{"report_id":"a42c56a7-36be-4df3-930d-14493caa78fc","version":6,"status":"done","tags":[],"date":"2025-11-25T22:02:32Z","url":{"schema":"http","addr":"www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"104.21.70.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"title":"(1) New Message!","dom":{"size":64630,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"fc180973ef60a9f508bd0ba8277dcb4d","sha1":"2250d6f3c86d4f5829896749e341dc564ee38151","sha256":"3dc85490486da5ce80943c6860bffc1556c1e4e09c34582a3a44b8bfcb139d48","sha512":"cb315e7d97e8eb750a957dc44fbd262e0687f9a45089d0e2787f9c3ff85eab872ea20524f3be8b9e783b538156ebda05bf4a3a82092498a46738d6a307c8fd6e","ssdeep":"1536:upRpmitizbOb0HuHXFlFlFPFoWrWkt8+1:upRpmitizbOb0HuHXFlFlFPFoWd86","tlshash":"3953d05b7de1510096064229a3fe6f6c2a1c4883281ffcf9b3d115ca8f5a67c53ea61f","dom_hash":"domhash57b46785fa6786cd641ecca540fedb22","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"104.21.70.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-30T22:02:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":17}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-11-19T07:32:15.648628Z","alert_count":3,"request_count":1,"received_data":85956,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-11-19T02:16:45.643485Z","alert_count":3,"request_count":1,"received_data":530,"sent_data":771,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.yts-official.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-19","domain_rank":0,"first_seen":"2025-11-21T09:59:45.627621Z","last_seen":"2025-11-21T09:59:45.627621Z","alert_count":0,"request_count":31,"received_data":1064662,"sent_data":17366,"comment":"","tags":null,"fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"stayarchaicsuperstitious.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-10-27","domain_rank":0,"first_seen":"2025-11-22T06:38:35.250846Z","last_seen":"2025-11-22T06:38:35.250846Z","alert_count":10,"request_count":5,"received_data":92426,"sent_data":5367,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hy.outrunmost.com","ip":{"addr":"23.109.253.230","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-22","domain_rank":0,"first_seen":"2025-10-08T09:52:43.181144Z","last_seen":"2025-11-21T09:59:46.147522Z","alert_count":0,"request_count":1,"received_data":1425,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"3.69.209.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2025-11-25T17:43:17.257249Z","alert_count":0,"request_count":2,"received_data":856,"sent_data":908,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-23T22:13:29.69009Z","alert_count":0,"request_count":5,"received_data":147947,"sent_data":2713,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-11-24T08:34:43.473597Z","alert_count":1,"request_count":1,"received_data":2083,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-23T22:13:43.05661Z","alert_count":0,"request_count":2,"received_data":28033,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2025-11-24T09:38:09.917099Z","alert_count":20,"request_count":4,"received_data":2080,"sent_data":2295,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-11-24T08:34:43.339132Z","alert_count":18,"request_count":6,"received_data":184849,"sent_data":2805,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-05-13T12:48:37.574785Z","times_seen":11379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hy.outrunmost.com/rQfzqpZxhzorkupP/elLRE","fqdn":"hy.outrunmost.com","domain":"outrunmost.com","tld":"com"},"ip":{"addr":"23.109.253.230","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-13T12:47:50.068873Z","times_seen":16279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dcff6572b90a25babb8be2e3703eb97","sha1":"58ca34991d0315b9cef9bb1e9bd8ba547602e5b3","sha256":"28f374670828d65e52a411c90ba6dd9017599b26eca5ef05eb3278c2f4f81982","sha512":"c630946d69e079100d93c0042a605dec174e43445d2484c6f9e91725f96a464185daf6b6b302e9b8be210a140b9b85eacabba95d34827e087eb1930133a5d687","ssdeep":"","tlshash":"6de0ab0a98e70a388cf539440038da3934f878a08ae3d05ba05cc82cca39fc40c00aec","size":428,"data":"","first_seen":"2024-04-18T12:10:15Z","last_seen":"2026-04-19T22:33:30.514805Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/static/yts/style/modded1.js?yify=1","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60de675fcd2844a3ffbb68550d303076","sha1":"8a53cc2f554a8ef1f58f3fd1996a3c3552ea5472","sha256":"1c821bdab262418e3742bfa3c295c3b668724f7e8898b45638958a898bd93d33","sha512":"ba6dab3a4db0249e565b31a7cb00ef2af8b0a44f4163a3f2c1123aa869d7bb655f54079875eed198a7a8c5f29053ca9865bfae62d3c81ed9f25ab6c95d855067","ssdeep":"1536:wCiROaq6JgInuFkbrAkknYQaoLyrq0LfxDX5cw4j7BIBxYSMHzJX0oqTDAGegnM/:ja6ZMDYIB6bp0RpnMEUOsKJbTc","tlshash":"a5f329cdb6d5703243bb30b9106f950ab233546b640d8840f16cd8e96fb8e5a5277fad","size":162596,"data":"","first_seen":"2023-03-08T07:05:18Z","last_seen":"2026-05-06T14:34:25.575338Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stayarchaicsuperstitious.com/d4/bb/f4/d4bbf4c5470755566a7f8ca36e43911b.js","fqdn":"stayarchaicsuperstitious.com","domain":"stayarchaicsuperstitious.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93256d9ea8740aa86e9a8ccf99c0fc17","sha1":"cc7bfa7ba87f8381ac86c3c975acd76df045a287","sha256":"10b44bf5de398c95c5a2c8da93c3d46e4754476b403826066588e9645faf3dea","sha512":"19d33c995a6fb2d6e78f1575ae8f9c08241b61c736ce4e320d3d90b5ac4937106b9249e63595b93646b7899b79a53b209507f9de0b51e3516b826e95eec0e4a9","ssdeep":"1536:zgtuYKb5yrHvXp2mbVKBw591hyGoZtf68hK3vZEvF:UMYKb5QEmbV11hyGKtinZE9","tlshash":"9e83e6883f51b09903d76077222feb8bf12edc10109ee444d623e5d97b6834ae5bbe65","size":81608,"data":"","first_seen":"2025-11-25T22:02:37.508258Z","last_seen":"2025-11-26T03:00:46.924178Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-05-13T14:10:51.98475Z","times_seen":15993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffbb14d07653a463f0794c403197acbd","sha1":"61a64b767215497eeaf60094499467f1e041160d","sha256":"d764e92214479ead40bdb2dd04127a706e84696ad1f68238ecfee9e6bcc9f54f","sha512":"42613a3111295a348a0b719ff88779e24273323752b53f57bcf02788a40dfe30b06f321c5bc12fb00bdab5038a400626eb643308f4cd9864d78bf0b79dbcdd3d","ssdeep":"192:MQaf4Jxwn24crcYmeV+VHJmQxdCnV8oDeQToJ:MQI4Jxwn29V+VHUACnn+","tlshash":"2702410859fad531d40da03e203e3264f7640a53ac5abee8bb8451055fde96fb9b903f","size":8627,"data":"","first_seen":"2025-11-25T22:02:37.525545Z","last_seen":"2025-11-27T04:14:59.649268Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0 HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/5.6.40\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9jOm5EOf3bT%2B2zk%2FXao4BnFkrkwQuk8xOec1%2BomdVO%2FREQMO46ZyqGcErn2DcGdCf%2Bqwtf8Eb0rEjHLHJi0P0wRu3J9zGI9vI0DTAZveJiG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a446dc52b0156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45718,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1954), with CRLF line terminators","md5":"6e8d596bcac1cc41a995916ba9d77ae8","sha1":"f81dcfe5569d167e739ba5f507c8935f251df175","sha256":"3f16650ec7813bd3cdac42f3d1330bf12885714667794e6de53e6ce5c2b6d725","sha512":"d61c84b1a31e89f00306b3b9b53737b7f93ef750ea6159ad894b4b0190c9ecf350dbbbc4e16ad4e543f16a8a1b871636754d77da189fae8e7828743a4310ec81","ssdeep":"192:7UB+2++Od3+eed18n90K+pKAX91E0iphKtEEvxvOyUANmabGHoHYpQ4K7FCFe:7U1m0K+wqDE0iphKiQ9OyjGHoYpQ4he","tlshash":"01231f2618d1d42f1ab7c2cd11215baafdb28213c5a54508b7ae87e35ff2d38da3b117","first_seen":"2025-11-25T22:02:37.491062Z","last_seen":"2025-11-25T22:02:37.491062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Nov 2025 19:22:36 GMT\r\nexpires: Wed, 25 Nov 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 9575\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-13T15:33:51.603458Z","times_seen":818185,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/i-used-to-be-famous-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/i-used-to-be-famous-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22415\r\nserver: cloudflare\r\nlast-modified: Sat, 17 Sep 2022 01:26:49 GMT\r\npriority: u=4,i=?0\r\netag: \"63252259-578f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzdcHs7Bpo1aMytOK2hDQ3yJL1rWcQFaafwAndxggIX8E5y0Qq0QGGtxoSD3ANREhaQ9iyvGAejJoQKM3x2XRKVnV4UNsNCMlixZh8XbePm5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc18edc56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22415,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"9ac175a18b931daa6ed5e5503a19b438","sha1":"8f6af447a42e1c151bd29f3632661c04de664d78","sha256":"1aa6d8c1263b86200da1099cccbd9e51cf9c913631a087c7e42469adb3ff15ad","sha512":"65886b39ce9b9746c0922eaefd187d3dd003515002f81408b7f88c6d05e6be4efce3a3f2b65e92bc26b999c53f18266597e2b44048fe64725336302e804cc020","ssdeep":"384:Xbpeh1X7/62kJOkKmWOkOs1EAaRHzNykkIuqkwTUQUkf1Y4ESLZxky+JPqgoyN9r:Yh1WFhKmWOj+It0kkIuqZPUkNzdXz0Px","tlshash":"82a2e009bd30a3e4701391f647635c0957eef9c2d0f24eab90ddb5205ad7381ba909eb","first_seen":"2025-11-25T22:02:37.492748Z","last_seen":"2025-11-25T22:02:37.492748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 14:06:42 GMT\r\nexpires: Thu, 19 Nov 2026 14:06:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 546927\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-05-13T14:47:10.769116Z","times_seen":7658,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":56,"dns":1,"connect":8,"send":0,"wait":9,"receive":5,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/static/yts/fonts/icomoon.woff?fmg7s2","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /static/yts/fonts/icomoon.woff?fmg7s2 HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/static/yts/fonts/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: font/woff\r\ncontent-length: 3560\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Feb 2024 03:18:39 GMT\r\npriority: u=4,i=?0\r\netag: \"65d2c88f-de8\"\r\naccept-ranges: bytes\r\nage: 4728\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jKIrsaJChcTE01qMvo%2FWe5lUvUC%2FxrxLlhjktsTuv%2Fq%2BshwnuRXqNq2Ci3unNQzb4%2Fnh%2FgQDC252ZEvyYkUEraBf2myRbBGzxjMFk5Frjq1p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc3a96a56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3560,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 3560, version 0.0","md5":"4e54891305c71736de2da03f14b57434","sha1":"fbf29db32b5514cad7a908167ce63c76a91a2f12","sha256":"332ec1d337a38ad421deff49f3585da56563253756da3870b26b46bd025f96e4","sha512":"dc8a969e71477400a63cbd5d1aa00bd87c678ee6b98cf0c4041b3cfbf76f10866ed8468dcdd44d38b024082b273d156a1f70b276b0c24d9f51eb0f7a79582099","ssdeep":"","tlshash":"9771b6a697f23b43d1138f7864da7b147b319a94cf038753a2845a2818b1b93cd4871b","first_seen":"2023-04-08T10:57:03Z","last_seen":"2026-05-11T06:28:42.466511Z","times_seen":544,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/static/yts/style/minified.css","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /static/yts/style/minified.css HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Feb 2024 08:38:28 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"65d31384-1d423\"\r\nexpires: Wed, 26 Nov 2025 05:03:13 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 17936\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79hDjtcWLC7bRK5PQ74%2Bp6qUj0oXKv6IqEUJJ%2FhURcMov0nLeDeMx7zo9WB1rYtvKzo74AwMjFLAWRigbohJwjYEnP%2BMKg5Xcr2YpcRCtRr5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc15ea456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119843,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57475)","md5":"a314b10e99529c56373ebff456f96618","sha1":"89369052969ff4793a3c290593b5ded5d2d3e6d7","sha256":"e043e009630de7fdb24141cd7e788e91a7978880af7730e0f8f97bf41c2cd549","sha512":"1841d0beff97b7f3a79fa378d041cf8ac780af772db740b30dc1668ae35642b07c61f3c93c0ad7767e19c59e6faee2492678535fdb66c7d035a1cd4dd7758f81","ssdeep":"768:9CGxwuXAgSrAICHrzNpO/QkaC6bqkUhSOQjQpgm8ks+xChfOr0MtV:pwrVCHrzNpOwbqkUcuF","tlshash":"75c3b9b1b510349bb237c559b1c0ae8b3619a153e7234fbff66b74e4cb822d60263b15","first_seen":"2024-04-18T12:14:34Z","last_seen":"2026-05-04T11:02:48.753291Z","times_seen":142,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stayarchaicsuperstitious.com/ren.gif?sid=H4sIAAAAAAAC_1SSP2wcRRTGZxPTkAIRIqAAtEUEQeDL7u3u-ZYUFiYEAiEJSVAkaJjdmT0Pt7uzzOyf81UWFijlQQMFxfo7O4ZgRdBFQojoTGcJyQeNixgJyjRIIEqE7nxSxJPmvTf6TfG-b94n68UBcVDQ_ctvyb6IY3raa1jmqesiZbLS5sVrpm01rDPmdZG23DNmb5JU-ZLtuA3refM1Hnbl6aZlW5Zt2eY5oXgke6enFCLb9u2GbzXcZsP2XPTU_--6MKCpAVYekOMQbPzIH9F7EOEIafLtWa67ucxefDUpYppLhZJtvZN2U1mlSB60kTIQpVuz15B6TMgXRyDTrZkCyHJjogCBGJMjj99DkG7NxkRQbh5OGsTgKQJ2DFU5Ao9HEHSEUK5BsD0ChAwXLyFNbl6UqqIrh5RO6JjM_fMXRDUmc_dOIE1uL8WiZ16VcZELmWr0ohqiN4LojJAVO8j7BkS1gzD_CIL9TKwnjiFNbr0uS9E1S666EGz_pNWkbuRH1nwYtYN513Xteeo32XzL8l2P-o5nh-7UKBGNQLWBYnKEgSIyUGQGErZvulbbDW3qtCKfhQuWS12X8cDy203Lon64gCKcKBggzwYI4wFCtYpMraIrPtvzju95b0AVd6GXa2hmQOcEJatRcYJKE1SUoBIEVU5QlfUmi3VT1zdZrIvAntXmrDr1UOaddbop8w5PCagaQLF6Q2Qf6jWE-dFhP9JsKCeJBnk9pAGr17MD8ujEYqM68T26fN9kbhBEbui5C9aC53mtFl2I2iF1Wtx1fNsOoEUNoY9MLemLMVn89UlkYkwe-vxfBHQHOt5BKAzQ4mnQqgZdrtFPv1rJddJrJD0wWSPL55CvGOvxAXlseOXa0t3pL79_9iR4uLt4_7cz7N2nthGqGpmq8YH4iaAT3xhekRXZuCIrTb67lOUiEX062YCrOc353K03-UolFTt_Vg--fjmcgEm7fY3r_AJNmUg7mnyzJBjj6pxUISc_nNfXeXC50MtLhUqL7MLlV86dTzLFtRYyHYGKMXn4yxcQijE5cWpxut3e378jzFahs93F23fevv_xM3egJUGQGYgFQcx3ySxAgxqaP9AT8N0f_zxk6_oGOsoAzdeQJjVKVaOMa9B4AF0cHeaZ2l38xZkGgtgYBrEyNoJYxZ8e-qTFvuk1A6fVbrd41GKRw5ymw3zP4r5L_Zbrux5yPRbPPhf8FwAA___WI3cxgAQAAA==","fqdn":"stayarchaicsuperstitious.com","domain":"stayarchaicsuperstitious.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"stayarchaicsuperstitious.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 08:59:05 GMT","end":"Sun, 25 Jan 2026 08:59:04 GMT"},"fingerprint":{"sha1":"FB:C2:EE:37:99:8D:F0:2C:E8:B1:BC:11:3F:17:54:AC:A0:F9:E1:5E","sha256":"00:64:04:D8:49:05:C8:D5:F7:2A:C3:7A:2A:72:63:72:E8:D8:CB:D9:FF:F9:D5:C3:7F:FE:E0:33:2A:B9:73:74"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1SSP2wcRRTGZxPTkAIRIqAAtEUEQeDL7u3u-ZYUFiYEAiEJSVAkaJjdmT0Pt7uzzOyf81UWFijlQQMFxfo7O4ZgRdBFQojoTGcJyQeNixgJyjRIIEqE7nxSxJPmvTf6TfG-b94n68UBcVDQ_ctvyb6IY3raa1jmqesiZbLS5sVrpm01rDPmdZG23DNmb5JU-ZLtuA3refM1Hnbl6aZlW5Zt2eY5oXgke6enFCLb9u2GbzXcZsP2XPTU_--6MKCpAVYekOMQbPzIH9F7EOEIafLtWa67ucxefDUpYppLhZJtvZN2U1mlSB60kTIQpVuz15B6TMgXRyDTrZkCyHJjogCBGJMjj99DkG7NxkRQbh5OGsTgKQJ2DFU5Ao9HEHSEUK5BsD0ChAwXLyFNbl6UqqIrh5RO6JjM_fMXRDUmc_dOIE1uL8WiZ16VcZELmWr0ohqiN4LojJAVO8j7BkS1gzD_CIL9TKwnjiFNbr0uS9E1S666EGz_pNWkbuRH1nwYtYN513Xteeo32XzL8l2P-o5nh-7UKBGNQLWBYnKEgSIyUGQGErZvulbbDW3qtCKfhQuWS12X8cDy203Lon64gCKcKBggzwYI4wFCtYpMraIrPtvzju95b0AVd6GXa2hmQOcEJatRcYJKE1SUoBIEVU5QlfUmi3VT1zdZrIvAntXmrDr1UOaddbop8w5PCagaQLF6Q2Qf6jWE-dFhP9JsKCeJBnk9pAGr17MD8ujEYqM68T26fN9kbhBEbui5C9aC53mtFl2I2iF1Wtx1fNsOoEUNoY9MLemLMVn89UlkYkwe-vxfBHQHOt5BKAzQ4mnQqgZdrtFPv1rJddJrJD0wWSPL55CvGOvxAXlseOXa0t3pL79_9iR4uLt4_7cz7N2nthGqGpmq8YH4iaAT3xhekRXZuCIrTb67lOUiEX062YCrOc353K03-UolFTt_Vg--fjmcgEm7fY3r_AJNmUg7mnyzJBjj6pxUISc_nNfXeXC50MtLhUqL7MLlV86dTzLFtRYyHYGKMXn4yxcQijE5cWpxut3e378jzFahs93F23fevv_xM3egJUGQGYgFQcx3ySxAgxqaP9AT8N0f_zxk6_oGOsoAzdeQJjVKVaOMa9B4AF0cHeaZ2l38xZkGgtgYBrEyNoJYxZ8e-qTFvuk1A6fVbrd41GKRw5ymw3zP4r5L_Zbrux5yPRbPPhf8FwAA___WI3cxgAQAAA== HTTP/1.1\r\nHost: stayarchaicsuperstitious.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nCookie: uid_id2=02a4f9f0-cf8b-4441-a92d-60945a9351c4:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl24581307=1; slecd4bbf4c5470755566a7f8ca36e43911b=[6308900]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 25 Nov 2025 22:02:10 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: stayarchaicsuperstitious.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fa3ca1e0e7f00c8db86b1098e82beabb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/utility/default/robot/2/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 15:30:46 GMT","end":"Tue, 06 Jan 2026 16:29:13 GMT"},"fingerprint":{"sha1":"CE:BB:4F:68:2C:89:90:90:9F:0D:E4:DC:37:55:B5:DC:41:49:D6:F9","sha256":"52:3F:5E:43:C5:77:DF:EF:E5:AE:11:CA:C1:74:9E:6B:A8:63:B6:7A:C9:7F:8F:58:EF:05:C6:35:2F:C7:D2:9B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCRN%2BrzfrBkjh5IJlj20IeC1LESEh1laIzsAdma%2F9I%2BoUOfLwkmUwiUkO8ZtkP%2FZsB%2B6FtwFacq0YdgEyqyEeKlh0rNIdaXcCnEHCDl0GA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a446dc9bd9349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1331,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"6d925fca1f3623368e2c47f8ac18ea89","sha1":"3dc674f220a7ad1fa502fdd4bf353f836ece2c75","sha256":"34c0988a0d6428e37eab062e19df5661d32e9f8d11704ba50f78cdc430299712","sha512":"380f03a62b612643a9e5c252357c2bba326dd657460a03a292ad1a01e888d9390a5fc107f3cde290e3a011a1608f2253e0496703b1d474e4bf098dfa94802aca","ssdeep":"","tlshash":"7f214b4e3dadd57215c391563b702f6aa88ad6cfd90b9440b3fc4d508bd6b81cd43207","first_seen":"2025-07-06T07:29:12.190766Z","last_seen":"2026-05-12T17:29:31.104454Z","times_seen":1165,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":118,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 25 Nov 2025 22:02:11 GMT\r\ndate: Tue, 25 Nov 2025 22:02:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1f04e9e49d52374a409de4887e47180d","sha1":"8fee2f920567a574448d1aa6565c95951b68f9b5","sha256":"10cf0680b9dc5b310d265479bcebc5b380474bf2e8da9361cf8be458d183994e","sha512":"5fde8f721343e9c6254229e791ed64d6b47f28fad7690f7c83fa8c29e3112d0974f65ae0c63f09acd3e026dcb56c4de3fe0ffe37c464eb326b0495aa6c03b31c","ssdeep":"384:pKf5KgKPKrKyUK/qY4+K4KYKpKfMK1KWK6KyhK/qY4XKNKtK4KfdKkKDK3KyQK/9:pCJmwBUiRDfMTcfFBhiEymdmtC0BQiVb","tlshash":"df7210a1041750009b834ce223cebf35fe1f52117152d0b5abfdab6b9dcbc66526939d","first_seen":"2025-11-19T00:20:32.486705Z","last_seen":"2026-04-15T20:27:38.048842Z","times_seen":6026,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hy.outrunmost.com/rQfzqpZxhzorkupP/elLRE","fqdn":"hy.outrunmost.com","domain":"outrunmost.com","tld":"com"},"ip":{"addr":"23.109.253.230","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hy.outrunmost.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Nov 2025 05:08:16 GMT","end":"Fri, 30 Jan 2026 05:08:15 GMT"},"fingerprint":{"sha1":"01:02:68:88:D8:92:91:B2:F7:E8:71:DA:7A:03:73:6A:73:31:80:91","sha256":"E7:E4:B2:10:09:2B:C0:77:16:BE:04:F7:D2:B8:C6:20:AD:D8:34:2B:7E:D8:B1:8D:DE:E0:0E:BD:9A:3F:C3:9C"}}},"request":{"raw":"GET /rQfzqpZxhzorkupP/elLRE HTTP/1.1\r\nHost: hy.outrunmost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.yts-official.cc\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Wed, 26-Nov-2025 22:02:09 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwViD0LglAYRu99ESGS4gGHRpdW0VLBJSTndGhoaBILEcRXrtrH1F9pb4r%2BVWtTWzacA%2BcIIcicgsoGRujaoWN7C9v1PcgClKSgvIaesDpnV0gFcpYgVWOcthVbMfd1N%2Fwc2r8hS0zWVXmxtlz1Xcl1CxoYxawaVll3hGx0Cer47%2FZgCsiTPgNVmRFtPu9Xcf8OwUY0vz33u9UD1LTQHD8IfrcSKq4%3D; expires=Wed, 26-Nov-2025 22:02:09 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-13T12:47:50.068873Z","times_seen":16279,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":70,"dns":51,"connect":17,"send":0,"wait":20,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/static/yts/fonts/fonts.css","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /static/yts/fonts/fonts.css HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Feb 2024 03:18:39 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"65d2c88f-524\"\r\nexpires: Wed, 26 Nov 2025 06:42:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 11963\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0F3lOegGhqnUZJZ25tNdmgLOkBHpE%2Bu452pSuGbhH5jmD14JXBSEJ1Pr%2F9upA2h1GU4F9hEY5Bm3CBZaWbLmYiM3NyHGaZ9Sc4%2BIs77zmzG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc15ea356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1316,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1316), with no line terminators","md5":"b482ea655a7bad066f5aacbcbd1f8ff9","sha1":"7b48d2275fc5356ae4528275502bb520244e8a4b","sha256":"38fe96c34e2d963f298b4827f2ddc5a13fa1bcbe420cbbd0b5b907d5613ad1bf","sha512":"6683b9a7755c80b97d091402a657ac5472afbe92d5ec5e9bbc91eb40f1f6a3f59606c105757e6dfc4360b561f746ceeebcd6f8744fc648646718597ea9784b8f","ssdeep":"","tlshash":"692139a1d06a14e9b373c403a795b618ac99f222d8e01d23f21f572c9ee271697d1b3c","first_seen":"2024-04-18T12:10:15Z","last_seen":"2026-05-06T14:34:25.571427Z","times_seen":186,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/bodies-bodies-bodies-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/bodies-bodies-bodies-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25097\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Sep 2022 01:25:42 GMT\r\npriority: u=4,i=?0\r\netag: \"632e5c96-6209\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I60cGLOccOzpoWgGzZDiArXWwGgD5qNzGlh79WYD0y8wtIhg4rKYuR6wZOh8C27N8MtR0%2F4YYxDd7ZwWQeEJrhX2HwKYr%2FJ3t5gWxZI%2BZDLx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc15eb556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25097,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"c7d8c5a2f2b9e254737346741d2e0fd4","sha1":"0e11990b907115fafc50e3cab4e723eed27e438a","sha256":"d4116d63f24dcf72839f1ae829ac159eb8223176a3a7d3d91eab9757cd0793ef","sha512":"2d8bd04367886e651e832404152b0b58a59515c0fbc04f05a38ab591149d5c1fb40cfcc6bea53e4f2d91c418769e45ee5bd9748604545da93e8608fe03e7a243","ssdeep":"768:dMOnLFCooWr5hAFSaHtlgKR3++XTa3UT9wMAQXO:dhFC7+ijPgKRO+akT9e","tlshash":"71b2d1e60f1ed0e9787c261607066f72fdf2ba7b61a60b8610c6cc05e175a86d1cdc69","first_seen":"2025-11-25T22:02:37.49811Z","last_seen":"2025-11-25T22:02:37.49811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/harry-potter-20th-anniversary-return-to-hogwarts-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/harry-potter-20th-anniversary-return-to-hogwarts-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33469\r\nserver: cloudflare\r\nlast-modified: Sun, 02 Jan 2022 01:32:07 GMT\r\npriority: u=4,i=?0\r\netag: \"61d10097-82bd\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSaOZdeAzehYtqBhqHASHtF3y1gAYvJoua4zvZidx09AjcLTrAU8RQOFEetaXsnUJkFXwx9OTsZ0KWpnxZW599TrtsWXOYGlN4DFvDHZN0mr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc18ede56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33469,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"292672b23d23ee4f190fb348e61cb156","sha1":"1a7a142e6e52d0109167def006ab8c78fda33653","sha256":"9d93870bea7854619b75102ac3b0da66dacdb0a1713fb213ec9e75923e383194","sha512":"0fc0a322a8ce1f98b5895e46bf62ee61dc00ce5e5ebb6a4c31eb503b49915138dbb2469c5f2f1f3e9fa261e8c01c2a3a418f0f01c446df02b9c280a25a789eb8","ssdeep":"768:pLYs44mP/HQ14zsVt3bQhJNqlsIto14ZlwYw2MATDT:pLYUq/KAAbGqlTo14XfMCDT","tlshash":"a7e2f1044b5199e8f93a0218c15e7ea7bfe279ab5c81274f11e4c9b2d81c9faf12f443","first_seen":"2025-11-25T22:02:37.499123Z","last_seen":"2025-11-25T22:02:37.499123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fcss%2Fmagic.css\u0026l=45054\u0026fd=40","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:33:26 GMT","end":"Sat, 24 Jan 2026 22:33:25 GMT"},"fingerprint":{"sha1":"74:B9:DE:52:5E:A4:22:C1:3F:4E:90:E5:53:C1:13:27:E5:47:BB:D2","sha256":"0D:C6:A2:6A:15:63:9B:67:CF:55:A8:E1:E3:EC:AF:D3:57:2E:38:F3:44:79:B9:FC:61:8A:CD:64:82:05:64:6F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fcss%2Fmagic.css\u0026l=45054\u0026fd=40 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 25 Nov 2025 22:02:11 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":286,"dns":1,"connect":93,"send":0,"wait":94,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/control-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/control-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39937\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Sep 2022 01:26:40 GMT\r\npriority: u=4,i=?0\r\netag: \"63325150-9c01\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f9w8aW73XntwddqQwpbACxEwB1Ze8A3NKWBzqE6pxSxzeyvU%2FB3WZTq%2FA57xV%2Bl4P04zKDxwqCz145IJK6S3EyLcX24to0ij1dQl9l3f6a2T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc15eaa56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39937,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"a5d4eb16828a06061799cc29f2a80b09","sha1":"6e7481e573b8abbed37a139ff1584774e5c07510","sha256":"1ba6bcba673be7716d4f806559af0f70df69db116a164d7fb51d3114f7e28053","sha512":"1d9037db4d09b91ba0eaa961d1be915a0b7c63f67a8b8daa76cb4ae267154fdf35642ca9203dc5d15944c0168a17c200ee6f862bc89cf1a845074679d144eb4e","ssdeep":"768:GPglXYOXmvB9nnioAuU6qMWn4XIrNU32QIWGtj2Fsu5X3WyDTesu0Eu:f0vB9niobJTW4h30q52qBh","tlshash":"3403f256064a1ee175d71b3946bdbc8ba3c0cf22181cf73a0ed73ed09a4f954348a963","first_seen":"2025-11-25T22:02:37.50026Z","last_seen":"2025-11-25T22:02:37.50026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/lou-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/lou-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25034\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Sep 2022 01:27:45 GMT\r\npriority: u=4,i=?0\r\netag: \"632e5d11-61ca\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEiW7foV16Sx2ZMHmrVfOZ8e2cmAIO5WzBkEvy5ynJSSs%2FDzgkf9fANrMSP6FTnQW5wQEzcvJKJCTU9smgfFCxb0dmfgI%2BGZqC24%2FPy5HBmg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc15eb256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"a355ba5d50d5b9524def2b7ede70a398","sha1":"cefeadd59185ecdf979e0775824cad2672450bd0","sha256":"a1419d35049aa90cd82ff3926d46e3cd6c12cf8ce836a1fb6efa4226f4fd0b34","sha512":"65f6ce20965bc24375598f98e518a50eaa396d062504a07935d29d0bd1c47f3e939e4d9e507b1b65b4417e57b6ad39276d8af301d9af2521b283908becfec941","ssdeep":"768:GGrBe/+TkJwX2RHVKWXUdu/NDVsy5pYVb:GGrhIJw0P98y5Ub","tlshash":"e0b2e1926ec01be5b1799978da88af3d5fc200c14667740dd1dbd8cb2b76cc84ddc126","first_seen":"2025-11-25T22:02:37.50112Z","last_seen":"2025-11-25T22:02:37.50112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/bandit-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/bandit-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35752\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Sep 2022 01:26:46 GMT\r\npriority: u=4,i=?0\r\netag: \"632e5cd6-8ba8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t0kHJ2Q5OLwMgPtu9a2rgtTFRShXEBAfLL7F9R6LpfrPjQ5y5DEYCDd45dHyDa1rG30NTwUvYlyUH5ZRL9cago10PhUXwTRiTd4Zs7xiFrHo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc15eb456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35752,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"d6037413899f863c788aff2796a594f6","sha1":"8d40ab7846be761346dfa2dd755050ee0208457c","sha256":"1332af13a191b8c291620fce1b80a425784cf4bdca1e9e6f21961aa4b7fc249e","sha512":"93737ac17e9ce48e8c4e3111585cc763f45166b0e126eb77f499d9c28aefa599bdad03631fb741ca136e2d7ed64fbcc208d9175a8b20fb86145ced9a1c1c6067","ssdeep":"768:X2Lo9ATwSEZvCmBdx8We/rvviQNmkUISQ1lvhVwi6vGbeYjdBKpvo2DP4:mLo9xSE4mBLlIrypk5S6x5jdBKlo20","tlshash":"c2f2f1473e1068defd0928f2474e9ef6dbec44af19254bf0d0d4c2a2fa8d518a842b13","first_seen":"2025-11-25T22:02:37.501999Z","last_seen":"2025-11-25T22:02:37.501999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/css/magic.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/css/magic.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"67f54bc9-affe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 321025\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZEopJye8z%2Fhe5J%2BQn3qlgCI79nz5y8gQ52CtXVkU1SYwSa84FEPX9%2BY%2B8XB7IklKeYC5QbFRg2kcyywyWpZXycDFPFws0x%2BLEFGbCIk7\"}]}\r\ncf-ray: 9a446dcacff556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45054,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bcd1967f8c2604f55f57197de0ae895e","sha1":"c31a10c3ecde74b50450a0a1ad21aa474ff05e7d","sha256":"787eac5d9417257a04de7b18ef21f5ec887de3aee642ceba9a7d56a8209eea2a","sha512":"b37f1a61bbe740bc29308e664227701366ac978d4fbed081f13c47200edd74a792ab980559a236cff39ae27d3fda3ffffef3f1ac2dc420612b616496b44e9df8","ssdeep":"384:lQLl1pRp0itimTKDbObwHuHXFlF7FPFSWRyYyRZZZaZjZPfbfUO3OipypE:GpRp0itiFbObwHuHXFlF7FPFSWX","tlshash":"b913276b2dd2114086564365a3fe6b2c261c85c31c6becfab3a218ce8f1567c53db61f","first_seen":"2025-06-11T18:18:27.729381Z","last_seen":"2026-05-13T11:37:26.554518Z","times_seen":5658,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/static/yts/images/website/select-arrows.svg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /static/yts/images/website/select-arrows.svg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/static/yts/style/minified.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Feb 2024 03:18:39 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 4298\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fg%2FHMis6Sl%2F3AiK6rzzpyN0cOZeemVFNXS7XiTe43AVjx9gPPBw8c0L2oy6FLEgYCxhdgiXj9ORAFqY9XK%2F8JxdT%2B8mCzWfLb1jVZObHduxQ\"}]}\r\netag: W/\"65d2c88f-267\"\r\ncontent-encoding: br\r\ncf-ray: 9a446dc3792f56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":615,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"88be16e7ca0a244652429e056179d1ba","sha1":"890121e5575a131b66e5fefde915c3be93d758b0","sha256":"75d6d0bf20e8acc508018fd5f0b584c18c56db8eb96e0acd92a81b3603424421","sha512":"b4a61781c0b43117a8cee5fa37445bb8254d3d48300f28fb7557e6edff2a15ecebeb95e4f24674fbc730e3aa86259f5ef0d35f2516db7ab43b826968c35c8486","ssdeep":"","tlshash":"39f002cc83599878d05d8721b7bcf6c783216095909e14ccf1d17a75a992a642ac1a6d","first_seen":"2024-02-15T14:31:24Z","last_seen":"2026-04-13T09:59:44.691672Z","times_seen":72,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"3.69.209.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.yts-official.cc\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=4d9b42a6-5630-4b02-a51b-52f265a2cff9:3:1; expires=Fri, 23 Nov 2035 22:02:10 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"1f040d5ea406f5a6074092b44aa069a3","sha1":"0d06b7d7d2b2c3b6129f070af5d4f1dc3662dbfe","sha256":"628d409b18dd03185b2893c422dc0e723ffd4d4e675a0ef9fff88d164fbc628c","sha512":"b0899efe0567bcee99b6e89ba7edc0145bc5f215ba35c8d0ec684cac929a74ba766e21391edf80c12b5a1a13088106212a8340fb5ca84915ce8e7f355afe6e97","ssdeep":"","tlshash":"769004130f117d71c1050f400dc0440f31d0555175fd00011354fddc541570775d50c1","first_seen":"2025-11-25T22:02:37.503888Z","last_seen":"2025-11-25T22:02:37.503888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":71,"dns":1,"connect":21,"send":0,"wait":21,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stayarchaicsuperstitious.com/impr.gif?sid=H4sIAAAAAAAC_1SST4gcRRTGq5P1Yg5iDOpBpQ9BI7qT7unu-WMOi2uMRmMSk0hAL1ZXVU_K6e5qq_rP7JyCQclx9KIHD73fbLIaQ9BbQMQw621ByOhlD1lBj7kIikeRmR0IPqj3XvGrw_u-ep-sF7vEQ0F3zr6lhjKO6dGg4dhHLsqUq8rYpy_YrtNwjtkXZdryj9mDWdLlS67nN5zn7dcE66ujTcd1HNdx7RNSi0gNjs4pZHaz6za6TsNvNtzAx0D__24KC4Za4OUuOQjJp4_8Eb0HySZIk2-PC9PPVfbiq0kR01xplHzznbSfqipF8qCNtIUo3Vy8hjJTQr7YB5VuLhRAlRszBQjllOx7_B7CdHMxJsLy2t6kYQyRIuQHUJUTiHgCSSdg6gokv0sAxnH6DNLk-mmlK7q2R-mMTsnSP39BVlOydO8Q0uTWaiwH9nkVF7lUqcEgqiEHE8jeBFmxhXxoQVZbYPlHkPxn4jxxAGly43VVyr5dCt2H5DuHnSb1o27kLLOoEy77vu8u026TL7ecrh_Qrhe4zJ8bJaMJqLFQzI60UEQWisxCwnds3-n4zKVeK-py1nZ86vtchE6303Qc2mVtFGymYIQ8G4HFIzB9GZm-jL787G5w8G7wBnRxB-ZSDcMtmJyg5DUqQVAZgooSVJKgygmqsr7GY9M09XUemyJ0F7W5qF49VnlvnV5TeU-kBFSPoHm9IbMPzRWwfP94GBk-VrNEw7we05DX69kueXRmsVUd-h59sWNzPwwjnwV-22kHQdBq0XbUYdRrCd_rum4II2tIs29uyVBOycqvTyKTU_LQ5_8ipFsw8RaYtECLp0GrGvRSjWH61VpukkEjGYCrGlm-hHzNWo93yWPjcxdW78x_-f3jhyHY9sr9347xd5-6CaZrZLrGB_Ingl58dXxOVWTjnKoM-e5MlstEDulsA87nNBdLN94Ua5XS_ORxM_r6ZTYDs_bmBWHyUzTlMu0Z8s2q5FzoE0ozQX44aS6K8GxhLq0WOi2yU2dfOXEyybQwRqp0Aiqn5OEvXwCTU3LoyMp8u4O_fwfLLsNk2yu3br99_-NnbsMogjCzEEuCWGyTRYCGNYx4oCcU2z_-ucfWzVX0tAWaX0Ga1Ch1jTKuQeMRTLF_nGd6e-UXbx4IY2scxtraCGMdf7rnk5E7duSJJnOcTrvlep1IuJ7PWRR0_C5vUcfzBHIzlc8-F_4XAAD__ypL5--ABAAA","fqdn":"stayarchaicsuperstitious.com","domain":"stayarchaicsuperstitious.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"stayarchaicsuperstitious.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 08:59:05 GMT","end":"Sun, 25 Jan 2026 08:59:04 GMT"},"fingerprint":{"sha1":"FB:C2:EE:37:99:8D:F0:2C:E8:B1:BC:11:3F:17:54:AC:A0:F9:E1:5E","sha256":"00:64:04:D8:49:05:C8:D5:F7:2A:C3:7A:2A:72:63:72:E8:D8:CB:D9:FF:F9:D5:C3:7F:FE:E0:33:2A:B9:73:74"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1SST4gcRRTGq5P1Yg5iDOpBpQ9BI7qT7unu-WMOi2uMRmMSk0hAL1ZXVU_K6e5qq_rP7JyCQclx9KIHD73fbLIaQ9BbQMQw621ByOhlD1lBj7kIikeRmR0IPqj3XvGrw_u-ep-sF7vEQ0F3zr6lhjKO6dGg4dhHLsqUq8rYpy_YrtNwjtkXZdryj9mDWdLlS67nN5zn7dcE66ujTcd1HNdx7RNSi0gNjs4pZHaz6za6TsNvNtzAx0D__24KC4Za4OUuOQjJp4_8Eb0HySZIk2-PC9PPVfbiq0kR01xplHzznbSfqipF8qCNtIUo3Vy8hjJTQr7YB5VuLhRAlRszBQjllOx7_B7CdHMxJsLy2t6kYQyRIuQHUJUTiHgCSSdg6gokv0sAxnH6DNLk-mmlK7q2R-mMTsnSP39BVlOydO8Q0uTWaiwH9nkVF7lUqcEgqiEHE8jeBFmxhXxoQVZbYPlHkPxn4jxxAGly43VVyr5dCt2H5DuHnSb1o27kLLOoEy77vu8u026TL7ecrh_Qrhe4zJ8bJaMJqLFQzI60UEQWisxCwnds3-n4zKVeK-py1nZ86vtchE6303Qc2mVtFGymYIQ8G4HFIzB9GZm-jL787G5w8G7wBnRxB-ZSDcMtmJyg5DUqQVAZgooSVJKgygmqsr7GY9M09XUemyJ0F7W5qF49VnlvnV5TeU-kBFSPoHm9IbMPzRWwfP94GBk-VrNEw7we05DX69kueXRmsVUd-h59sWNzPwwjnwV-22kHQdBq0XbUYdRrCd_rum4II2tIs29uyVBOycqvTyKTU_LQ5_8ipFsw8RaYtECLp0GrGvRSjWH61VpukkEjGYCrGlm-hHzNWo93yWPjcxdW78x_-f3jhyHY9sr9347xd5-6CaZrZLrGB_Ingl58dXxOVWTjnKoM-e5MlstEDulsA87nNBdLN94Ua5XS_ORxM_r6ZTYDs_bmBWHyUzTlMu0Z8s2q5FzoE0ozQX44aS6K8GxhLq0WOi2yU2dfOXEyybQwRqp0Aiqn5OEvXwCTU3LoyMp8u4O_fwfLLsNk2yu3br99_-NnbsMogjCzEEuCWGyTRYCGNYx4oCcU2z_-ucfWzVX0tAWaX0Ga1Ch1jTKuQeMRTLF_nGd6e-UXbx4IY2scxtraCGMdf7rnk5E7duSJJnOcTrvlep1IuJ7PWRR0_C5vUcfzBHIzlc8-F_4XAAD__ypL5--ABAAA HTTP/1.1\r\nHost: stayarchaicsuperstitious.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nCookie: uid_id2=02a4f9f0-cf8b-4441-a92d-60945a9351c4:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl24581307=1; slecd4bbf4c5470755566a7f8ca36e43911b=[6308900]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 25 Nov 2025 22:02:11 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+9e4b54fda63a315b2418b25f3c2003b1=6308900; expires=Wed, 26 Nov 2025 22:02:11 GMT; path=/; secure; SameSite=None\niprc_l:6308900=1; expires=Wed, 26 Nov 2025 22:02:11 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: stayarchaicsuperstitious.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3208baea9a5582dc93c182c1e88fb77d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Nov 2025 19:22:36 GMT\r\nexpires: Wed, 25 Nov 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 9575\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-13T15:33:51.603458Z","times_seen":818185,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/meet-cute-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/meet-cute-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36366\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Sep 2022 01:27:43 GMT\r\npriority: u=4,i=?0\r\netag: \"632bba0f-8e0e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwsUt8DLzwsrP5%2FQYojdEltmZ9C1AhCdLdvc1cIv%2FzVVxeW0RFyzU2jHleu9HdTKMF6B86fgnvZSdshdZ5ROl%2BtkDztfeiNqz2n%2F5qQtDz6f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc16eb856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36366,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"55fd9bf22b18cf774657dd1543974c1e","sha1":"9c050983ce9e092599d2538fb87ea11d1efac5e0","sha256":"d11d2f9174ea54c09e85d068f4ca6793b1fa8fc615f42a08dd5dc62b46293b84","sha512":"24edd29a2cd56a344c6e1106c2b604d58aed36be84d0b6737ae495d9fd0eb77c14cb1a4bd47992da807e70ddf8f19614d2e5875c91428edc1c253a1a37faf403","ssdeep":"768:NZOEphSohbrK2dspOWzge9pf52mRfNblC8bTzG+DBeKqrl4Q:1pVhNSg89r2ufFlC8bT/DBeplj","tlshash":"78f2f1c32a2149ebfb85c33721e53e9cc0a8d2128dc2c413a9d6757a947976444b87eb","first_seen":"2025-11-25T22:02:37.504649Z","last_seen":"2025-11-25T22:02:37.504649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/do-revenge-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/do-revenge-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34483\r\nserver: cloudflare\r\nlast-modified: Sat, 17 Sep 2022 01:27:45 GMT\r\npriority: u=4,i=?0\r\netag: \"63252291-86b3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CtEeCLdzD5TljbC9oo4OVaaQa9tFB0zogvUDVI6R7b2zQjJb62YFKlTxpFOJCt%2B6O%2F66%2Fxx9XXpHPNHQmaddP5jqr%2FHZMZsH5PFRLWsJyIis\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc18eda56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34483,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"11b7d8c5f20156450d01371f1bf08b5b","sha1":"71a57d153bb503e8f5038322bd9dd92fc7ac51b9","sha256":"d06befd9c52dc880479ae4d531a68875cfb66bb5bf13400760b8a0e8312f632b","sha512":"5e34ff76ee2562f38b8aee56d3d5ab938541392f8a36cc79ad025d20a562284399bdd1b734fa7d68ba1168bd9038c255c3c9c0475725f722722f1ed204841bd7","ssdeep":"768:fegdv3hOiAGmDVlbDg8EIIKo1MDbk074jeLfJgjG:2Uv3hOiAhVZlzo1M574IJg6","tlshash":"00f2f187dc0721f9f6bc100af0893dd6bfca6bb1f525c54ab27572390794ba0ed1419a","first_seen":"2025-11-25T22:02:37.505535Z","last_seen":"2025-11-25T22:02:37.505535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/static/yts/images/website/icon-search.svg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /static/yts/images/website/icon-search.svg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/static/yts/style/minified.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Feb 2024 03:18:39 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 352\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=muZnkwyqIACy8RSJqWdlh6zruEVKRWCUJ%2FDnIn%2FcL7w3JGc%2BZ7xcG4b%2B1UyIhxllZ%2FKoBv5kz%2ByNT1BKndCkVcA6z2AWQ2o14sJGdh8Qc5nG\"}]}\r\netag: W/\"65d2c88f-37e\"\r\ncontent-encoding: br\r\ncf-ray: 9a446dc3692256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10c10634d2bb0228cd4d4e884613abb1","sha1":"bdb85d8d0c1d13f0170cffe097c34c0b2f88ba03","sha256":"1d3766a87712c953b7768cd1ffe2146e07e9bd555cd894c9eb0bdda6c0e6baf6","sha512":"b08b887ec1a35c57c4e51fb85e99ff00c439538ec22462fbb1c965df6c9049349410322b9fe7049b58b04e6da8bec03ceb8658608f3383f4a83d0f52877e9126","ssdeep":"","tlshash":"1a11044f47b5f4acf048831593b876d76b31204180f21558ca41397a64841f09a9ca3a","first_seen":"2023-05-21T19:21:49Z","last_seen":"2026-05-11T06:28:42.462601Z","times_seen":354,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 25 Nov 2025 22:02:10 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f385bacf97b43fbd2f2f7582c7997a4e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-05-13T14:10:51.98475Z","times_seen":15993,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":59,"dns":1,"connect":17,"send":0,"wait":24,"receive":18,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/img/banner.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/img/banner.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 29534\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:11 GMT\r\npriority: u=4,i=?0\r\netag: \"67f54bcb-735e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 580922\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7hJsBwU%2BxAqgEacbz2jop0WqLm%2FAfrPv2NA6Yh6HtOuHSWsLce5v1COw1uK7FTkeqQyxnevD71ewjX3KqCYGT%2BtoKzsyFXCDrg0RWZl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dcb4d5656b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 400, 8-bit colormap, non-interlaced","md5":"563e092f6677dac51659d62dccd159bf","sha1":"d04ac2cbce54e7c4849bbe28ecef94b464f3246e","sha256":"9d9611a42fcdbfd80c5d0774a743891691d0a09ce3c9830ceab54e920dbb64e1","sha512":"c2e1135a6b532df9332a2cc53477df0f3a2e69be2b45ab5ced0d764b977b6bc4b1362775957b96c5ae7862c73dbcbfb07f115074f3b554ea1ec8ff3afe2f1dc8","ssdeep":"768:ftP+gBsKWXjW1Mg3j/xQkRSP8d2iOF4aI:12gBsnXiH3tkUoo","tlshash":"a1d2e1512e22c71b09c92debbe15d8f6f8617da7f835692d201db2ac906639fc2501dc","first_seen":"2025-07-06T07:29:12.195371Z","last_seen":"2026-05-12T17:29:31.116369Z","times_seen":1147,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:11 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 321025\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKP92QdA98y5%2Fis02z0NgA2dAgOEnrRkbtuRbFshczB56Ee3qeJsuZRRUvMlABQTo%2BLV%2Fs%2BzJj1H56LI8v2rg3J2wnn89I0bFxyDqwb2\"}]}\r\netag: W/\"67f54bce-20dc\"\r\ncontent-encoding: br\r\ncf-ray: 9a446dcbad9456b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8412,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"066cc70a926c6ed2bd892cb5b2ef2127","sha1":"6ba3eb39830a2ef9e522cf28d779d25359a12587","sha256":"3a81ae28e6ed4c4b72715adf753ffb80cea10bccdb8aa81053fbcfa7d935a560","sha512":"d63b0c210b2b76569b7b79df20c58b3571fff409090fe40b1e7ffeeb219fe3991cfc82bf0889c30a29b18dff878910d4c3480dad8a85fb9cb10180124309f5ba","ssdeep":"96:KyLqrYLHwX1O/D3cYmeDjlwjeqFczLCDsnvuRQs01GKyBspfkxzUXe2lJK9zbdro:dLF4crcYmeV+VHJmQxdCnV8oDeQToS","tlshash":"ee02310809fad521d01da13e203e3265f7244a53ac5abed8bb8451055fded6fb9b903f","first_seen":"2025-07-06T07:29:12.196612Z","last_seen":"2026-05-12T17:29:31.122606Z","times_seen":1380,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fjs%2Fscript.js\u0026l=6717\u0026fd=11","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:33:26 GMT","end":"Sat, 24 Jan 2026 22:33:25 GMT"},"fingerprint":{"sha1":"74:B9:DE:52:5E:A4:22:C1:3F:4E:90:E5:53:C1:13:27:E5:47:BB:D2","sha256":"0D:C6:A2:6A:15:63:9B:67:CF:55:A8:E1:E3:EC:AF:D3:57:2E:38:F3:44:79:B9:FC:61:8A:CD:64:82:05:64:6F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fjs%2Fscript.js\u0026l=6717\u0026fd=11 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 25 Nov 2025 22:02:11 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":280,"dns":1,"connect":91,"send":0,"wait":93,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stayarchaicsuperstitious.com/d4/bb/f4/d4bbf4c5470755566a7f8ca36e43911b.js","fqdn":"stayarchaicsuperstitious.com","domain":"stayarchaicsuperstitious.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"stayarchaicsuperstitious.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 08:59:05 GMT","end":"Sun, 25 Jan 2026 08:59:04 GMT"},"fingerprint":{"sha1":"FB:C2:EE:37:99:8D:F0:2C:E8:B1:BC:11:3F:17:54:AC:A0:F9:E1:5E","sha256":"00:64:04:D8:49:05:C8:D5:F7:2A:C3:7A:2A:72:63:72:E8:D8:CB:D9:FF:F9:D5:C3:7F:FE:E0:33:2A:B9:73:74"}}},"request":{"raw":"GET /d4/bb/f4/d4bbf4c5470755566a7f8ca36e43911b.js HTTP/1.1\r\nHost: stayarchaicsuperstitious.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 25 Nov 2025 22:02:09 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 31792\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: stayarchaicsuperstitious.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b1cf1c1c4afc43b17a58258b66da727f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":81608,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"93256d9ea8740aa86e9a8ccf99c0fc17","sha1":"cc7bfa7ba87f8381ac86c3c975acd76df045a287","sha256":"10b44bf5de398c95c5a2c8da93c3d46e4754476b403826066588e9645faf3dea","sha512":"19d33c995a6fb2d6e78f1575ae8f9c08241b61c736ce4e320d3d90b5ac4937106b9249e63595b93646b7899b79a53b209507f9de0b51e3516b826e95eec0e4a9","ssdeep":"1536:zgtuYKb5yrHvXp2mbVKBw591hyGoZtf68hK3vZEvF:UMYKb5QEmbV11hyGKtinZE9","tlshash":"9e83e6883f51b09903d76077222feb8bf12edc10109ee444d623e5d97b6834ae5bbe65","first_seen":"2025-11-25T22:02:37.508258Z","last_seen":"2025-11-26T03:00:46.924178Z","times_seen":3,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":298,"dns":27,"connect":93,"send":0,"wait":105,"receive":93,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/the-infernal-machine-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/the-infernal-machine-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37768\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Sep 2022 01:26:45 GMT\r\npriority: u=4,i=?0\r\netag: \"632e5cd5-9388\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6EXMv9fsyJuAFzcOQ%2Bo8ybxVB8SZSMy8CgHBXKoTPEqneasrMmY6q6obThZwPA1XpE1zFmTtLwo%2Fe6wUyUykf7Yb3ZSjiZ3A1An4YjtitQc5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc16ec156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"9ec50ba84cab03c1e3077cce0ea4ee67","sha1":"67274763160132dad8d7a819a8c95fe003ae1821","sha256":"8926922fd5ff617d08e7af0997402207995b845a0a14bb226975a4a6d5330d8a","sha512":"258f20e466926a04edc6dedeba218a56851abbcf4f3ec20217cbd6ce2effb1ca5d54a23b13207a726f5401ab51723c66a0e905d32ef0e620d8bbb63ef1940b99","ssdeep":"768:jC+CzMqzXkOkpJv/kfd8Ibw9yVH3mEZoR0B27AkUL3Y1j9GJY:d1qzXRkzHQds9yV1ZI220kUrY1j9GJY","tlshash":"e803f137d2d8f6cb7e1c0533755dab851ce886422617e127fdca32bd1d6e2e16220b15","first_seen":"2025-11-25T22:02:37.509005Z","last_seen":"2025-11-25T22:02:37.509005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/the-invitation-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/the-invitation-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24242\r\nserver: cloudflare\r\nlast-modified: Sat, 17 Sep 2022 01:26:48 GMT\r\npriority: u=4,i=?0\r\netag: \"63252258-5eb2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FF59QVNcwbZCb8Sjp8VKEJ%2FZawgU5mkZxi3okifySZ8mlsecnlCmvlNqh6pX3ZSchjdgRZALmzdwvpTJWUD6WTyKIIZd1Qm10zjRUpWW5Eaq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc18ee056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"18e09bb4aa4350a009527d705786d4df","sha1":"0fea7cd959be6f6f3b26bd66053460988fe194dc","sha256":"8c562f783fab6f09bfe0f8fa7e8f3b0d75b8a271655ab0b1e39d8610743a747f","sha512":"91b9afc668e49be3abaeb8f78eae22d8f6b236d9970500674c5e37ecc4d987019440b9eddc882aaeb878b1da15851c33b88de5cfe3677e78e308ad8ef116f690","ssdeep":"384:t92pmhbrfXvN/8G7C7IKpJSlDQC3PRLNIk1/pv7qpGzXoG7Z7x3n:CcrPvR8GOMQpCfRLRv7q6v9p","tlshash":"81b2e1cfd72d60c2fafb3a2769851f278bdf0e1a91588af018fa8ad5465fc54f141418","first_seen":"2025-11-25T22:02:37.509836Z","last_seen":"2025-11-25T22:02:37.509836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sCzZCDf9_T_10c9CNkiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/arimo/v35/P5sCzZCDf9_T_10c9CNkiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22576\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Nov 2025 09:39:06 GMT\r\nexpires: Fri, 20 Nov 2026 09:39:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 476583\r\nlast-modified: Mon, 08 Sep 2025 18:04:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22576, version 1.0","md5":"42730d8f0fb8954ae5b89eb3f46d2cd3","sha1":"9c7262eb7a3eceb6668b8bda5e04b295d073270b","sha256":"67de270f7acd4088c49dec4cddc39bbf1bb858772cb74bbae529d4c18b7ae459","sha512":"4cd2bed85c6ffff3d7bcb17d1cf74549807b909bb7559d350c7c97f3e00137d5c0b0be1153af39abc328f65848b535fee6aac04a493a183617ae588389239b83","ssdeep":"384:Fwts93+vR2KxOsqhXmj8MqAg51AZgG7k4+nTp2N1shwKha/KS4mv5o1xJ:Us93oRpxOhXjMms7An1u1uwKha74mI","tlshash":"29a2e108dceefcc17b92273af5db6a504d469f2296e240f56e7269158eb170d388870b","first_seen":"2025-06-07T11:00:53.491637Z","last_seen":"2026-05-13T14:25:57.348666Z","times_seen":873,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fcss%2Fstyle.css\u0026l=5648\u0026fd=47","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:33:26 GMT","end":"Sat, 24 Jan 2026 22:33:25 GMT"},"fingerprint":{"sha1":"74:B9:DE:52:5E:A4:22:C1:3F:4E:90:E5:53:C1:13:27:E5:47:BB:D2","sha256":"0D:C6:A2:6A:15:63:9B:67:CF:55:A8:E1:E3:EC:AF:D3:57:2E:38:F3:44:79:B9:FC:61:8A:CD:64:82:05:64:6F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Fcss%2Fstyle.css\u0026l=5648\u0026fd=47 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 25 Nov 2025 22:02:11 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":280,"dns":1,"connect":92,"send":0,"wait":95,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7005\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:11 GMT\r\npriority: u=4,i=?0\r\netag: \"67f54bcb-1b5d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 401521\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yERABwQxsUVO%2Bhy35ajlolA94EoqiKWTqEovi1RUqV4keeedaQMMc9nLFxHwZiq4cB41LWrl4NUvcxGNDrvz16vFDJ0uQu9f4w%2BEsZiQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dcb4d5556b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"5127599f81c439cb0cf21166da26e991","sha1":"a750620e45c25855fb32ede5f1adb69ad28c1eeb","sha256":"9402058e0a31e79cd70001ebb397de51144d6e638a482f33bcee9a94dc20a6ff","sha512":"4e01869e43212009dc3811b4fc2303c39ab9aa123ce034ff4df220539a1e65784835b6cb0873cea4f6de027a7dcf1dd440ac0631e6b9c9db9085804473e3a0a8","ssdeep":"192:FkknNHG5WNN4kVyitdix/Inm2I6BRvBevoIPkucZ:9nNmoN4kVyiswm2I6BFBpuI","tlshash":"dee17d19dda17e1005d57f8a2fef815243638390c2856282dced8c5237e40f1ec6e4cb","first_seen":"2025-07-04T18:28:09.283921Z","last_seen":"2026-05-13T11:37:26.560558Z","times_seen":3205,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:11 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 589756\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ybe0q3NWVmF4VYBmTwhPfZxxXYCHWdaz9nbl5iW7597e2EdUcUUWbJxLLrZmRly8k2ffNXFbLUuElQxggwWPUa3xzKKwBdTOLcKJyiFF\"}]}\r\netag: W/\"67f54bce-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 9a446dcb4d5856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-05-13T12:48:37.574785Z","times_seen":11379,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stayarchaicsuperstitious.com/pixel/sbs?c=1","fqdn":"stayarchaicsuperstitious.com","domain":"stayarchaicsuperstitious.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:11.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"stayarchaicsuperstitious.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 08:59:05 GMT","end":"Sun, 25 Jan 2026 08:59:04 GMT"},"fingerprint":{"sha1":"FB:C2:EE:37:99:8D:F0:2C:E8:B1:BC:11:3F:17:54:AC:A0:F9:E1:5E","sha256":"00:64:04:D8:49:05:C8:D5:F7:2A:C3:7A:2A:72:63:72:E8:D8:CB:D9:FF:F9:D5:C3:7F:FE:E0:33:2A:B9:73:74"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: stayarchaicsuperstitious.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nCookie: uid_id2=02a4f9f0-cf8b-4441-a92d-60945a9351c4:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl24581307=1; slecd4bbf4c5470755566a7f8ca36e43911b=[6308900]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 25 Nov 2025 22:02:11 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: stayarchaicsuperstitious.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":277,"dns":1,"connect":91,"send":0,"wait":105,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic\u0026subset=latin,latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Arimo:400,700,400italic,700italic\u0026subset=latin,latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 25 Nov 2025 22:02:09 GMT\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9926,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c8faec8c7e88db25c3377c4c047b39f6","sha1":"a372ff4f49d75668c60c1c8cb5ae0c9d640e16ce","sha256":"60a0d336c29df29c69357de702526bbf761c02b13cb361e08675e96c7b07d1d8","sha512":"9426c1854c9ac3494a61f13da9cbda32bd35bfae3043ca8aa39be01d2ffc7ec8e9d2328dbcb84f68d0608903aa10a7ae051f4c9881192d6679ce798a0381f9ab","ssdeep":"192:XksnkEkKkf0koIkCkZVkKpsnpEpKpf0poIpCpZVp4YXWJNOOSyvV8xhYeWEIOHSf:XznbxdLIf2pin2keOIMhtJgrf","tlshash":"1922a9a2042be480aa871cd277cf7c368e4eb1597045d076abfe18dcac92c6353a471d","first_seen":"2025-09-10T10:57:55.235396Z","last_seen":"2026-05-13T14:25:57.433485Z","times_seen":571,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":220,"dns":1,"connect":21,"send":0,"wait":41,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/ravens-hollow-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/ravens-hollow-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32652\r\nserver: cloudflare\r\nlast-modified: Fri, 23 Sep 2022 01:27:45 GMT\r\npriority: u=4,i=?0\r\netag: \"632d0b91-7f8c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IvqjTMvniZU3kIU3Oxi5GO2YRD7y8TNUPVCOdu8W5baM%2BzUi6i%2FJnGxwep%2F8CYdSKAXMjAKvvn2LZC3q2L6k8fiVTWX%2BPmGDd%2FnnyPhgCdyk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc16eb756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32652,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"9d59b0c35420665d81375260f8ce3023","sha1":"38fd5d51e0ea667cd3f9d8dfdfc1e266bdf5989c","sha256":"b6bae945dceaac3448f9defd30862690aad62f150fd81751c211509fe8d254af","sha512":"2a8ba6871623d0c9f8a158b08cd9d5d7631e37e8ea861d3cd05dbaad5787ad2b8195af2b3b306d9782f7e9c49b432ddf1135fd05f13730c87f02368414808366","ssdeep":"768:n/KGzPjk+43VUUYF+sgybIrcujYOId9fPIP1H:n/9ZsUUYUsgagYOId9fPcH","tlshash":"95e2f1f5435cabc23cfc1c927bb69f12bc8537a97341010325c87ab92581abbf986643","first_seen":"2025-11-25T22:02:37.512638Z","last_seen":"2025-11-25T22:02:37.512638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/static/yts/image/favicon-16x16.png","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /static/yts/image/favicon-16x16.png HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=4d9b42a6-5630-4b02-a51b-52f265a2cff9%3A3%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 619\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Feb 2024 10:45:38 GMT\r\npriority: u=6,i=?0\r\netag: \"65d33152-26b\"\r\nexpires: Fri, 19 Dec 2025 04:27:15 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 581694\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOOOF5U7d5AF6eX5LMo5rwUlvqn5VZ8DTVWTXtQgaBd70oRaZ34arai7LsdK6UxBViY%2FiCefa%2Bk6KykZm3fV6kOVmUy3hN9pBn8%2B1qca5etB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc67c6956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"ea830fdd4f9a6d19aa7455dabdac987a","sha1":"b0d567d6b4d40959e1bd44032f6bc2331057b319","sha256":"71148160c085a70d1af7708c1d52cfcf39f8ef6e4ce13f0f20c080b2e19195db","sha512":"e6c47acc823060861fb02fd16bed2d7e6fdf90a54d9b02d2195d3aa5a9bebe39633c83a272b52bcf17ae538711461ff1b207ec4cb299198dc8b4555ed8915dfd","ssdeep":"","tlshash":"fef0629f4b8f2800950ad1f24f7d247d09110802a392160f52b7f32f734e87988bf622","first_seen":"2023-05-01T20:36:01Z","last_seen":"2026-05-04T11:02:48.790718Z","times_seen":240,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/2/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/2/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 16:16:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"67f54bc9-1610\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 321025\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIY9txCnujS7GfyrNjz5CgGnJmSRSF2JNfniu7fvP7PJzXHzgEQKKQwsCA%2BHNisurXzo8wVciKXueO7n%2FJBpzNR%2BfXyoMXd3PmeQVSCh\"}]}\r\ncf-ray: 9a446dcacffb56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5648,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1622d5dbd3ee323f1f251cb3de7b1f03","sha1":"bf821b06f4b67fc40dbd4398e00be1e12b566d41","sha256":"58789b7eb6e198a1a16151797ce4b1218e36c8708a9cd8a1808cdc40b21b1bb8","sha512":"4e0dfd40e4363c28d49965b28566cb98bd98b3de021cc4ebd60f15f7ff4bb2238d8534f3c98d162a5c2c54c24e15a3fd3db60e04ddef648d8a0752f3d69ca2d3","ssdeep":"96:5zlzMUmZ1CfICcfXgCfViOtAYiY5mnM0pfionq4OHBCHLmOCp0PkuCo1CCJ0xFCL:fMFInadiOyXnM0M0srv4Dv","tlshash":"e0c12fa617650204750bd8563e126f17a7688043ef0fd9b86ed2240c8fca6ce96e378f","first_seen":"2025-07-06T07:29:12.192872Z","last_seen":"2026-05-12T17:29:31.128167Z","times_seen":1121,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":14,"dns":3,"connect":1,"send":0,"wait":14,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Findex.html\u0026l=1331\u0026fd=143","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:33:26 GMT","end":"Sat, 24 Jan 2026 22:33:25 GMT"},"fingerprint":{"sha1":"74:B9:DE:52:5E:A4:22:C1:3F:4E:90:E5:53:C1:13:27:E5:47:BB:D2","sha256":"0D:C6:A2:6A:15:63:9B:67:CF:55:A8:E1:E3:EC:AF:D3:57:2E:38:F3:44:79:B9:FC:61:8A:CD:64:82:05:64:6F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F2%2Findex.html\u0026l=1331\u0026fd=143 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 25 Nov 2025 22:02:11 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":278,"dns":2,"connect":91,"send":0,"wait":92,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/confess-fletch-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/confess-fletch-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34583\r\nserver: cloudflare\r\nlast-modified: Sat, 17 Sep 2022 01:26:48 GMT\r\npriority: u=4,i=?0\r\netag: \"63252258-8717\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BIAlmCvOLicnTgR37%2BUs8%2FVdzZCFvEV46NpdL1meZw1U069sh7yFR5FuvQC2mZ3bk3KE6CRvUciWZHSGAR%2BB5lRDx63D8t5EQlZbN2jlf3r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc19ef656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34583,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"5f070d4ea1216ceb95ec36662a391a87","sha1":"225822305c4de15f3d4d057ad7a7d94bfb727f4c","sha256":"5defe797d828e6d4e9229c42bd2c0f8628ac242f8d3b305fef051021207b4698","sha512":"0dafb2608e4fad14415a1fe229d7d2730de666d6a200eb9c035c5e98ceddef44f4305cccb89a6e37fb4e2754cc5437dabbb5cafe6b2f6621dd06dc7d2e939d61","ssdeep":"768:gn/T73XhIAXwKOhiD11vsMUjos361mmqAvH62oxMrl0niEfXN2:CL73xIAXrOsqjos36MS/l30nZfXQ","tlshash":"d9f2f116e515fc96e5e27eeb887b7d30e1f08a2cf42a8d9100c13c397725a512e7127e","first_seen":"2025-11-25T22:02:37.514388Z","last_seen":"2025-11-25T22:02:37.514388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/after-ever-happy-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/after-ever-happy-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27964\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Sep 2022 01:26:44 GMT\r\npriority: u=4,i=?0\r\netag: \"632e5cd4-6d3c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2FS4SlH2fR2LCHJdlJYGx3AQD%2Fm4k29TyGPQjahXgLi4Ga%2FXy86noK2lgxmONDvHy14ifOX%2FzGCuF1629jVxOPRXnPr6g9KdG%2B%2FWwGnX7tnD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc15ea856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27964,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"de215753ec2915b1ef7ef956a74cb026","sha1":"dfa1a02615a8804b36dafed81fb3dc96cb4360be","sha256":"c39bb974f1dcd5b30fb9faf869502ff899b3aaaa6d61428d302c4ece65207789","sha512":"52461d5ec9fef2c23d4222e415dc42fe4d98f2ae2953b5f2acb41082b15a8579a8ba2f3b0f988345c8716dfb2aaf250ae896ee049e6a034de8177378562e647d","ssdeep":"768:HAZHIwDuNSMK3bzWEer7ZJYlMvxkHnYtn/X:H8HZDCSMuzS7bGMpmu/X","tlshash":"0ac2e022a7155fc37c715823df9e997adbc9794002e9090cbbf2290f2bb55219278bd3","first_seen":"2025-11-25T22:02:37.51522Z","last_seen":"2025-11-25T22:02:37.51522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/section-8-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/section-8-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35266\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Sep 2022 01:26:45 GMT\r\npriority: u=4,i=?0\r\netag: \"632e5cd5-89c2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mtA5fizpA74uPjYDEx%2BvrW56lDnyNDibT%2Brcc8KqT6VDe5yaz57WbIa8bfoqZRml%2F1dFSdRG8I8f5Rpvp2%2FbdWUYHbH6CSeOa5IpKCrE5vFh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc15eac56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35266,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"d1760c7638bc5129a153994b1606cde1","sha1":"c10465fc12bdc708ddde6dd56c4463ed2e78a443","sha256":"27e0fbce1ce9781d8a2eb0949ad64f83bde853b080b9ada7066ae61da578be6a","sha512":"56ee32fd5c280371aef21dff9373f7c17e89b6f753bc3e29f36f13fceeb309c079a6f62a8fc7a6fdb380628d6e8033ce0a508080cd9e777cad4d44710193ecc0","ssdeep":"768:p0BiT5qKX//HtoGq4kqYIiamTG1lxUwQCg5aDxQXz2SF5rHg5cXYPhN:pLNqKXdjqwYaEG1lWug5iejTPHaPhN","tlshash":"56f2f108975727c7f12c213b2c546e2b9decb91295cb5e87b5ece8412e306e057e2bc4","first_seen":"2025-11-25T22:02:37.515977Z","last_seen":"2025-11-25T22:02:37.515977Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/mission-impossible-rogue-nation-2015.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/mission-impossible-rogue-nation-2015.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39241\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Oct 2021 14:03:33 GMT\r\npriority: u=4,i=?0\r\netag: \"617aadb5-9949\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxGNP%2BnE8Soc9iLpR6G%2BMxZjCFLxPusZTCb%2BHZEezwX68Ln%2FoohL3DZks83vELxjaPR%2FpZu74Q6EG83QcCOnkyZ8lQ66sb4Xat7f0pnvTGM8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc16ebc56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39241,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"36adaf5cbfa647c5253f3b588eb90e2f","sha1":"32762ded4cb42c752c8cf4d46b752053493d5d29","sha256":"ff0185ce74297a16977adfd002535d038fe9263a96e709620cf77111bcfe3549","sha512":"24ecd0aa421d69b467268f5db410ecc951fc85363877f3e4a4c36027d095ae978b894f0aa067e6220e5bd0e94a9822575830cad36124c851e39c4e24a6a1ba36","ssdeep":"768:+oIFNLqPo/ezgicBa5/mDd/WM001oXqtl3yNcbCWbzrqJFf9eqTVF2:+pNqg/ugOmDb1eul3uc7byJzVF2","tlshash":"f703e11e8676b2c179a449bd27f18e5692a37136d5fdc2cfd2d8e01c39870a8148f883","first_seen":"2025-11-25T22:02:37.516827Z","last_seen":"2025-11-25T22:02:37.516827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/sita-ramam-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/sita-ramam-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30976\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Sep 2022 01:25:47 GMT\r\npriority: u=4,i=?0\r\netag: \"632bb99b-7900\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejy6xzX0b10iabhWYhfGfNs17pD6tP3q%2F8d8hETrWPf9vdmlH9N7IGlGnHewXAljYEgh9plsNuD0cs0MSziuVIvXFvmYl1H6xGKPAMzanfMl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc16ecb56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30976,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"7f6a7b43e4ef4a62f5fc3200fc10af7a","sha1":"d04ea8d983de2dc058a4cfe4114ca9837d6bdc8a","sha256":"3fa15aa81bd3f4589d9e4bcd65f8a8ab23b763804f1b95fb5a44786198dbbb7c","sha512":"c23b0ae6e9d368fd94ff29785ebae01b38810486744ca2330bb8ce4af4a753ea970ff0531a8894180a6f59caab53312ec1a8800adf27c132c02e092399de25d8","ssdeep":"768:Y3RZP2CNiZmdrXHj9Gn5CcBdBzHczCl+LCYaamWnzRghNo:gt8mdbjg5ZdBzwLLCkmjhNo","tlshash":"7fd2e14d821b38e3fc5814732f579d1d6bf9ad01a6eb9cb3add45950a987770293020d","first_seen":"2025-11-25T22:02:37.517627Z","last_seen":"2025-11-25T22:02:37.517627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"3.69.209.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.yts-official.cc\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=02a4f9f0-cf8b-4441-a92d-60945a9351c4:1:1; expires=Fri, 23 Nov 2035 22:02:10 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7a4d0bbcb9aab06eb16534480d8120a9","sha1":"fa40f9c68448b528886c98fe5808678885d6aea8","sha256":"84f20efa28cbc7f48d5998ba4a9221ce9ac435763665d4a51792fdad71ed12a1","sha512":"f3a1a70bbf2a6c9dbd5a30bd84ad820819904f342ef6d9a5f6f8c696bba91ee7504358524be96f57ee4afb6531b40e602846db0fb9b514ada0df3478d3742af7","ssdeep":"","tlshash":"cc900407f7710d34131c05d0111c371041d50144c5407000411351405f1351f0173550","first_seen":"2025-11-25T22:02:37.518475Z","last_seen":"2025-11-25T22:02:37.518475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":145,"dns":33,"connect":21,"send":0,"wait":24,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=4d9b42a6-5630-4b02-a51b-52f265a2cff9\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=d4bbf4c5470755566a7f8ca36e43911b\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=22","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 22:02:45 GMT","end":"Tue, 27 Jan 2026 22:02:44 GMT"},"fingerprint":{"sha1":"F7:0F:08:42:86:24:7C:1B:49:6E:E0:01:4D:B6:85:C3:51:09:E9:4B","sha256":"57:4B:E8:D9:F8:CD:FB:C3:56:16:42:88:21:1B:6A:B3:83:F2:4E:B5:2C:AC:2C:6B:0E:46:6B:15:51:D1:3D:17"}}},"request":{"raw":"GET /pxf.gif?uuid=4d9b42a6-5630-4b02-a51b-52f265a2cff9\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=d4bbf4c5470755566a7f8ca36e43911b\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=22 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 25 Nov 2025 22:02:10 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d320b48518d81474f09aaf8c65348b24\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":665,"timings":{"blocked":282,"dns":1,"connect":92,"send":0,"wait":100,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stayarchaicsuperstitious.com/sbar.json?key=d4bbf4c5470755566a7f8ca36e43911b\u0026uuid=02a4f9f0-cf8b-4441-a92d-60945a9351c4%3A1%3A1","fqdn":"stayarchaicsuperstitious.com","domain":"stayarchaicsuperstitious.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"stayarchaicsuperstitious.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 08:59:05 GMT","end":"Sun, 25 Jan 2026 08:59:04 GMT"},"fingerprint":{"sha1":"FB:C2:EE:37:99:8D:F0:2C:E8:B1:BC:11:3F:17:54:AC:A0:F9:E1:5E","sha256":"00:64:04:D8:49:05:C8:D5:F7:2A:C3:7A:2A:72:63:72:E8:D8:CB:D9:FF:F9:D5:C3:7F:FE:E0:33:2A:B9:73:74"}}},"request":{"raw":"GET /sbar.json?key=d4bbf4c5470755566a7f8ca36e43911b\u0026uuid=02a4f9f0-cf8b-4441-a92d-60945a9351c4%3A1%3A1 HTTP/1.1\r\nHost: stayarchaicsuperstitious.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 25 Nov 2025 22:02:10 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4254\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.yts-official.cc\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=02a4f9f0-cf8b-4441-a92d-60945a9351c4:1:1; expires=Tue, 02 Dec 2025 22:02:10 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Wed, 26 Nov 2025 22:02:10 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Wed, 26 Nov 2025 22:02:10 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Wed, 26 Nov 2025 22:02:10 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Wed, 26 Nov 2025 22:02:10 GMT; path=/; secure; SameSite=None\nu_pl24581307=1; expires=Wed, 26 Nov 2025 22:02:10 GMT; path=/; secure; SameSite=None\nslecd4bbf4c5470755566a7f8ca36e43911b=[6308900]; expires=Tue, 25 Nov 2025 22:02:15 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 108\r\nHost: stayarchaicsuperstitious.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 94e4142ea839f2b155d9c31eb619313d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5882,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"2bcfc36b0b0fec640dd6c4909cd51bbf","sha1":"a07ec5e8385b1ae00c71993936a5f2278d963084","sha256":"e6043d08a17dde1a3bc9ab1d10e26cfb17dc3f5e83922006999a0c6bcb4c3f56","sha512":"1892cb68593b4121abc0ebf80f21b3b822239eb11c0fd858182677bdd2772095fecc5b83588deb2f0eef19b457478fb5e683b82bd1d3850c887f69a06bc1fc79","ssdeep":"96:9zmJVGefZCKAMUwlnXE9fuyUFQErZci0ADof1hHL0TLh2YnGeO3BSxMUwmq:9zC/kK2wy4LlGK0rHLKkY4Ed8","tlshash":"ffc14c2d6d4035be16cd990d3566ace26ec5adcfe676c099f01fcd4e156f1289a060b0","first_seen":"2025-11-25T22:02:37.51917Z","last_seen":"2025-11-25T22:02:37.51917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"stayarchaicsuperstitious.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/speak-no-evil-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/speak-no-evil-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13878\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Sep 2022 01:27:51 GMT\r\npriority: u=4,i=?0\r\netag: \"6323d117-3636\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEHyy8wgsP2iiXFaFFjAkPQ6FmOCXsqjxipiAIy1FUEBWDSsaBx8yD0tbzfkG2CdoGKQWgT%2FBn030BCwDDTQFCGeoYkGcudMJJ6nnTIjnkUF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc19ef456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13878,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"da1bc11f8f54802fe0a9200dc72fa5dc","sha1":"836a29815db28ed1d45eac7877e4e69d6e05c055","sha256":"921624f7ab53f11130dca47a11e5fb015ce52811220e840b90340b90a15796c5","sha512":"61f3e1684c09f0a462be037efe06714bb74b16382f374962822ec7c394f183f1b3fb57c61ab8a36cf61be9e9eb8550bec57e8dcad3b3b02eeee40484609143d8","ssdeep":"384:zFR5VDGMBJWJuSDQcAgcqSEIRTNB9Jh9WJY24rB:pRGYEk1cAnqSEAlr9WJy","tlshash":"bf52b00a3e3aded3f988997691928f29b3ccae3844b09b6702d1ec8c142794565ce956","first_seen":"2025-11-25T22:02:37.520065Z","last_seen":"2025-11-25T22:02:37.520065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/static/yts/image/logo-YTS.svg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /static/yts/image/logo-YTS.svg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Feb 2024 02:51:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 528\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCMvYCkZYhP%2FkoXEd1%2BE4yMglZQFRU0ScOSNt2fmyIFJ7EYrB%2F5mQMZSs%2BJDhEknecuSvMmOZXPg%2F7s4%2F2zHJv1pWKjnlY2tuzVY0ZoXomvz\"}]}\r\netag: W/\"65d413b0-5b34\"\r\ncontent-encoding: br\r\ncf-ray: 9a446dc15ea556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23348,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdd85bfbf80d872ea41b942cf21d1db9","sha1":"6a2d54565cbffa3af342a63931e412ad8837f92d","sha256":"2234cb288342eab0edfb65ebda4189cf47b40a4b639a25af62c57c03f7ace459","sha512":"87e33e9bcdcacd7fbaf5dc88fdc368a2f672d9b07921d56362f69db69bf7202a6d28e61b1792160bd905fd7e5cd8ad5efd9ec9ddaf40304f7dd411b23957f4ff","ssdeep":"384:CJXV9NV4igqAKXlV9NV4igqAKX2V9NV4igqAKXuHSQS:CJXV9NV4igqAKXlV9NV4igqAKX2V9NVn","tlshash":"1ca29709e8b305e9117f2075139fc306626ba6479540ffc07b9c92605fb2d5533eabea","first_seen":"2023-05-05T19:10:32Z","last_seen":"2026-05-11T06:28:42.335348Z","times_seen":293,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/bullet-train-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/bullet-train-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47482\r\nserver: cloudflare\r\nlast-modified: Wed, 28 Sep 2022 01:26:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6333a2d7-b97a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2eM2ly1iMgHeMd%2BNctBbo%2Bf%2FvDzGmmkpqZuQwRKl5K0qZbxlQHjJygTjHAB0GRM9dLi4z1JI7XUbsO%2B9QUgFRwMbVd4pGx1%2Bdnke19J3K4%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc15ea656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47482,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"143299ffdd3720b29bc323a12d0dd434","sha1":"beb884a5e45f529e3acb73139a9bd2287962fb8c","sha256":"e1cc681d9ef7a72089384c6cab706eafb9c10adbcb795e1d2356a11ba6c1822e","sha512":"cc4a2cbc8c21dbc12615ca4e82c00d6e7901b93f34e1e3f68876879784d04bf889bf34835fbb3cdaa4ae39462653a0712b8a8a762b92e917fe6e0033b86015af","ssdeep":"768:3J7+ut+ouNV0jj7F9V4MR0tfJAYHzH3YNZODGN0XiLxuFGR+/7Zxq:57+aCNV0jPKtfJVbYNYDGN0S93+7Zxq","tlshash":"0c23f1184465499131a06e282df3987627e9dd7fbb67ae123fc77720d34bca402602ef","first_seen":"2025-11-25T22:02:37.521445Z","last_seen":"2025-11-25T22:02:37.521445Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/the-attraction-test-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/the-attraction-test-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29794\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Sep 2022 01:26:50 GMT\r\npriority: u=4,i=?0\r\netag: \"632916da-7462\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Voj3I846VURAqY%2FaaKHxAr%2Byx%2BR5CFaS77DEQ%2F4AiCkZsFw%2BiGx9wNlDgaY0jIA2oFHuaeeF6EcM1BXIPnQOEuCz2yqe4RuqAXr0PHCT9N%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc17ed556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29794,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"63f7ce87798e46361ac9a96099bed054","sha1":"273945fdca613dd53758919468d1e41008da9b1e","sha256":"d64abcb645a078302e91cfcfcfc7f2da60624a61430a8b45244af88326d34116","sha512":"e779e9d890aeb5f0dd2e6322f30dcda6a3de61d13696b89e269be4df1b4d02ace27c275fed32a0740231c6416cd27bebf82079914d51c76e6338bc291f06ae9c","ssdeep":"384:px/9SNz5TQsxcMWeWPFlnIKkIhZ+/4QKoDsnpmiMvcZKVLgMhff3tB5fB9aeG8Y4:pxsNzysxqjtlI1IXi4Qt0puxRfv3GAX","tlshash":"79d2e0975ecaa5dbf53b72b2506c3fb872b16e413071b29c15e137884f315e96b0e288","first_seen":"2025-11-25T22:02:37.522275Z","last_seen":"2025-11-25T22:02:37.522275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/static/yts/image/apple-touch-icon-180x180.png","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:10.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /static/yts/image/apple-touch-icon-180x180.png HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=4d9b42a6-5630-4b02-a51b-52f265a2cff9%3A3%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 6973\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Feb 2024 10:45:38 GMT\r\npriority: u=6,i=?0\r\netag: \"65d33152-1b3d\"\r\nexpires: Fri, 19 Dec 2025 04:27:15 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 581694\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWh8cftSWJJ2UARYpJn2ZFAFPJ%2FCMWrQLZ3x9BSd0%2F9Vh0Ru0pgiigpAOkC4i%2B9amTrKh%2BrziA4h4s6XBjribOPyp20%2BCo7F3jndjCJhWU3B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc67c6856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced","md5":"f87afcf11d459620ff02da6112365db2","sha1":"d09e6d4e7db706569474bfb7ec93f31ccbd6ed69","sha256":"a70913fad67537f16d871e4c456c8f4484106f6d4ef3e12fa3c3b2eceefee508","sha512":"8dbc4adca21720edf8e8df525f3e0b898b1f006e1fcd1767400dfe46344820751415e6a77eae8e9f46baa28a6b87ae5506235eb1dfcb6c5aba466a5519cdb091","ssdeep":"96:uEb+54i1CSdZfWGwA2GUcRMrtj7uOmghC+w4Xq3uLXr1RakEQYdihK65y7Lgied+:D+qi1FOGvB+j7vUGvL70QmW5bi0kR/","tlshash":"e7e19efc08a90b7ef65089d85b6328960f064529302d03fb1d7efb5fb7b8c1a15b9206","first_seen":"2023-05-01T20:36:01Z","last_seen":"2026-05-04T11:02:48.777862Z","times_seen":235,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/movies/poster/blank-2022.jpg","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /movies/poster/blank-2022.jpg HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25512\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Sep 2022 01:27:44 GMT\r\npriority: u=4,i=?0\r\netag: \"632e5d10-63a8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NjoDmmUwtkgnOcTeC3vvEwqJsUGX6Wasql3Z9v1qR7IetMZYPf2ExX0N3Td5KAzKKuL49dPoKamLVEIg6sHfyu8NIJoad5u15yuMASQq%2Ble9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc16eba56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25512,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3","md5":"436d36c254a720b3b6223c442b38a582","sha1":"dda4c0628a15517aaa89db2e06e8b965e72eb5c2","sha256":"36d2671ff2f839cf813f8c6a8b76ff8052833fd968a4084786e8618aea86971b","sha512":"f0bf9bdacedee36a4010837020c3d920cea2b5e16674f3c60cbd12a6a6dcffc5777ce56f83330ab50c1d74aaa49a13f954647cee529cd2ed929d072fc60362e0","ssdeep":"768:QM8SVUUkaUaI+972wEWwNS2HhWOuBEV4vnfxMlj:RVEaI+9XwNSk5V4vo","tlshash":"37b2d076f35053ceff367bf88f404e8621e545206a075ab128c5ee24a6c7de6a29d13c","first_seen":"2025-11-25T22:02:37.523676Z","last_seen":"2025-11-25T22:02:37.523676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/static/yts/style/modded1.js?yify=1","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /static/yts/style/modded1.js?yify=1 HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Feb 2024 03:18:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"65d2c88e-27b24\"\r\nexpires: Wed, 26 Nov 2025 06:50:22 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 11506\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z5VUbA9pjyn0hy0bm1HacKdyZwSnxsZSptl8e9cpZLUwM%2F760DtoaQrwYZux9EvpZ8fs6GiSlCiU0V1Z7Em04x%2FxAQDVOEr0o5Q3UBtvzN8t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a446dc19ef756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162596,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65452)","md5":"60de675fcd2844a3ffbb68550d303076","sha1":"8a53cc2f554a8ef1f58f3fd1996a3c3552ea5472","sha256":"1c821bdab262418e3742bfa3c295c3b668724f7e8898b45638958a898bd93d33","sha512":"ba6dab3a4db0249e565b31a7cb00ef2af8b0a44f4163a3f2c1123aa869d7bb655f54079875eed198a7a8c5f29053ca9865bfae62d3c81ed9f25ab6c95d855067","ssdeep":"1536:wCiROaq6JgInuFkbrAkknYQaoLyrq0LfxDX5cw4j7BIBxYSMHzJX0oqTDAGegnM/:ja6ZMDYIB6bp0RpnMEUOsKJbTc","tlshash":"a5f329cdb6d5703243bb30b9106f950ab233546b640d8840f16cd8e96fb8e5a5277fad","first_seen":"2023-03-08T07:05:18Z","last_seen":"2026-05-06T14:34:25.575338Z","times_seen":282,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","date":"2025-11-25T22:02:09.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.yts-official.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 14:06:42 GMT\r\nexpires: Thu, 19 Nov 2026 14:06:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 546927\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-05-13T14:47:10.769116Z","times_seen":7658,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":108,"dns":2,"connect":8,"send":0,"wait":8,"receive":2,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yts-official.cc/browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0","fqdn":"www.yts-official.cc","domain":"yts-official.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-25T22:02:09.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yts-official.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 02:26:24 GMT","end":"Tue, 17 Feb 2026 03:24:12 GMT"},"fingerprint":{"sha1":"FF:92:81:36:19:6C:A4:98:B7:F5:7D:E8:3C:B0:07:11:CF:6B:7B:7B","sha256":"67:DC:CF:7D:40:1C:A3:58:6C:EB:EE:F1:F7:59:20:B5:10:6F:1A:A7:C3:02:E0:06:D4:77:D3:C2:B5:98:A0:45"}}},"request":{"raw":"GET /browse-movies?genre=all\u0026keyword=\u0026order_by=featured\u0026page=109\u0026quality=all\u0026rating=0\u0026year=0 HTTP/1.1\r\nHost: www.yts-official.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 22:02:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/5.6.40\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEi4Zo%2FF%2BWGxobFbv863aXiD3p84YqgeaCcj8CtIwjAiMFLgAgJXIYODKMEFKkZ0Teo1tIgaqUVg7C0NFYyMsYwchPUN9sWL%2FdcAserotYwbtag%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a446dbea9f44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":45718,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1954), with CRLF line terminators","md5":"6e8d596bcac1cc41a995916ba9d77ae8","sha1":"f81dcfe5569d167e739ba5f507c8935f251df175","sha256":"3f16650ec7813bd3cdac42f3d1330bf12885714667794e6de53e6ce5c2b6d725","sha512":"d61c84b1a31e89f00306b3b9b53737b7f93ef750ea6159ad894b4b0190c9ecf350dbbbc4e16ad4e543f16a8a1b871636754d77da189fae8e7828743a4310ec81","ssdeep":"192:7UB+2++Od3+eed18n90K+pKAX91E0iphKtEEvxvOyUANmabGHoHYpQ4K7FCFe:7U1m0K+wqDE0iphKiQ9OyjGHoYpQ4he","tlshash":"01231f2618d1d42f1ab7c2cd11215baafdb28213c5a54508b7ae87e35ff2d38da3b117","first_seen":"2025-11-25T22:02:37.491062Z","last_seen":"2025-11-25T22:02:37.491062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":39,"dns":23,"connect":1,"send":0,"wait":261,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}