.84
capaciousdrewreligion.com	unknown	2023-11-07	2023-11-27	2024-04-18	417 B	327 B	192.243.59.13
domesticsomebody.com	unknown	unknown	No data	No data	6.8 kB	13 kB	172.240.108.68
cdn.creative-bars1.com	unknown	2022-11-01	2022-11-15	2024-04-16	1.4 kB	25 kB	104.21.70.253
unseenreport.com	unknown	2022-03-30	2022-03-30	2024-04-18	1.5 kB	846 B	192.243.61.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-18	897 B	9.0 kB	142.250.74.106
downstairsnegotiatebarren.com	unknown	2024-03-04	2024-03-04	2024-04-17	830 B	173 kB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	accountantpacketassail.com	Sinkholed
2024-04-18	medium	accountantpacketassail.com	Sinkholed
2024-04-18	medium	piledchinpitiful.com	Sinkholed
2024-04-18	medium	domesticsomebody.com	Sinkholed
2024-04-18	medium	domesticsomebody.com	Sinkholed
2024-04-18	medium	domesticsomebody.com	Sinkholed
2024-04-18	medium	unseenreport.com	Sinkholed
2024-04-18	medium	unseenreport.com	Sinkholed
2024-04-18	medium	domesticsomebody.com	Sinkholed
2024-04-18	medium	domesticsomebody.com	Sinkholed
2024-04-18	medium	domesticsomebody.com	Sinkholed
2024-04-18	medium	domesticsomebody.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	en.yts-official.mx/static/yts/js/jquery.min.js?v=1	84 kB	2023-03-07	2024-05-01
Pretty URL en.yts-official.mx/static/yts/js/jquery.min.js?v=1 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:24:08 Last Seen2024-05-01 05:57:04 Times Seen1758 Hash b0dc11d0a434aafe88908c7f33d71095 1327f754ff87d26bced46568543207e9df190aaa de4b3c3d1dc2506b6693f0f98884e1dc074cda9d66cab39b7b48a115fdfc4c0f Loading...

	accountantpacketassail.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js	81 kB	2024-04-18	2024-04-18
Pretty URL accountantpacketassail.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js IP 172.240.108.84 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 13:53:24 Last Seen2024-04-18 13:53:25 Times Seen2 Hash 63431b20ffca40d1e5210a11ff0ad82f 4d73df32dff11c8b105f758244759485ed80c813 3b96749f84cc49024b5e0323afdf05b57d24f4b9e2bf305cf8259b06ea44ef13 Loading...

	accountantpacketassail.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js	44 kB	2024-04-18	2024-04-18
Pretty URL accountantpacketassail.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js IP 172.240.108.84 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 13:53:24 Last Seen2024-04-18 13:53:25 Times Seen2 Hash 17283b861c55248988faade6741124c1 ea5c498817951fcf7a3518b02068af5d5d2b28fe c9005ebcb251319bdeb631598fb620206c9f2c467a1ed0aa0be7bcfa33c73fa4 Loading...

	capaciousdrewreligion.com/advertisers.js	0 B	2023-03-07	2024-05-01
Pretty URL capaciousdrewreligion.com/advertisers.js IP 192.243.59.13 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-01 22:15:59 Times Seen37256390 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	1.3 kB	2024-04-18	2024-05-01
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 12:10:15 Last Seen2024-05-01 08:55:41 Times Seen13 Hash c49d905a401c8300d3a430b90f647172 abbb3b563239dfe2eb172377985ef6f5fe9db5a6 55c0ad517dc805ddffa8f13a2614bc0217b201e44cbfb2e9fc900dd42c4120c4 Loading...

	en.yts-official.mx/static/yts/style/modded1.js?yify=1	163 kB	2023-03-08	2024-05-01
Pretty URL en.yts-official.mx/static/yts/style/modded1.js?yify=1 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 07:05:18 Last Seen2024-05-01 21:04:11 Times Seen92 Hash 60de675fcd2844a3ffbb68550d303076 8a53cc2f554a8ef1f58f3fd1996a3c3552ea5472 1c821bdab262418e3742bfa3c295c3b668724f7e8898b45638958a898bd93d33 Loading...

	en.yts-official.mx/movies/scenes-from-a-marriage-1974/	428 B	2024-04-18	2024-05-01
Pretty URL en.yts-official.mx/movies/scenes-from-a-marriage-1974/ IP 172.67.202.34 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 12:10:15 Last Seen2024-05-01 21:04:11 Times Seen40 Hash 6dcff6572b90a25babb8be2e3703eb97 58ca34991d0315b9cef9bb1e9bd8ba547602e5b3 28f374670828d65e52a411c90ba6dd9017599b26eca5ef05eb3278c2f4f81982 Loading...

	downstairsnegotiatebarren.com/sfp.js	86 kB	2024-03-29	2024-05-01
Pretty URL downstairsnegotiatebarren.com/sfp.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-29 13:13:34 Last Seen2024-05-01 21:58:17 Times Seen1567 Hash f4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716 Loading...

	cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js	84 kB	2023-03-07	2024-05-01
Pretty URL cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-05-01 19:51:56 Times Seen15853 Hash 4a356126b9573eb7bd1e9a7494737410 8258d046f17dd3c15a5d3984e1868b7b5d1db329 22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5 Loading...

HTTP Transactions (46)

URL IP Response Size

en.yts-official.mx/static/yts/image/default_avatar.jpg

172.67.202.34

200 OK

2.4 kB

URL GET HTTP/3
en.yts-official.mx/static/yts/image/default_avatar.jpg
IP
172.67.202.34:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 100", baseline, precision 8, 60x60, components 3
Size
2.4 kB (2449 bytes)
Hash
e55b123ffd0b26cddf175715a76ff22d
0cbeba4643578c972bb79bf8e3b0b83a794df5bc
9412c68d8f2bad5e7abe0ca709a3258cf8c2b7a14bcc1654abf2316debf902cc

HTTP Headers

GET /static/yts/image/default_avatar.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: image/jpeg
content-length: 2449
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-991"
expires: Tue, 14 May 2024 07:11:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 362484
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wmg%2B3MChAbEHdW70wOTpP%2BbyJ2sesbNa3jlu3BUaecb7viibQQHxcu0ZH5oQbmb%2B66emxV0CwHuL0uRCJvC2Qg94VQDfa9cANuy2bo%2BCSJcDS27vPl1tJUDQWtPEtVTBv%2FoRBCk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737a6c195685-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/scenes-from-a-marriage-1974/

172.67.202.34

200 OK

34 kB

URL GET HTTP/3
en.yts-official.mx/movies/scenes-from-a-marriage-1974/
IP
172.67.202.34:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
HTML document, ASCII text, with very long lines (793), with CRLF line terminators
Size
34 kB (33731 bytes)
Hash
36bdee28352aebde26577fa836e40524
7690cdd7eaf39ad28d8b3aa86f974c648b9caaf2
902aaada0c6cbb8d496b81f89374381ecce0b35390bae6cad185d6b50f100f1c

HTTP Headers

GET /movies/scenes-from-a-marriage-1974/ HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cufJAhnaRrSTO0Jvlsue4lTPqUqz9oUjFsb%2Bbod%2BrOE70X%2B0htwvPP33RE7uhpX0Q8B3YLAnav32ieZ0ftB6xapaWVhOuRbKxSTNLFqB5k4g7%2Bm%2FkqJPugSoH2MvCb3vSXd1SH4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87647377690b5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2

172.67.202.34

3.6 kB

URL
en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
Web Open Font Format, CFF, length 3560, version 0.0
Size
3.6 kB (3560 bytes)
Hash
4e54891305c71736de2da03f14b57434
fbf29db32b5514cad7a908167ce63c76a91a2f12
332ec1d337a38ad421deff49f3585da56563253756da3870b26b46bd025f96e4

HTTP Headers

GET /static/yts/fonts/icomoon.woff?fmg7s2 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: font/woff
content-length: 3560
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: "65d2c88f-de8"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6189
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OmeusexcJb35r9M%2BtsrQWBxIiJShu2%2BASHMwfu62ROt%2FqocfB%2BlI90qYF%2B59kSfWbOWc4LfZ02bdGJfjkq%2FHUjWi3BPRAYMDJbF%2FM7SpPsDUHTPMc5zsJoj2kctjxpIAapE%2BGmw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737b9e045685-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/scenes-from-a-marriage-1974.jpg

172.67.202.34

19 kB

URL
en.yts-official.mx/movies/poster/scenes-from-a-marriage-1974.jpg
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
19 kB (19434 bytes)
Hash
b9f56c6cae160d8dc44bfb1361ff39c1
e853b1280e19ff55a9480c503c8e3cac005233a0
a5e836527ef452e2ca4b3440fcd165d1df741195f31b531fe014915be230b6d8

HTTP Headers

GET /movies/poster/scenes-from-a-marriage-1974.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: image/jpeg
content-length: 19434
last-modified: Thu, 28 Oct 2021 22:18:51 GMT
etag: "617b21cb-4bea"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mDsjFmSnfQbiTAeLpn6dcwOdkPOm%2FFFnwTY1xpom9cUlZ4hWIaxb2s7%2BMIl%2FtAFg3XZ0gJb58MPF%2FXpFcLGUbPSCRaxgb8pEhuBX6cGoNPiI1MThAJ%2FXnOBNawZ1hdBq8swfsU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737a5bfc5685-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/static/yts/images/website/icon-search.svg

172.67.202.34

1.0 kB

URL
en.yts-official.mx/static/yts/images/website/icon-search.svg
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
SVG Scalable Vector Graphics image
Size
1.0 kB (1041 bytes)
Hash
10c10634d2bb0228cd4d4e884613abb1
bdb85d8d0c1d13f0170cffe097c34c0b2f88ba03
1d3766a87712c953b7768cd1ffe2146e07e9bd555cd894c9eb0bdda6c0e6baf6

HTTP Headers

GET /static/yts/images/website/icon-search.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-37e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6565
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YDwiGgsJ6WwpiVoQTHnLMx2KBD8xrj1dUDLc910CfO7nPvJ4e3o8L0kfSMjC20%2BMUDyq8PoSOG2GDvkKK27BlUrg7Oq1Y%2BVGIotMmwJe6NEMmaqHDGDCzFI2QB3WyaVfJKYFOI4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737b8de05685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/static/yts/fonts/glyphicons-halflings-regular.woff

172.67.202.34

23 kB

URL
en.yts-official.mx/static/yts/fonts/glyphicons-halflings-regular.woff
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
Web Open Font Format, TrueType, length 23320, version 1.0
Size
23 kB (23320 bytes)
Hash
68ed1dac06bf0409c18ae7bc62889170
22037a3455914e5662fa51a596677bdb329e2c5c
fc969dc1c6ff531abcf368089dcbaf5775133b0626ff56b52301a059fc0f9e1e

HTTP Headers

GET /static/yts/fonts/glyphicons-halflings-regular.woff HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: font/woff
content-length: 23320
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: "65d2c88f-5b18"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6189
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z%2FElfyGnmqIboQ9LztMx9S7Ql6n7jzXU3ALOdzsV0srfUTgZm8qmsdsR6aVFe7bm4jFveeRdZiE2NbXbQNzPEOweHEAX8DPrHaGPP1bTkef4aIaHUUBV%2FJs9KZciBK3QImBLDyk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737bce5e5685-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/static/yts/fonts/fonts.css

172.67.202.34

937 B

URL
en.yts-official.mx/static/yts/fonts/fonts.css
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
ASCII text, with very long lines (1316), with no line terminators
Size
937 B (937 bytes)
Hash
b482ea655a7bad066f5aacbcbd1f8ff9
7b48d2275fc5356ae4528275502bb520244e8a4b
38fe96c34e2d963f298b4827f2ddc5a13fa1bcbe420cbbd0b5b907d5613ad1bf

HTTP Headers

GET /static/yts/fonts/fonts.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-524"
expires: Thu, 18 Apr 2024 18:10:15 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 20556
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MdAJsI%2FcaERFhWurLOuuNREb%2BmMYaOECIyszlwbb4g451pyd5dDwAj8Yyd54Cq34zFGCj%2B7712uc%2FlXTJ6GhpBvzNd%2Fk5PB6p%2FkruFZqrtaspYRck%2FLpcxDe%2FF9LNGVvlq%2Fbumg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8764737a5bf15685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/love-wedding-marriage-2011.jpg?v=1

172.67.202.34

23 kB

URL
en.yts-official.mx/movies/poster/love-wedding-marriage-2011.jpg?v=1
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
23 kB (23094 bytes)
Hash
c762f35156970f33e5f311901801dce4
c516462ec82e305e5bc044c4dd44fa6056f7b59a
69571063c2bf5687470f5c703fae40f8657b36a6eaf4d3b0ee13ac1b5c7d128e

HTTP Headers

GET /movies/poster/love-wedding-marriage-2011.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: image/jpeg
content-length: 23094
last-modified: Thu, 28 Oct 2021 19:01:36 GMT
etag: "617af390-5a36"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6VJxekwhsITg7TobUHVteVDn1heVtys13kO8fLr6jkCp%2FZXJcUO2y5QRHwxlOsTxLLJvUVIXlJmpSKRVIAXVsM8jE32njYOZouFmI1J5ngxZLhjc4X9pwfGhhPv3GzPaepMzOFM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737a5c005685-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/screenshot/scenes-from-a-marriage-1974-medium-screenshot2.jpg

172.67.202.34

27 kB

URL
en.yts-official.mx/movies/screenshot/scenes-from-a-marriage-1974-medium-screenshot2.jpg
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 350x260, components 3
Size
27 kB (26685 bytes)
Hash
4295011ec9bd5139e5466e939bab50d8
a2794af24e3ab497ede70d5125cea1180ea54ba6
8ebbfb785c5e84dd7e8be55aefeb7ca7ac2bebc14383e94dac0bb280ae34a1e1

HTTP Headers

GET /movies/screenshot/scenes-from-a-marriage-1974-medium-screenshot2.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: image/jpeg
content-length: 26685
last-modified: Thu, 28 Oct 2021 22:18:53 GMT
etag: "617b21cd-683d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UVwETgsy0SSZLCJKTQm4%2Fykk7CLt8g5pYi6ARwFjB6zbKvn7GOvaZKg3%2B9VvDxJBS1sVwGe%2ByrembuwLUjwrMNSK6yGqLPxBp%2FdXphfXOKvLDWtVud5nPyDnSHN3m6WFxbBma5U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737a6c0f5685-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/toy-story-1995.jpg?v=1

172.67.202.34

31 kB

URL
en.yts-official.mx/movies/poster/toy-story-1995.jpg?v=1
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
31 kB (31138 bytes)
Hash
16a6d306f08ce09882cf0814e40f0602
dfa08becf381934c7944d5748eccab58dd51bf9a
6e020f3963da4d37d8126af9edddb27b011f679d08f1cbcd7f6e66b017a19bea

HTTP Headers

GET /movies/poster/toy-story-1995.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: image/jpeg
content-length: 31138
last-modified: Thu, 28 Oct 2021 07:34:21 GMT
etag: "617a527d-79a2"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aKtZALpS3L%2BOT2pX2qJAsLzQzPGffVf2m6mm8q8WxWINTZB36TFNY5cycrQ%2FhyXjKK34eAz8VsK4MuFOmOhyON2cz0ZbyS09LmwxERckwur1EtYdKEzwX6f7NIFS8yMJLlVSo5o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737a6c095685-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2

142.250.74.99

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 22052, version 1.0
Size
22 kB (22052 bytes)
Hash
f0e48ce2beda9e8cbd7d915bf1b1ae71
3dc1cfff1759b0959cc7fb17517651ec850d584d
b2504b3c20c2feb37e78773b788dd09a9cc43c9f36086bc1e2f83a6366ebaa34

HTTP Headers

GET /s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:22:50 GMT
expires: Fri, 11 Apr 2025 17:22:50 GMT
cache-control: public, max-age=31536000
age: 585001
last-modified: Thu, 14 Sep 2023 00:00:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2

142.250.74.99

200 OK

20 kB

URL GET HTTP/2
fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 20040, version 1.0
Size
20 kB (20040 bytes)
Hash
a61c670a24d6794a95a9712f0d12b656
c9b3114b27790109ec51508f51f1a033ccfe0812
a4f5230d39a7a21971fe62ccde2443345638d2beaa369b752820390a687b91b6

HTTP Headers

GET /s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:40:42 GMT
expires: Fri, 18 Apr 2025 02:40:42 GMT
cache-control: public, max-age=31536000
age: 33129
last-modified: Thu, 14 Sep 2023 00:51:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2

142.250.74.99

200 OK

20 kB

URL GET HTTP/2
fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 20040, version 1.0
Size
20 kB (20040 bytes)
Hash
a61c670a24d6794a95a9712f0d12b656
c9b3114b27790109ec51508f51f1a033ccfe0812
a4f5230d39a7a21971fe62ccde2443345638d2beaa369b752820390a687b91b6

HTTP Headers

GET /s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:40:42 GMT
expires: Fri, 18 Apr 2025 02:40:42 GMT
cache-control: public, max-age=31536000
age: 33129
last-modified: Thu, 14 Sep 2023 00:51:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

en.yts-official.mx/movies/screenshot/scenes-from-a-marriage-1974-medium-screenshot1.jpg

172.67.202.34

26 kB

URL
en.yts-official.mx/movies/screenshot/scenes-from-a-marriage-1974-medium-screenshot1.jpg
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x260, components 3
Size
26 kB (25714 bytes)
Hash
26036ce6c917d9a21163e83dc5399a00
eaa6161ffe13a8645a1717b542c51fd803536705
52d86995eaf3bdbb678340f971723e609099f61fbe59b09ca7a2d93ac613a2ad

HTTP Headers

GET /movies/screenshot/scenes-from-a-marriage-1974-medium-screenshot1.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: image/jpeg
content-length: 25714
last-modified: Thu, 28 Oct 2021 22:18:51 GMT
etag: "617b21cb-6472"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Fj%2FyMmDDWmMMEDKoKS2B4djBMxFy%2FKKMpF9VZb0F3sMlKcXwcgSfIptjwOTDqtcOq%2F9ixt%2B6cr5jNX6M2FnVyaMEnaTLIOlzed%2FFpATOXy%2BUSw8chHnYxsx3uetGSJFyQxLRSI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737a6c0e5685-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/poster/the-art-of-the-steal-2013.jpg?v=1

172.67.202.34

22 kB

URL
en.yts-official.mx/movies/poster/the-art-of-the-steal-2013.jpg?v=1
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3
Size
22 kB (22496 bytes)
Hash
47994f705635e218019ebc8b1288c7b1
5c9b9ab5562b943caa29f51032e340a94548c6e9
b2fa963ce7d124718027e66a78daa048ca7b1e0bcae90beb4004cc284ef9ebfa

HTTP Headers

GET /movies/poster/the-art-of-the-steal-2013.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: image/jpeg
content-length: 22496
last-modified: Thu, 28 Oct 2021 10:55:28 GMT
etag: "617a81a0-57e0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vLUjI9YkoFemMDPwuIkiq6jDNtSbrSHCASvpYQihicYfnm0zTUEkA1oKhU4m1nBU66330LRCRNL0p055fosUcd6hTVcO492ghqU1zSybKhhsqZiZEUcdRcIDiLuFUb1Jwp%2Bkiqs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737a6c075685-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/movies/screenshot/scenes-from-a-marriage-1974-medium-screenshot3.jpg

172.67.202.34

22 kB

URL
en.yts-official.mx/movies/screenshot/scenes-from-a-marriage-1974-medium-screenshot3.jpg
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x260, components 3
Size
22 kB (21809 bytes)
Hash
203357e3b10acc2287cd540476b0d9a4
877f0d338ee2f728fca40bb44a81d6904ac102ef
2cd1c3d44ba4e71421f8da3eb6484690f78fed904397ad41767a575d0063d718

HTTP Headers

GET /movies/screenshot/scenes-from-a-marriage-1974-medium-screenshot3.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: image/jpeg
content-length: 21809
last-modified: Thu, 28 Oct 2021 22:18:54 GMT
etag: "617b21ce-5531"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zXAepYFosUx4lgmCaHg3DWjj6R%2BTkZnvHmMKLo66Ka1bgt10ovPEv5Scwt2PzTE3GaWOtAtoRN%2BatP22Y4qJoNVN6E%2BU%2B%2BMM3NgqsG0GZkpzzUtnw2MUZtjTr8gnJapsy74EtBY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737a6c115685-OSL
alt-svc: h3=":443"; ma=86400

accountantpacketassail.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js

172.240.108.84

16 kB

URL
accountantpacketassail.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js
IP
172.240.108.84:0
ASN
#7979 SERVERS-COM

File type
JavaScript source, ASCII text, with very long lines (44039), with no line terminators
Size
16 kB (15789 bytes)
Hash
17283b861c55248988faade6741124c1
ea5c498817951fcf7a3518b02068af5d5d2b28fe
c9005ebcb251319bdeb631598fb620206c9f2c467a1ed0aa0be7bcfa33c73fa4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js HTTP/1.1
Host: accountantpacketassail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: aad790082042c85cabed9dd3b26e6df2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

accountantpacketassail.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js

172.240.108.84

30 kB

URL
accountantpacketassail.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js
IP
172.240.108.84:0
ASN
#7979 SERVERS-COM

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
30 kB (29755 bytes)
Hash
63431b20ffca40d1e5210a11ff0ad82f
4d73df32dff11c8b105f758244759485ed80c813
3b96749f84cc49024b5e0323afdf05b57d24f4b9e2bf305cf8259b06ea44ef13

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /b1/27/0e/b1270e96b85c3dd200807d09a940c676.js HTTP/1.1
Host: accountantpacketassail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4fb5be7b2528176bffcfcf9f0c73e671
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

en.yts-official.mx/movies/cover/scenes-from-a-marriage-1974.jpg

172.67.202.34

41 kB

URL
en.yts-official.mx/movies/cover/scenes-from-a-marriage-1974.jpg
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 896x666, components 3
Size
41 kB (41252 bytes)
Hash
8f8d1b0d436d94c2cecc56c133c11a1c
a3ff121dbe2b9d285d3adde217e0d918bb4aaa1c
4ece008658c24cc53f0f6741d6b1e70aa7dc669cfde59f12450c9a401705fc01

HTTP Headers

GET /movies/cover/scenes-from-a-marriage-1974.jpg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:52 GMT
content-type: image/jpeg
content-length: 41252
last-modified: Thu, 28 Oct 2021 22:18:51 GMT
etag: "617b21cb-a124"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iKJkgL27khF5vyPXlgbygzcPAXyv5otO6R2pgN96bvrRdHOc32z2DKDDew1EVkrp%2FFnbHABfntHUZrthFfy%2FpkmN3kRytv0bP7bDxFNBH8oWQmdz8WAPpuScKt%2FKA2tqAVOOMVk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737b8de65685-OSL
alt-svc: h3=":443"; ma=86400

proftrafficcounter.com/stats

18.196.110.226

40 B

URL
proftrafficcounter.com/stats
IP
18.196.110.226:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
68f65f1b35cb20d67edd88e7a98c4989
b2ffbcae1ac79caa01a4aaa327d2a0ab9222289c
6cadfb92a3a2f8ab093efa2e8228602dac55dda1ed12cb18ba7b53b7fe4e1844

HTTP Headers

GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 11:52:52 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://en.yts-official.mx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=0a66262c-aab8-45ba-aa06-bb907b3be376:2:1; expires=Sun, 16 Apr 2034 11:52:52 GMT; secure; SameSite=None
X-Firefox-Spdy: h2

proftrafficcounter.com/stats

18.196.110.226

40 B

URL
proftrafficcounter.com/stats
IP
18.196.110.226:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
0c874ecf57b5d5c767415b43c2e37942
fa8cd25f7569ad640752a1194f4f4029e3ebefc0
390a811414f0dd5d9ea764bdd3321dec754246bb48ba36b4c2457ffab5428dc6

HTTP Headers

GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 11:52:52 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://en.yts-official.mx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=d9ccba16-0c48-45fd-bbbd-8d3e59a49143:1:1; expires=Sun, 16 Apr 2034 11:52:52 GMT; secure; SameSite=None
X-Firefox-Spdy: h2

piledchinpitiful.com/pixel/purst?dl=0&th=0&sc=0&rs=1062&rd=1062&fd=552&bv=24.4.2204&tmpl=70

172.240.108.84

0 B

URL
piledchinpitiful.com/pixel/purst?dl=0&th=0&sc=0&rs=1062&rd=1062&fd=552&bv=24.4.2204&tmpl=70
IP
172.240.108.84:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/purst?dl=0&th=0&sc=0&rs=1062&rd=1062&fd=552&bv=24.4.2204&tmpl=70 HTTP/1.1
Host: piledchinpitiful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

capaciousdrewreligion.com/advertisers.js

192.243.59.13

0 B

URL
capaciousdrewreligion.com/advertisers.js
IP
192.243.59.13:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 18 Apr 2024 11:52:52 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ae87e4e90c81140133811cf9537f1c6a
Strict-Transport-Security: max-age=0; includeSubdomains

en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png

172.67.202.34

7.0 kB

URL
en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced
Size
7.0 kB (6973 bytes)
Hash
f87afcf11d459620ff02da6112365db2
d09e6d4e7db706569474bfb7ec93f31ccbd6ed69
a70913fad67537f16d871e4c456c8f4484106f6d4ef3e12fa3c3b2eceefee508

HTTP Headers

GET /static/yts/image/apple-touch-icon-180x180.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=d9ccba16-0c48-45fd-bbbd-8d3e59a49143%3A1%3A1; pp_main_b1270e96b85c3dd200807d09a940c676=1; sb_page_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_onpage_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_main_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_count_0a2f9bfefa2d59b6782f748beec9f30e=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:52 GMT
content-type: image/png
content-length: 6973
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-1b3d"
expires: Sat, 20 Apr 2024 16:21:42 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2403070
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a80SaSnGtJlgw0%2BkUKIVI622AS%2BKWAJnWJdz%2BusR6Kq3Dx135zcz%2F8h%2BBVCVUca4MtDELgH6hujzmfs0T%2FfZplcB6V9%2F4SstCiSHakgGV68VtI2qOS4TKVAI1HHPux%2B8LV4nuMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87647382eb795685-OSL
alt-svc: h3=":443"; ma=86400

en.yts-official.mx/static/yts/image/favicon-16x16.png

172.67.202.34

619 B

URL
en.yts-official.mx/static/yts/image/favicon-16x16.png
IP
172.67.202.34:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Size
619 B (619 bytes)
Hash
ea830fdd4f9a6d19aa7455dabdac987a
b0d567d6b4d40959e1bd44032f6bc2331057b319
71148160c085a70d1af7708c1d52cfcf39f8ef6e4ce13f0f20c080b2e19195db

HTTP Headers

GET /static/yts/image/favicon-16x16.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=d9ccba16-0c48-45fd-bbbd-8d3e59a49143%3A1%3A1; pp_main_b1270e96b85c3dd200807d09a940c676=1; sb_page_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_onpage_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_main_0a2f9bfefa2d59b6782f748beec9f30e=1; sb_count_0a2f9bfefa2d59b6782f748beec9f30e=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:52 GMT
content-type: image/png
content-length: 619
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-26b"
expires: Sat, 20 Apr 2024 18:43:23 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2394569
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JqQNVkRJV4clrl4onVTpiy1SDkoY%2BfKktaBAf9gYxbybgeelbGv0uRE9MrEEBTzgKFnzxIBlVZ6t2sB5RbSyNQy9Ga2Z3Uyfx91KUJzxbV6Hvr1SS3iawC1kqoQJyg42o9CnPcc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87647382eb7b5685-OSL
alt-svc: h3=":443"; ma=86400

domesticsomebody.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=0a66262c-aab8-45ba-aa06-bb907b3be376%3A2%3A1

172.240.108.68

8.2 kB

URL
domesticsomebody.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=0a66262c-aab8-45ba-aa06-bb907b3be376%3A2%3A1
IP
172.240.108.68:0
ASN
#7979 SERVERS-COM

File type
JSON text data
Size
8.2 kB (8150 bytes)
Hash
26a596e7a8e551f44557058d9b3e6927
d53d051790f0b751857ecbba2fa9bfeb3d0c4226
61e279a53caace771015f46677468a25fd313438048495c877bd53cfb52fa4eb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&uuid=0a66262c-aab8-45ba-aa06-bb907b3be376%3A2%3A1 HTTP/1.1
Host: domesticsomebody.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:53 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://en.yts-official.mx
Access-Control-Allow-Origin: https://en.yts-official.mx
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16587847; expires=Fri, 19 Apr 2024 11:52:53 GMT; secure; SameSite=None
uid_id2=0a66262c-aab8-45ba-aa06-bb907b3be376:2:1; expires=Thu, 25 Apr 2024 11:52:53 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 19 Apr 2024 11:52:53 GMT; secure; SameSite=None
uncs=1; expires=Fri, 19 Apr 2024 11:52:53 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 19 Apr 2024 11:52:53 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 19 Apr 2024 11:52:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 072c8cf036f5ebac845932a8605df8a4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

domesticsomebody.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwYscxReunuzv8EMQlByUKIzgIYI7290z0zNjDsEYN6yu2SWJ6E2quqpny63paqq6pmf3tBiQHEdBvPZ%2Bs5tFDZJcBYPMBjwsCDue9uBe%2FA8UclNkxsHRd6j3Xn1fUV999T7dd%2BckhKNn19%2FTu1IputKs%2BdXLHwbBleq6TN2gOmhHH0WNK1XTf6MT1fzXqjdEvK1XQj%2Fw%2FcAPqqvSiEQPVqYgZPagE9Q6fq0R1oJmAwPz3946D5Z64P1z8jwknyw98S5CxmOkvYfXhd3Odfb62z2naK4N%2Bvzo%2FXQ71UWK3qJMjIckPZqzoe3p6mPo9HAmF7r%2FD5HJCfF%2BfAyWHs1FgvUPZjqZgkjB%2BDMo%2BmMINYakY8T6LiQ%2FJUDMcXMDae%2F%2BTW0KuvM3SqfohCw9%2FR2ymJClXy4i7X17TclB9bZWLpc6tRgkJeRgDNkdI3PHyHcrkMUx4vwTSP4TWXm6jrR3sGGVhuRnr%2Fo0isIojJcpZe3lRpPRZUr9aJmxjt9idSbqrWhmkJRjyGQMJYagtgJnPTjpwSUeXOahx8%2BqcRAELZ%2FH1G934rjOW4JF3A9oKwlo4EdtuHj6hiHybIhYDRGbPWRmD9vys9PmOzDuB9itEpZ7sDlBn5coBEFhCQpKUEiCIico%2BuUhVza05X2urGPBPIfzXC9HOu%2Fu00Odd0VKQM0Qhpf72Tl5bubhHy%2FdwLY4q%2Fo0TDosEQkNebPDolY7TFqNNhMi7iR1X8DKEtJWQK2HXTkhL669gExOyP%2B%2B%2FBOMHsOqY8TSA3UvgxYl6FaJ3fRoJ7c1nQpwXSLLl5DvePvqnFyaXb628QgiPrn6a30WiE2JzJT4WD4h6Kp7o1u6IAe3dGHJo40slz25S6efezunubjw9btip9CGr123w6%2FejKfAtHxwR9h8naZcpl1LvrkmORdmVZtYkO%2FX7AeCbTq7dc2Z1GXrm2%2BtrvUyI6yVOh2DTuf0N4NYTsizl%2B7M5vbyd5uQZgzjSvTcCZkHpB4jzvZgs4V%2BqwmMWnBY5qFw5ciEbLGpJIESi56yEvZfPVvUI0Onp6ks9%2B09dE0FNL%2BLtFeib0r0VQmqhrDuwijPzMnVn%2BcymKqMmDKVA6aM%2Bnxm83R5CCvPqq163adRpxm0WlS0WCNsJ1HAKQ0bURhFtI7cTpJX%2Fv%2FFXwAAAP%2F%2FAQAA%2F%2F8awbHHkQQAAA%3D%3D

172.240.108.68

200 OK

7 B

URL GET HTTP/1.1
domesticsomebody.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwYscxReunuzv8EMQlByUKIzgIYI7290z0zNjDsEYN6yu2SWJ6E2quqpny63paqq6pmf3tBiQHEdBvPZ%2Bs5tFDZJcBYPMBjwsCDue9uBe%2FA8UclNkxsHRd6j3Xn1fUV999T7dd%2BckhKNn19%2FTu1IputKs%2BdXLHwbBleq6TN2gOmhHH0WNK1XTf6MT1fzXqjdEvK1XQj%2Fw%2FcAPqqvSiEQPVqYgZPagE9Q6fq0R1oJmAwPz3946D5Z64P1z8jwknyw98S5CxmOkvYfXhd3Odfb62z2naK4N%2Bvzo%2FXQ71UWK3qJMjIckPZqzoe3p6mPo9HAmF7r%2FD5HJCfF%2BfAyWHs1FgvUPZjqZgkjB%2BDMo%2BmMINYakY8T6LiQ%2FJUDMcXMDae%2F%2BTW0KuvM3SqfohCw9%2FR2ymJClXy4i7X17TclB9bZWLpc6tRgkJeRgDNkdI3PHyHcrkMUx4vwTSP4TWXm6jrR3sGGVhuRnr%2Fo0isIojJcpZe3lRpPRZUr9aJmxjt9idSbqrWhmkJRjyGQMJYagtgJnPTjpwSUeXOahx8%2BqcRAELZ%2FH1G934rjOW4JF3A9oKwlo4EdtuHj6hiHybIhYDRGbPWRmD9vys9PmOzDuB9itEpZ7sDlBn5coBEFhCQpKUEiCIico%2BuUhVza05X2urGPBPIfzXC9HOu%2Fu00Odd0VKQM0Qhpf72Tl5bubhHy%2FdwLY4q%2Fo0TDosEQkNebPDolY7TFqNNhMi7iR1X8DKEtJWQK2HXTkhL669gExOyP%2B%2B%2FBOMHsOqY8TSA3UvgxYl6FaJ3fRoJ7c1nQpwXSLLl5DvePvqnFyaXb628QgiPrn6a30WiE2JzJT4WD4h6Kp7o1u6IAe3dGHJo40slz25S6efezunubjw9btip9CGr123w6%2FejKfAtHxwR9h8naZcpl1LvrkmORdmVZtYkO%2FX7AeCbTq7dc2Z1GXrm2%2BtrvUyI6yVOh2DTuf0N4NYTsizl%2B7M5vbyd5uQZgzjSvTcCZkHpB4jzvZgs4V%2BqwmMWnBY5qFw5ciEbLGpJIESi56yEvZfPVvUI0Onp6ks9%2B09dE0FNL%2BLtFeib0r0VQmqhrDuwijPzMnVn%2BcymKqMmDKVA6aM%2Bnxm83R5CCvPqq163adRpxm0WlS0WCNsJ1HAKQ0bURhFtI7cTpJX%2Fv%2FFXwAAAP%2F%2FAQAA%2F%2F8awbHHkQQAAA%3D%3D
IP
172.240.108.68:443
ASN
#7979 SERVERS-COM

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerLet's Encrypt
Subjectdomesticsomebody.com
FingerprintE3:47:1B:C4:87:61:83:51:2D:E0:A2:0A:DE:A8:8B:D0:88:81:A9:9A
ValidityTue, 16 Apr 2024 10:14:06 GMT - Mon, 15 Jul 2024 10:14:05 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSwYscxReunuzv8EMQlByUKIzgIYI7290z0zNjDsEYN6yu2SWJ6E2quqpny63paqq6pmf3tBiQHEdBvPZ%2Bs5tFDZJcBYPMBjwsCDue9uBe%2FA8UclNkxsHRd6j3Xn1fUV999T7dd%2BckhKNn19%2FTu1IputKs%2BdXLHwbBleq6TN2gOmhHH0WNK1XTf6MT1fzXqjdEvK1XQj%2Fw%2FcAPqqvSiEQPVqYgZPagE9Q6fq0R1oJmAwPz3946D5Z64P1z8jwknyw98S5CxmOkvYfXhd3Odfb62z2naK4N%2Bvzo%2FXQ71UWK3qJMjIckPZqzoe3p6mPo9HAmF7r%2FD5HJCfF%2BfAyWHs1FgvUPZjqZgkjB%2BDMo%2BmMINYakY8T6LiQ%2FJUDMcXMDae%2F%2BTW0KuvM3SqfohCw9%2FR2ymJClXy4i7X17TclB9bZWLpc6tRgkJeRgDNkdI3PHyHcrkMUx4vwTSP4TWXm6jrR3sGGVhuRnr%2Fo0isIojJcpZe3lRpPRZUr9aJmxjt9idSbqrWhmkJRjyGQMJYagtgJnPTjpwSUeXOahx8%2BqcRAELZ%2FH1G934rjOW4JF3A9oKwlo4EdtuHj6hiHybIhYDRGbPWRmD9vys9PmOzDuB9itEpZ7sDlBn5coBEFhCQpKUEiCIico%2BuUhVza05X2urGPBPIfzXC9HOu%2Fu00Odd0VKQM0Qhpf72Tl5bubhHy%2FdwLY4q%2Fo0TDosEQkNebPDolY7TFqNNhMi7iR1X8DKEtJWQK2HXTkhL669gExOyP%2B%2B%2FBOMHsOqY8TSA3UvgxYl6FaJ3fRoJ7c1nQpwXSLLl5DvePvqnFyaXb628QgiPrn6a30WiE2JzJT4WD4h6Kp7o1u6IAe3dGHJo40slz25S6efezunubjw9btip9CGr123w6%2FejKfAtHxwR9h8naZcpl1LvrkmORdmVZtYkO%2FX7AeCbTq7dc2Z1GXrm2%2BtrvUyI6yVOh2DTuf0N4NYTsizl%2B7M5vbyd5uQZgzjSvTcCZkHpB4jzvZgs4V%2BqwmMWnBY5qFw5ciEbLGpJIESi56yEvZfPVvUI0Onp6ks9%2B09dE0FNL%2BLtFeib0r0VQmqhrDuwijPzMnVn%2BcymKqMmDKVA6aM%2Bnxm83R5CCvPqq163adRpxm0WlS0WCNsJ1HAKQ0bURhFtI7cTpJX%2Fv%2FFXwAAAP%2F%2FAQAA%2F%2F8awbHHkQQAAA%3D%3D HTTP/1.1
Host: domesticsomebody.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=0a66262c-aab8-45ba-aa06-bb907b3be376:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:53 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2331179f16ea960b176857d77a396b70
Strict-Transport-Security: max-age=0; includeSubdomains

domesticsomebody.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html&l=1325&fd=80

172.240.108.68

200 OK

0 B

URL GET HTTP/1.1
domesticsomebody.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html&l=1325&fd=80
IP
172.240.108.68:443
ASN
#7979 SERVERS-COM

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerLet's Encrypt
Subjectdomesticsomebody.com
FingerprintE3:47:1B:C4:87:61:83:51:2D:E0:A2:0A:DE:A8:8B:D0:88:81:A9:9A
ValidityTue, 16 Apr 2024 10:14:06 GMT - Mon, 15 Jul 2024 10:14:05 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html&l=1325&fd=80 HTTP/1.1
Host: domesticsomebody.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=0a66262c-aab8-45ba-aa06-bb907b3be376:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/img/close.png

104.21.70.253

591 B

URL
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/img/close.png
IP
104.21.70.253:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced
Size
591 B (591 bytes)
Hash
9fd5bcb6103d86e317bd1eb019bcbe71
6b5a52ea669dcb74946f2bed4bdd7ec985026113
0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae

HTTP Headers

GET /sb/ssp/vpn/classic-push/small/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:53 GMT
content-type: image/png
content-length: 591
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: "65aa84fe-24f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5525266
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aUR9sfLBQSifzKEb5xeZn4qp5kHyyTVdZBCBmU0tgjx3i4gvqYyR00JhDYtcLn9AteMhk24j01gZZVzGYb0r55HTKAlQtH7elPTLMqR8%2FqwGB5VVmJb%2BDhU1ElVjya0PkYi2UW3CLVu%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87647385f836b517-OSL
alt-svc: h3=":443"; ma=86400

unseenreport.com/pxf.gif?uuid=d9ccba16-0c48-45fd-bbbd-8d3e59a49143&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=11

192.243.61.227

1 B

URL
unseenreport.com/pxf.gif?uuid=d9ccba16-0c48-45fd-bbbd-8d3e59a49143&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=11
IP
192.243.61.227:0
ASN
#39572 DataWeb Global Group B.V.

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pxf.gif?uuid=d9ccba16-0c48-45fd-bbbd-8d3e59a49143&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=11 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:53 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0b9eceaac9e005384ac8ed9f103ff7ca
Strict-Transport-Security: max-age=0; includeSubdomains

cdn.barscreative1.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html

45.133.44.4

2.0 kB

URL
cdn.barscreative1.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html
IP
45.133.44.4:0
ASN
#39572 DataWeb Global Group B.V.

File type
gzip compressed data, from Unix
Size
2.0 kB (2001 bytes)
Hash
87786985c68caf30afce08015d2ff2e5
88ff3ec6816b0de09d4d3fb9c13554f08405f4bd
067c9c3af8ab5a4c65c8d4f0b5eba0536cc4753d94527b93c6a3cb11bcab81c7

HTTP Headers

GET /sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 11:52:53 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Mon, 27 Sep 2021 07:43:24 GMT
etag: W/"6151761c-52d"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Thu, 18 Apr 2024 12:52:53 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext

142.250.74.106

200 OK

790 B

URL GET HTTP/2
fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
ASCII text
Size
790 B (790 bytes)
Hash
5a1591d7dd21cace3d3528897328ff82
d1b4cfb094780e7358e7af7711275a9ab822a495
e1942a4751e00b537416cfb3eb6f1f399104fb3d5311a14ff87aaebdcea8196a

HTTP Headers

GET /css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 11:52:51 GMT
date: Thu, 18 Apr 2024 11:52:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

unseenreport.com/pxf.gif?uuid=d9ccba16-0c48-45fd-bbbd-8d3e59a49143&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=11

192.243.61.227

200 OK

1 B

URL GET HTTP/1.1
unseenreport.com/pxf.gif?uuid=d9ccba16-0c48-45fd-bbbd-8d3e59a49143&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=11
IP
192.243.61.227:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13
ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pxf.gif?uuid=d9ccba16-0c48-45fd-bbbd-8d3e59a49143&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=11 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:53 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 995cdfe6c9162749fb937e0342612d43
Strict-Transport-Security: max-age=0; includeSubdomains

cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/animate.css

104.21.70.253

200 OK

21 kB

URL GET HTTP/2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/animate.css
IP
104.21.70.253:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
ASCII text
Size
21 kB (20962 bytes)
Hash
3d4123dbfb33d27a5cfdfcfa91df6783
e7d0eeeec54b848f0bc3da8685fa3bc88429d660
cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887

HTTP Headers

GET /sb/ssp/vpn/classic-push/small/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 11:52:53 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-13361"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 28570
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LuE9n2nbI99XuU%2B9b9EZIbbZSVW9d5pmOPGsGMuOLLQNcXHXK5iZ%2ByaQeBvEcE3T7sO1gvMYZNJ6EMsYtbu07kpRWJFflNco%2F8qejOFXJI77XFtGDeGZpvPWNHO5B%2BJa8FQncd3u4mSc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876473856dd3b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

domesticsomebody.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js&l=962&fd=12

172.240.108.68

0 B

URL
domesticsomebody.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js&l=962&fd=12
IP
172.240.108.68:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js&l=962&fd=12 HTTP/1.1
Host: domesticsomebody.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=0a66262c-aab8-45ba-aa06-bb907b3be376:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/style.css

104.21.70.253

200 OK

961 B

URL GET HTTP/2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/small/css/style.css
IP
104.21.70.253:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
ASCII text
Size
961 B (961 bytes)
Hash
039a6734d79ed9aa51cf81c52479c5fe
9cf29c4ea1a3880681d50c7228374f8073b7778b
a15bad73fc8907795285b78a4a1a1bf5e7f68b4d39988b9bb165444819cf9eb1

HTTP Headers

GET /sb/ssp/vpn/classic-push/small/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 11:52:53 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-d1b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 28570
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u20igZTgFTIZ0JI8OGUCqbLLrtDTizv2McNe2A7UEPhc4QHNDomVVbfU%2B2zpxDC52ZBvkMgj0VCfTbjcZ5FpxCsRgFACyreqhMfk6RZlJWGKjd7prxHyEbMB2g05RU%2FSKlJeaBROIATr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876473856deab500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

142.250.74.99

16 kB

URL
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
142.250.74.99:0
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 10:46:32 GMT
expires: Wed, 16 Apr 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 176781
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.99

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:37:01 GMT
expires: Fri, 18 Apr 2025 02:37:01 GMT
cache-control: public, max-age=31536000
age: 33352
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

domesticsomebody.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzYtcxRet15nf4ocgKFkoUWjBRQSn573%2BbrMIxjhhdMwMSUR3Ul%2Bvp5zqV4%2BqV%2F16ZjUYkCxbQdy%2BOT2TQQ2SbAWD9ARcDAjTrmbhbPwPFLJTpNvG1ruoe2%2BdU9SpU%2FfTfX9OqvD07Pp7ZldpTVcalbB8%2BcMoulJeV4kflAft5kfN%2BpWy7b%2FRaVbC18o3JN82K9UwCsMojMqrysrYDFamIFT6oBNVOmGlXq1EjToG9r%2B98wEcDSD65%2BR5KDFZehJchOJjJL2H16Xbzkz6%2Bts9r2lmLPri6P1kOzF5gt6ijG2AODmas2Hc6epjmORwJhem%2Fw%2BRqQkJfnwMlhzNRYL1D2Y6mYZMwMQzyPtjSD2GomNwcxdKnBKAC9zcQNK7f9PYnO78jdIpOiFLT3%2BHyidk6ZeLSHrfXtNqUL5ttM%2BUSRwGcQE1GEN1x0j9MbLdElR%2BDJ59AiV%2BIitP15H0DjacNlDi7NWQNpvVZpUvU8ray%2FUGo8uUhs1lxjphi9WYrLWaM4OUGkPFY2g5BHUleBfAqwA%2BDuDTAD1xVuZRFLVCwWnY7nBeEy3JmiKMaCuOaBQ22%2FB8%2BoYhsnQIrofgdg%2Bp3cO2%2Buy08Q6s%2FwFuq4ATAVxG0BcFckmQO4KcEuSKIM8I8n5xKLSruuK%2B0M6zaJ6r81wrRibr7tNDk3VlQkDtEFYU%2B%2Bk5eW7m4R8v3cC2PCuHtBp3WCxjWhWNDmu22tW4VW8zKXknroUSThVQrgTqAuyqCXlx7QWkakL%2B9%2BWfYPQYTh%2BDqwDUvwyaF6BbBXaTo53MVUwiIUyBNFtCthPs63NyaXb52sYjSH5y9dfaLMBtgdQW%2BFg9Iejqe6NbJicHt0zuyKONNFM9tUunn3s7o5m88PW7cic3Vqxdd8Ov3uRTYFo%2BuCNdtk4ToZKuI99cU0JIu2osl%2BT7NfeBZJvebV3zNvHp%2BuZbq2u91ErnlEnGoNM5%2Fc2Cqwl59tKd2dxe%2Fm4Tyo5hfYGePyHzgDJj8HQPLl3od4bA6gWHpQFyX4xslS02tSLQctFTVsD9q2eLemTp9DRVxb67h64tgWZ3kfQK9G2Bvi5A9RDOXxhlqT25%2BvNcBtOlEdO2dMC01Z%2FPbJ4uD%2BHUWbkWihaTsWwxWW%2FUY8kFazRYyGPOaqLd5sjcJH7l%2F1%2F8BQAA%2F%2F8BAAD%2F%2F5oVZC%2BRBAAA

172.240.108.68

7 B

URL
domesticsomebody.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzYtcxRet15nf4ocgKFkoUWjBRQSn573%2BbrMIxjhhdMwMSUR3Ul%2Bvp5zqV4%2BqV%2F16ZjUYkCxbQdy%2BOT2TQQ2SbAWD9ARcDAjTrmbhbPwPFLJTpNvG1ruoe2%2BdU9SpU%2FfTfX9OqvD07Pp7ZldpTVcalbB8%2BcMoulJeV4kflAft5kfN%2BpWy7b%2FRaVbC18o3JN82K9UwCsMojMqrysrYDFamIFT6oBNVOmGlXq1EjToG9r%2B98wEcDSD65%2BR5KDFZehJchOJjJL2H16Xbzkz6%2Bts9r2lmLPri6P1kOzF5gt6ijG2AODmas2Hc6epjmORwJhem%2Fw%2BRqQkJfnwMlhzNRYL1D2Y6mYZMwMQzyPtjSD2GomNwcxdKnBKAC9zcQNK7f9PYnO78jdIpOiFLT3%2BHyidk6ZeLSHrfXtNqUL5ttM%2BUSRwGcQE1GEN1x0j9MbLdElR%2BDJ59AiV%2BIitP15H0DjacNlDi7NWQNpvVZpUvU8ray%2FUGo8uUhs1lxjphi9WYrLWaM4OUGkPFY2g5BHUleBfAqwA%2BDuDTAD1xVuZRFLVCwWnY7nBeEy3JmiKMaCuOaBQ22%2FB8%2BoYhsnQIrofgdg%2Bp3cO2%2Buy08Q6s%2FwFuq4ATAVxG0BcFckmQO4KcEuSKIM8I8n5xKLSruuK%2B0M6zaJ6r81wrRibr7tNDk3VlQkDtEFYU%2B%2Bk5eW7m4R8v3cC2PCuHtBp3WCxjWhWNDmu22tW4VW8zKXknroUSThVQrgTqAuyqCXlx7QWkakL%2B9%2BWfYPQYTh%2BDqwDUvwyaF6BbBXaTo53MVUwiIUyBNFtCthPs63NyaXb52sYjSH5y9dfaLMBtgdQW%2BFg9Iejqe6NbJicHt0zuyKONNFM9tUunn3s7o5m88PW7cic3Vqxdd8Ov3uRTYFo%2BuCNdtk4ToZKuI99cU0JIu2osl%2BT7NfeBZJvebV3zNvHp%2BuZbq2u91ErnlEnGoNM5%2Fc2Cqwl59tKd2dxe%2Fm4Tyo5hfYGePyHzgDJj8HQPLl3od4bA6gWHpQFyX4xslS02tSLQctFTVsD9q2eLemTp9DRVxb67h64tgWZ3kfQK9G2Bvi5A9RDOXxhlqT25%2BvNcBtOlEdO2dMC01Z%2FPbJ4uD%2BHUWbkWihaTsWwxWW%2FUY8kFazRYyGPOaqLd5sjcJH7l%2F1%2F8BQAA%2F%2F8BAAD%2F%2F5oVZC%2BRBAAA
IP
172.240.108.68:0
ASN
#7979 SERVERS-COM

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzYtcxRet15nf4ocgKFkoUWjBRQSn573%2BbrMIxjhhdMwMSUR3Ul%2Bvp5zqV4%2BqV%2F16ZjUYkCxbQdy%2BOT2TQQ2SbAWD9ARcDAjTrmbhbPwPFLJTpNvG1ruoe2%2BdU9SpU%2FfTfX9OqvD07Pp7ZldpTVcalbB8%2BcMoulJeV4kflAft5kfN%2BpWy7b%2FRaVbC18o3JN82K9UwCsMojMqrysrYDFamIFT6oBNVOmGlXq1EjToG9r%2B98wEcDSD65%2BR5KDFZehJchOJjJL2H16Xbzkz6%2Bts9r2lmLPri6P1kOzF5gt6ijG2AODmas2Hc6epjmORwJhem%2Fw%2BRqQkJfnwMlhzNRYL1D2Y6mYZMwMQzyPtjSD2GomNwcxdKnBKAC9zcQNK7f9PYnO78jdIpOiFLT3%2BHyidk6ZeLSHrfXtNqUL5ttM%2BUSRwGcQE1GEN1x0j9MbLdElR%2BDJ59AiV%2BIitP15H0DjacNlDi7NWQNpvVZpUvU8ray%2FUGo8uUhs1lxjphi9WYrLWaM4OUGkPFY2g5BHUleBfAqwA%2BDuDTAD1xVuZRFLVCwWnY7nBeEy3JmiKMaCuOaBQ22%2FB8%2BoYhsnQIrofgdg%2Bp3cO2%2Buy08Q6s%2FwFuq4ATAVxG0BcFckmQO4KcEuSKIM8I8n5xKLSruuK%2B0M6zaJ6r81wrRibr7tNDk3VlQkDtEFYU%2B%2Bk5eW7m4R8v3cC2PCuHtBp3WCxjWhWNDmu22tW4VW8zKXknroUSThVQrgTqAuyqCXlx7QWkakL%2B9%2BWfYPQYTh%2BDqwDUvwyaF6BbBXaTo53MVUwiIUyBNFtCthPs63NyaXb52sYjSH5y9dfaLMBtgdQW%2BFg9Iejqe6NbJicHt0zuyKONNFM9tUunn3s7o5m88PW7cic3Vqxdd8Ov3uRTYFo%2BuCNdtk4ToZKuI99cU0JIu2osl%2BT7NfeBZJvebV3zNvHp%2BuZbq2u91ErnlEnGoNM5%2Fc2Cqwl59tKd2dxe%2Fm4Tyo5hfYGePyHzgDJj8HQPLl3od4bA6gWHpQFyX4xslS02tSLQctFTVsD9q2eLemTp9DRVxb67h64tgWZ3kfQK9G2Bvi5A9RDOXxhlqT25%2BvNcBtOlEdO2dMC01Z%2FPbJ4uD%2BHUWbkWihaTsWwxWW%2FUY8kFazRYyGPOaqLd5sjcJH7l%2F1%2F8BQAA%2F%2F8BAAD%2F%2F5oVZC%2BRBAAA HTTP/1.1
Host: domesticsomebody.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=0a66262c-aab8-45ba-aa06-bb907b3be376:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:53 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c7b4d92879bd0ec00e839989e417bc94
Strict-Transport-Security: max-age=0; includeSubdomains

domesticsomebody.com/pixel/sbs?c=1

172.240.127.234

0 B

URL
domesticsomebody.com/pixel/sbs?c=1
IP
172.240.127.234:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/sbs?c=1 HTTP/1.1
Host: domesticsomebody.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=0a66262c-aab8-45ba-aa06-bb907b3be376:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

domesticsomebody.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css&l=3355&fd=55

172.240.108.68

200 OK

0 B

URL GET HTTP/1.1
domesticsomebody.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css&l=3355&fd=55
IP
172.240.108.68:443
ASN
#7979 SERVERS-COM

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerLet's Encrypt
Subjectdomesticsomebody.com
FingerprintE3:47:1B:C4:87:61:83:51:2D:E0:A2:0A:DE:A8:8B:D0:88:81:A9:9A
ValidityTue, 16 Apr 2024 10:14:06 GMT - Mon, 15 Jul 2024 10:14:05 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css&l=3355&fd=55 HTTP/1.1
Host: domesticsomebody.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; uid_id2=0a66262c-aab8-45ba-aa06-bb907b3be376:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 11:52:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

downstairsnegotiatebarren.com/sfp.js

188.114.97.1

200 OK

86 kB

URL GET HTTP/2
downstairsnegotiatebarren.com/sfp.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerLet's Encrypt
Subjectdownstairsnegotiatebarren.com
Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44
ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT

File type

Size
86 kB (85611 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 11:52:52 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: a977212a1454aae4a98bbcc0cb62a7e4
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 18 Apr 2024 11:52:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jwa6Z2F1YtahZY7db0kIzCuHIyX6LS74sdCvQwqeSrgAhBGQuPQ4aZ5WnM4Ii%2Fu2wgX7HvcM8vF5lfA2ZZPTryP9KhEjdjPSeP8Xu6zIC6E%2FWepP0nXoy3OoKZwRwqwE2bYqUR2eXJkFGMqW657Hmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737e1fbf569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

en.yts-official.mx/static/yts/style/minified.css

172.67.202.34

200 OK

120 kB

URL GET HTTP/3
en.yts-official.mx/static/yts/style/minified.css
IP
172.67.202.34:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
ASCII text, with very long lines (57475)
Size
120 kB (119843 bytes)
Hash
a314b10e99529c56373ebff456f96618
89369052969ff4793a3c290593b5ded5d2d3e6d7
e043e009630de7fdb24141cd7e788e91a7978880af7730e0f8f97bf41c2cd549

HTTP Headers

GET /static/yts/style/minified.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 08:38:28 GMT
vary: Accept-Encoding
etag: W/"65d31384-1d423"
expires: Thu, 18 Apr 2024 18:10:15 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 20556
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b9pO5b9vvDVfaAAUTX7iP4IeMJZyge7xcfQx%2FtojfBiM1rJLSIVB%2FE%2FrMDlRA5rx4%2FGX4RQ%2FQ5DdmTgq7dMMTSfn9t0tHKzohdkFavn47AM%2FoP%2BB07OvwTsruVjEAb9BRnWxup4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8764737a5bf45685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap

142.250.74.106

200 OK

7.0 kB

URL GET HTTP/3
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
ASCII text, with very long lines (7193), with no line terminators
Size
7.0 kB (7004 bytes)
Hash
16b49a99486594c0b42d9bd7821deb2c
2fb46e5e86d6b37d4497cc04bfd89b3cb33a276a
3f3540952441e06ef81189cf63d46bac242804e386779dbb0cdd78ed10025c21

HTTP Headers

GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 11:52:53 GMT
date: Thu, 18 Apr 2024 11:52:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

en.yts-official.mx/static/yts/images/website/720p-quality.svg

172.67.202.34

200 OK

2.3 kB

URL GET HTTP/3
en.yts-official.mx/static/yts/images/website/720p-quality.svg
IP
172.67.202.34:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerGoogle Trust Services LLC
Subjectyts-official.mx
FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62
ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT

File type
SVG Scalable Vector Graphics image
Size
2.3 kB (2273 bytes)
Hash
0243315d20763efcf6b17f0d6b2ffb67
ab981c0c8a34d72f8f714be0eae96f404e434dd4
d7cccf166cfb73bded63e922e00ff99805a3ddbf0024a00904e39bdb3994f33c

HTTP Headers

GET /static/yts/images/website/720p-quality.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:52:51 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-8e1"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6565
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m3Amob0hmzD8ARPXzwm1bLtV7N%2B%2B5Y7MVgeSfppH3xV4zZZcfv0aBCsR8gKmxTeNTmOZ6mtGMZb%2B8hdKPwo%2B18aen0I0IhKz29BzF9dKyjDaMBXguTvjC7k9hh93XxwqsfxI0ow%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737b8deb5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downstairsnegotiatebarren.com/sfp.js

188.114.97.1

200 OK

86 kB

URL GET HTTP/2
downstairsnegotiatebarren.com/sfp.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://en.yts-official.mx/movies/scenes-from-a-marriage-1974/
Certificate
IssuerLet's Encrypt
Subjectdownstairsnegotiatebarren.com
Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44
ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT

File type

Size
86 kB (85611 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 11:52:52 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 0cf2a7239299e98cf7cb9db636f04381
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 18 Apr 2024 11:52:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w1cOcK9rh2omAKbB7piwV5g75AHBBJidZkYrYuCbzyYjd77Xs0ZyoGz1b%2FTntqMIsBbjUCrf21XLp1br5ZDDUhD4MovvFpiWunE7K0K3IkI0JJgM5W02Y1Jo8ccdVTuRSknMY3oIJd2fba2Jdka6CA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764737e0fac569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL