| en.yts-official.mx/static/yts/style/minified.css |  172.67.202.34 | 200 OK | 21 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/style/minified.css IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeASCII text, with very long lines (57475) Hasha314b10e99529c56373ebff456f96618 89369052969ff4793a3c290593b5ded5d2d3e6d7 e043e009630de7fdb24141cd7e788e91a7978880af7730e0f8f97bf41c2cd549
GET /static/yts/style/minified.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 08:38:28 GMT
vary: Accept-Encoding
etag: W/"65d31384-1d423"
expires: Fri, 03 May 2024 17:57:20 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 32635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Av%2BvsX7zFa5so%2Fe%2FC5hbLVgqZZJZFtIpl%2B4eZBEGOTvB8CK%2F%2Fz%2F7Vmg51pPqwiE9y1Mb%2FDfwZqTXZPHJrOSeQFoLjlR%2BaJFmcB4DWGD49upoCqA%2FGyBIec9dEmlqyICzZoROU8g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e12012b9ceb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/edward-scissorhands-1990.jpg?v=1 | 172.67.202.34 | 200 OK | 21 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/edward-scissorhands-1990.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashdd54f94d04fd748f7ed60aebf281c9bc d064c961a5013e6f58f94f9cca820e25178cec47 626f6b3322ccc3499e08d223a9ffe37bab44c656738e40fd0cce6c66880ffd91
GET /movies/poster/edward-scissorhands-1990.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 20675
last-modified: Thu, 28 Oct 2021 08:33:42 GMT
etag: "617a6066-50c3"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=on%2BM7yxQbwhZpscRrCfv9iTyZtD58kk%2FXsV6cNtegDw2%2BK2pPyFPzbSBY3N6Yc212Haa9IWjSjQ4OjoNF8sYU0IQfmMFCCuEOoevWfizA%2B5M3V6vVcvknDMvDpRlN40ydbD8A%2FE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012b9d6b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/army-of-darkness-1992.jpg?v=1 | 172.67.202.34 | 200 OK | 29 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/army-of-darkness-1992.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashf93fdcd631522421f4a8156b36e9fc8d 4c94c64b2753ed9e4205cd7f748dfe69d823c689 45c25a26dd02ac9d33b407f9a859d3aa2c19a8a2cb832aee37c4909eb894f640
GET /movies/poster/army-of-darkness-1992.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 29158
last-modified: Thu, 28 Oct 2021 08:31:44 GMT
etag: "617a5ff0-71e6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=06bGKZGirEuSfGDsEYpgsOPS4TSNMLc1NtSuvBZBfbgtUCB9d9w3B9mUFbtjtowy4jiPTiQzWqkZCW2DXW%2FswrIZSQKRts7%2BMiWNlC1s7l8%2B3i4f%2BpAv4oJDFZqqBhxGE0Dbu5A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012c9efb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/psycho-1960.jpg?v=1 | 172.67.202.34 | 200 OK | 30 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/psycho-1960.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash3458a75d5764d8c4bd2e2df905ae92f7 5dd338d0d46ed7521f7094f06b14efe7d123ce6e 1c28a74e349c8bab243458a89daec2f25e33e86437540b66ac7473bf4ecd813f
GET /movies/poster/psycho-1960.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 29768
last-modified: Thu, 28 Oct 2021 08:24:57 GMT
etag: "617a5e59-7448"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dIzaXREHhIeN3AFTuKJ4mq5CWHYmkbtOgG%2B14iATXaV4%2F8w4eqa5JWDdK3vv9txM7CHVHQ371Ki5emJTbqzcRUwBqR55b%2B3mB3n3Lp4HNEHgpGDvG0j4HY8DoFvZgCaJDOq%2BaTg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012d9f9b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/up-in-the-air-2009.jpg?v=1 | 172.67.202.34 | 200 OK | 22 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/up-in-the-air-2009.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash11174e049ab827df9c4fcaf51d24762f 0019113cbb3f0f7013cc6eb6bd1da94b26277c00 3fbb52414e3c8d57faa611d7349eda4956f9ffddcf8fb9653f2bc590038d1fb2
GET /movies/poster/up-in-the-air-2009.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 21638
last-modified: Thu, 28 Oct 2021 08:26:50 GMT
etag: "617a5eca-5486"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N1f35vxa%2BA3aq8GmWDjxnwJt%2BXSUir9jrdaLS3bfsRtZL%2Fh9nmGQmM%2Fuc9bAlmR1eBt%2BcQK9IE2%2FQfLkehLuCU6X9P6xn0L6FUwehkiSIsgUIQ16JZkY7ybY79%2FUGnhK0IS0xxc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012d9f7b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/faceoff-1997.jpg?v=1 | 172.67.202.34 | 200 OK | 13 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/faceoff-1997.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash140560c22ef1875fa6cf662cad96f563 1383e9821b66def1382c2f1d660428b16403d716 54afdb8edfbf4649dcf06a38d6eeaead0de98981fe753560c489a05c30341500
GET /movies/poster/faceoff-1997.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 12563
last-modified: Thu, 28 Oct 2021 08:26:54 GMT
etag: "617a5ece-3113"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jj4NEBOvdcpNR7oMUp9xXybya4LNe92FcTebIMFbs7U59rSDisgjAFfSO24hHF%2FSxhp5OtxQGd5JsuZi328xBQtRV2h9vYOcDe3fqZLyfzxm9kxzS9m1P72ncdhMyKgga5f%2B%2Bbo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012c9f2b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/basic-instinct-1992.jpg?v=1 | 172.67.202.34 | 200 OK | 22 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/basic-instinct-1992.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash68cf788682e7a33b6a8c713468307a63 233f4011687d216e1e0da2e1d702c2e1a285d68f 27d3489783e57bb35678daa714c45c5283a1c284037ed75ed91164c824e0df54
GET /movies/poster/basic-instinct-1992.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 22308
last-modified: Thu, 28 Oct 2021 08:22:57 GMT
etag: "617a5de1-5724"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xk%2BUP%2B0TncCitqR9USkc7pJDR0%2FRFOLzefPc%2Fbq2M7N6k%2BkKKWMAvrwMuNwOQOI3YBAvNW%2FWqI2AYsrLS%2FNx52046fAsc10eQF4T4FWafCMYXNePCWOzIpFd34v6uxPqVTmmeUM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012da06b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/mrs-doubtfire-1993.jpg?v=1 | 172.67.202.34 | 200 OK | 26 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/mrs-doubtfire-1993.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash5718b67f9fe9e231d57c156a76bd026a 33f13dd919b14b6318dc101a1635e165fde246ed 041ee7af9151cf73101dab2ba536e54e4de1c0ae707d6b2a50715055a80a7937
GET /movies/poster/mrs-doubtfire-1993.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 25880
last-modified: Thu, 28 Oct 2021 08:20:45 GMT
etag: "617a5d5d-6518"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2F3US5Aq3iddyLMSMdc9fIK9kfs6XuxZI21pDLlu25nY25J9PyUusQ5NnEuO1KgWIyS9QSBJCZk4zLeNguktt8BIx0NY3plIQiawuNG5mE4eyMQGJ9wWBo05VewDLCCMENhhB1M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012da0bb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/enemy-at-the-gates-2001.jpg?v=1 | 172.67.202.34 | 200 OK | 19 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/enemy-at-the-gates-2001.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash19ae157d25b50d8c26ee451ed7bd3134 6ebe8524bdaa17db00dcb881e6bf79e490d267f0 21a115b7e5ca01a09061711a39bb1d8f2de5f0455bdf1118b1b97177f6e48738
GET /movies/poster/enemy-at-the-gates-2001.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 19329
last-modified: Thu, 28 Oct 2021 08:20:36 GMT
etag: "617a5d54-4b81"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1KOqo4zgBC0Vh1SiSGGFaBvdSHQbH9EByIR4yv0Rl0kz0N%2FNIeHebyfRC%2Fxvd%2Blx%2Foph56Fg9spl7j1STsU%2BPxBP7nMDVnycaVnvj6biTNONC%2FJ2oKCqeT6we%2FUeOl07rWoMCA0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012ea13b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/poltergeist-1982.jpg?v=1 | 172.67.202.34 | 200 OK | 6.8 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/poltergeist-1982.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashc4620fcd2d21ad6877c8855653610953 41aa9a0131c341ead3a00628ebcc3fe712f74b8b 6ca613a536606f5b75ba6299084b5b818292eac2c859a0b269c605fc93e71916
GET /movies/poster/poltergeist-1982.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 6811
last-modified: Thu, 28 Oct 2021 08:18:58 GMT
etag: "617a5cf2-1a9b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xzJHiRmmK0mk%2BTwthLOYM6%2BTm3WTvGbDoCVktCB%2BL0raIJj%2FzVp3UtaMIM85f2CZL1E1f9zL82MAAnO%2BDidbtnTFEeacl0dd%2BDOiL55AJx5QG13UuqF6IISbjurMDzHtKyFmV7U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012ea14b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/the-bourne-ultimatum-2007.jpg?v=1 | 172.67.202.34 | 200 OK | 24 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/the-bourne-ultimatum-2007.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashaa81926e66a7e1026bc14663dc0673a3 4c6f98ee417fffbd01c1608c1181126d68ff7c6c ceb6647bb25a9aec58c6b8059ac60b12ac5356fc052455c4a7e24d3ade49f9e9
GET /movies/poster/the-bourne-ultimatum-2007.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 23753
last-modified: Thu, 28 Oct 2021 08:12:44 GMT
etag: "617a5b7c-5cc9"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pjTTnp9iR2s5hKyq5vxxrL%2F6F9EB7KxGhGrQyjS6FVhH4NwC46cjAGjv0odZzP82Dmvh0ZLwNZsGLJ3BiJccxQApEKyoKFhuBgYd8MRrrAxL0%2BsYUPlHhs7L9XnopK1Js4kRcjw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012ea18b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/the-bourne-identity-2002.jpg?v=1 | 172.67.202.34 | 200 OK | 26 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/the-bourne-identity-2002.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashe19057ba4738ee8b2dcac4d80126dcbb 842a242f049d2331a1a9d800c8398fa604e97af6 fe76d6db97f05a4fff33dea708b214fdc906305a9930c0da4db680c7fe1919bf
GET /movies/poster/the-bourne-identity-2002.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 25899
last-modified: Thu, 28 Oct 2021 08:12:29 GMT
etag: "617a5b6d-652b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PZLd8kTd65LpaJeSB8eI7YD%2FFEH7IbUYzs7AZ%2FuiLrvP5TGE9u7%2B5pwjKfjKc62%2FLOLrSXyvXE%2BQR%2BNAC%2Fnl6Iz9Tc0yR8TrGwGAx6SgDTGO062gLIsixdJBkQ8adkBTsJQ94pc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012ea22b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/images/website/select-arrows.svg | 172.67.202.34 | 200 OK | 20 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/select-arrows.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash88be16e7ca0a244652429e056179d1ba 890121e5575a131b66e5fefde915c3be93d758b0 75d6d0bf20e8acc508018fd5f0b584c18c56db8eb96e0acd92a81b3603424421
GET /static/yts/images/website/select-arrows.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-267"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2424
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vL7YiBeaXobZXZ4uPucPKLhEeUXhqDP33SDXF1S8j4w%2FkIUJSfWLHv99UwC2TpStHKB4T2SQJR2kNOk3Pk%2B4SPQp62gSxiSw5AVWKRzYug2nHBM8P9qHlr3ubdXwofEB7rNVOgk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12013eb09b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 | 216.58.207.227 | 200 OK | 22 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 IP216.58.207.227:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22052, version 1.0 Hashf0e48ce2beda9e8cbd7d915bf1b1ae71 3dc1cfff1759b0959cc7fb17517651ec850d584d b2504b3c20c2feb37e78773b788dd09a9cc43c9f36086bc1e2f83a6366ebaa34
GET /s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:53:36 GMT
expires: Fri, 02 May 2025 01:53:36 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:00:24 GMT
content-type: font/woff2
age: 133659
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/style/modded1.js?yify=1 | 172.67.202.34 | 200 OK | 72 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/style/modded1.js?yify=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJavaScript source, ASCII text, with very long lines (65452) Hash60de675fcd2844a3ffbb68550d303076 8a53cc2f554a8ef1f58f3fd1996a3c3552ea5472 1c821bdab262418e3742bfa3c295c3b668724f7e8898b45638958a898bd93d33
GET /static/yts/style/modded1.js?yify=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: application/javascript
last-modified: Mon, 19 Feb 2024 03:18:38 GMT
vary: Accept-Encoding
etag: W/"65d2c88e-27b24"
expires: Fri, 03 May 2024 17:57:20 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 32635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vfqKVWuUJlEl5wmp1nYEKM8NIa%2FwolMyqJ2aI1OucF52OxH6Nkbk2IUcTqB0KtmGKUSrKAhv1vqdiDJn8LyYpHtrsBNMm1Rw1bGfH7Z9NgPtHrM5aIJxDEiNVl8K1d2%2FJXXAjVM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e12012fa26b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/from-dusk-till-dawn-1996.jpg?v=1 | 172.67.202.34 | 200 OK | 27 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/from-dusk-till-dawn-1996.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashf37fb7793600e5b3efa727c95246f86c d886ac419f2d4c2734eeca740d4dfd98ae47cc56 64077b3d9b29cdb4739a337cb40985e2ac42caae303d16635229ccabe78d11ea
GET /movies/poster/from-dusk-till-dawn-1996.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 26695
last-modified: Thu, 28 Oct 2021 08:41:48 GMT
etag: "617a624c-6847"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vqvLQjfu6ez%2FxK43dEsjwTA48DE2KM43XYEgvCWt2TFw%2FnnId6UvVRUAJPGT2wQecD439piRzsmZiY%2BMlZxFa1LJEs8MyzwF1gWMsHEwEtS%2BckV9nh2RD9cUiZyer%2BOgPRnhilY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012b9d4b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/boyz-n-the-hood-1991.jpg?v=1 | 172.67.202.34 | 200 OK | 28 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/boyz-n-the-hood-1991.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash2100f343913691422ff7202253fbfb83 e31e1d9f736000c3d25a505396c5c401f0ce03a7 be89e64870f8f2a80efbb1ec0acc8ca438f8e168f9676e9068d14d9f2317e592
GET /movies/poster/boyz-n-the-hood-1991.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 28062
last-modified: Thu, 28 Oct 2021 08:33:38 GMT
etag: "617a6062-6d9e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o7V3LsN0DsdTsSZGvlKiB2DbcYJxHC2FusV9N3hsfDXVkwtGS8tqPYM93BRI4Ldu%2Ba44Hdf4%2FwxWv7CUyOJjPmNFq6QDalWg0HBzephJ2Qnd0BNHXunAM0V5O%2B8e3hpNrtCL8rE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012c9ecb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/lord-of-war-2005.jpg?v=1 | 172.67.202.34 | 200 OK | 26 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/lord-of-war-2005.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashdf1805c24f59a574b7afef1a9ad303c7 2903b6af78a8bfaa9a3f01028e0e514e4cfcf908 bd0751b3bba4c016c5237a38800f2a1a516f0e3dd4234a53d11f5bc8f6d1e3cb
GET /movies/poster/lord-of-war-2005.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 25804
last-modified: Thu, 28 Oct 2021 08:29:18 GMT
etag: "617a5f5e-64cc"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NGV9c%2BnL4MY47QuA1rDOGY%2B31ITDLMYHb3AYauVVu9VjysRkA8AjNFXlD0FJH2TDkUNGMHHAPvy8VipinTdV3Bt7QHlEYzPTK5HntRo91MZd3y8riw5E7BTo3aWj6rZ3zu0ZE3M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012c9f0b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/prometheus-2012.jpg?v=1 | 172.67.202.34 | 200 OK | 16 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/prometheus-2012.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash7e41fadf98270673979330deb59d9ef1 9d685841a8ee21d8c6ca0670c9aa6ef51f2831ee 8e12d561a801d30211c1630b4e9fff9ee7279c02ab0efb8942eaa13676d88bc2
GET /movies/poster/prometheus-2012.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 16175
last-modified: Thu, 28 Oct 2021 08:24:48 GMT
etag: "617a5e50-3f2f"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qu%2BLxItQWrJBefe%2FMeUQy3xUObAo%2F%2F%2FApJDC9pKCiEa%2FZUew8V5cDOpTvmXM9oVJyDoY5uedE%2BwOUYatrpuxlxvdYjCHZMVR55dT180ygEy4xK1bv%2Flwd4DoDK1A8PR1OUlC5TA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012d9fbb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/fonts/fonts.css | 172.67.202.34 | 200 OK | 906 B |
URL GET HTTP/3en.yts-official.mx/static/yts/fonts/fonts.css IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeASCII text, with very long lines (1316), with no line terminators Hashb482ea655a7bad066f5aacbcbd1f8ff9 7b48d2275fc5356ae4528275502bb520244e8a4b 38fe96c34e2d963f298b4827f2ddc5a13fa1bcbe420cbbd0b5b907d5613ad1bf
GET /static/yts/fonts/fonts.css HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: text/css
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
vary: Accept-Encoding
etag: W/"65d2c88f-524"
expires: Fri, 03 May 2024 20:36:59 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 23056
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o9%2FkoY4mQA1P7EjVexsBMvHsFvkhOMMOWCfOIkiW3uKUxQsxqq2Qk3yvUPOdkMyJ9pdWNP1h0Kyx7ainAJBrQyvd10adrw7ZMcNO0VacUa9xUkHRYWrSjbuIksqGNcorZHUF2R0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e12012b9cab511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/red-dragon-2002.jpg?v=1 | 172.67.202.34 | 200 OK | 20 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/red-dragon-2002.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash645b357d402d51cd22abfcbabded0aed f484ec3a3640101a8e677b46cb091e5c4b1b7437 fb918247001bde9449fd3b0e78e58df314093870e84b8547abaf79488399d6f2
GET /movies/poster/red-dragon-2002.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 20531
last-modified: Thu, 28 Oct 2021 08:26:48 GMT
etag: "617a5ec8-5033"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uQb5hogJRjCroEXM6j8z4o%2B5mOER1hu7oBF5RQcckzlJfWydmLhRM3LTF5vUKAuFvG9SrM%2BKmzBCURbPBxWu%2FepRp6AACeuUOJ908LntrFw9b9kUik4J%2FUOWZkP29%2BGtjRGUtBc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012d9f8b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/platoon-1986.jpg?v=1 | 172.67.202.34 | 200 OK | 26 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/platoon-1986.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashac4d702872bd138bc2f51898a2af91c0 1e6b3da0313093d069fa535d1b4d8e2136f35892 78f577f3f0d6145429ad8628c53a1f87b7f09f4ae1c02607003d06ea19775b9d
GET /movies/poster/platoon-1986.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 26360
last-modified: Thu, 28 Oct 2021 08:24:36 GMT
etag: "617a5e44-66f8"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=te%2Fiaj1UfIN3G3eJ8sihO4R7ZVjCsGr1U5Ne1A0lJHGV4gApk%2BlwAVHDo7Wa3bwfx1ZOV1zpvomUWDTnRTDRa%2B3yNaU2FXH6P9c7zwZD6ZR%2Fnp77cUtl%2BcQivuuJ5duucWkKTfs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012d9feb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/men-in-black-1997.jpg?v=1 | 172.67.202.34 | 200 OK | 38 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/men-in-black-1997.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashf1fddd8329e0de83d68d600465cd561c efdd792e120748cd93ce4faea8fc73d2b1c94b5f e0a39bf6d3910d5732d7c77af1843d3d07a90bf613aa7b23dcc0c41405254182
GET /movies/poster/men-in-black-1997.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 38255
last-modified: Thu, 28 Oct 2021 08:15:54 GMT
etag: "617a5c3a-956f"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ty4qFmz0qNQhZ9wojuU66zbrPWrK6HXnhCZoyMX6%2Bvq6q%2F5ZXCtco2OWcHAWzlN0Exb%2B0sgf1klyLkGf1jzIYm7gWreU4SwFa%2FaIkt0Biel99FHjGByi4vDaqHcj47PESbdxVsU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012ea15b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/sweeney-todd-the-demon-barber-of-fleet-street-2007.jpg?v=1 | 172.67.202.34 | 200 OK | 18 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/sweeney-todd-the-demon-barber-of-fleet-street-2007.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hash175dedecb638d85009bd04702f3a79ef 8fa1b0a9a1f2b0c0ea97e1e6f7cfc19b52a07a64 711fdae6fa99ee148dd9207cf22e9b91352f068fba555dc397229d10cd4031ee
GET /movies/poster/sweeney-todd-the-demon-barber-of-fleet-street-2007.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 17452
last-modified: Thu, 28 Oct 2021 08:13:13 GMT
etag: "617a5b99-442c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EmyNeFG0JafhuXO4mT%2FUisLOnUJea%2BwZW3S6HPegR84fBFawLRL5j2F5RkZ2%2BM2TezLwPoVrSaIwwKxhXSqjwM5sX09CqjxkY7MXeUnS0mFXMEg4Q44sf0fZUcBXcbF1Qe1u2zo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012ea16b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/movies/poster/the-bourne-supremacy-2004.jpg?v=1 | 172.67.202.34 | 200 OK | 24 kB |
URL GET HTTP/3en.yts-official.mx/movies/poster/the-bourne-supremacy-2004.jpg?v=1 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 230x345, components 3 Hashe6a4fc08292d6e4a708cfbd7ba7c3a10 d35397e235be9cdae9e93a62999352902b5eaea7 d051ae520d6d41f5f7a18747d8a8f4ea7bedb0e8ca541544779569227c6ce5be
GET /movies/poster/the-bourne-supremacy-2004.jpg?v=1 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/jpeg
content-length: 23523
last-modified: Thu, 28 Oct 2021 08:12:33 GMT
etag: "617a5b71-5be3"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mLFd%2BFt7RlLqbf4QEicJPKh4kj5H6CS53TSCoHQguxu0vWxG%2Bl%2Bmdp5wXzTh9iLva53OIWG8SlAP%2FBH1jSogkW40PEAzaYlIDR%2FgG25FO%2F%2FoX07kEj402vDDiz%2BmoCcLs1zH1U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012ea1db511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2 | 172.67.202.34 | 200 OK | 3.6 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/fonts/icomoon.woff?fmg7s2 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeWeb Open Font Format, CFF, length 3560, version 0.0 Hash4e54891305c71736de2da03f14b57434 fbf29db32b5514cad7a908167ce63c76a91a2f12 332ec1d337a38ad421deff49f3585da56563253756da3870b26b46bd025f96e4
GET /static/yts/fonts/icomoon.woff?fmg7s2 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: font/woff
content-length: 3560
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: "65d2c88f-de8"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V35Tx3r8%2BdA%2FFvwytjB5dGpHK%2F9Kh09l0XrVwua%2BRnH3KO5cbWNnUS9icTrcAdSX0D1jWl7489Z4SG%2FZ2wpNJ0FW9odSq9Z0CMgNiG4P2E1ZtsACQQkO58Ka9sl3AJOg1dTOfJg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e120141b50b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| growingcastselling.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js | 172.240.108.76 | 200 OK | 28 kB |
URL GET HTTP/1.1growingcastselling.com/b1/27/0e/b1270e96b85c3dd200807d09a940c676.js IP172.240.108.76:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectgrowingcastselling.com Fingerprint3E:B6:D3:62:BC:57:AD:19:9E:FA:67:C4:B3:FA:10:7C:98:4A:71:2B ValidityThu, 18 Apr 2024 13:01:11 GMT - Wed, 17 Jul 2024 13:01:10 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4547ffe7363754c42af0df0f241ab358 e5002a991c13a714c99f3df5483594fa0fa3f3b9 18932a1ff295d37d4391d5024170b017dc4cf7acfc1aa22ee139cb0dd3ea9955
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /b1/27/0e/b1270e96b85c3dd200807d09a940c676.js HTTP/1.1
Host: growingcastselling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 03 May 2024 15:01:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 426c472d5cf7a6a302a199b872c25c7c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| growingcastselling.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js | 172.240.108.76 | 200 OK | 16 kB |
URL GET HTTP/1.1growingcastselling.com/0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js IP172.240.108.76:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectgrowingcastselling.com Fingerprint3E:B6:D3:62:BC:57:AD:19:9E:FA:67:C4:B3:FA:10:7C:98:4A:71:2B ValidityThu, 18 Apr 2024 13:01:11 GMT - Wed, 17 Jul 2024 13:01:10 GMT
File typeJavaScript source, ASCII text, with very long lines (45287), with no line terminators Hashd5a4e86bc3ec9f23e084c8f2b46cae4a cd36e6d1d452fbd3c5854841a2d23f3b5735c78c 20bf5d7d35501d964918e98c777a607431794be521e9eccda209da90086e04e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0a/2f/9b/0a2f9bfefa2d59b6782f748beec9f30e.js HTTP/1.1
Host: growingcastselling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 03 May 2024 15:01:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-3448=1; expires=Mon, 06 May 2024 18:01:15 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d885848c6c501b92481584cc84018897
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash8b36a1d5c1baf125ac6c6e9dbbba0f9e ec227af9795dfdb98c3d64e9909aa9dd5813607a 448cf1c668a852a9500e3b540e3f70edcf0e5b980c36124f47487836a6f5b165
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 03 May 2024 15:01:15 GMT
Last-Modified: Fri, 03 May 2024 13:22:45 GMT
Server: ECAcc (ska/F775)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: K41gWI3uiybjZbA2j4ugHzW0SaMw4AF63PvyNOljwzLI5bCnfNmz9g==
Age: 5910
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash8b36a1d5c1baf125ac6c6e9dbbba0f9e ec227af9795dfdb98c3d64e9909aa9dd5813607a 448cf1c668a852a9500e3b540e3f70edcf0e5b980c36124f47487836a6f5b165
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 03 May 2024 15:01:15 GMT
Last-Modified: Fri, 03 May 2024 13:22:00 GMT
Server: ECAcc (ska/F757)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: m9RpCw6XUdlQ6U2mlwavllBhWXsGDZnkSMtppZpFOnobEFEScsKqLQ==
Age: 5956
|
|
| proftrafficcounter.com/stats |  18.185.9.67 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.9.67:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash432127ad37eff12bb4d0bd5c47cd3e67 a501d6b1166b97bfcaee731b497aac6756216542 9cdb67317f7acf71926f92d25eba55cfefd40a1b00f8b625687900f31993f0d6
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 15:01:16 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://en.yts-official.mx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=07f85e2e-53df-477a-b499-805ecfc7fd23:2:1; expires=Mon, 01 May 2034 15:01:16 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 18.185.9.67 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.9.67:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash804696e1aea46ff33c44debdb1f87e90 288763d2a098426d670b9d9dd196c6f281816863 d068799adea544573cfaaf085776a7d1ca208dedcf8cdb6acf9f71882cd483ea
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 15:01:16 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://en.yts-official.mx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=66677fb0-fbf4-4824-8b60-61d02ef10bdb:3:1; expires=Mon, 01 May 2034 15:01:16 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png | 172.67.202.34 | 200 OK | 7.0 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/apple-touch-icon-180x180.png IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typePNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Hashf87afcf11d459620ff02da6112365db2 d09e6d4e7db706569474bfb7ec93f31ccbd6ed69 a70913fad67537f16d871e4c456c8f4484106f6d4ef3e12fa3c3b2eceefee508
GET /static/yts/image/apple-touch-icon-180x180.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:16 GMT
content-type: image/png
content-length: 6973
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-1b3d"
expires: Thu, 30 May 2024 16:30:16 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 253860
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TKx8qiS%2Bbd6DvvaN8SzRtJX6MAL%2BSAdUxtgFJ9W15sq4y9r4h4%2Bu7z0ZvEToQAQkU5gpcAjJjoTXrUbVvj7NnjEm78W72N8SL51JEQOc71lFkECNvbRee5PBfcQwlJAq2KN4QQ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e120198828b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| en.yts-official.mx/static/yts/image/favicon-16x16.png | 172.67.202.34 | 200 OK | 619 B |
URL GET HTTP/3en.yts-official.mx/static/yts/image/favicon-16x16.png IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typePNG image data, 16 x 16, 8-bit/color RGB, non-interlaced Hashea830fdd4f9a6d19aa7455dabdac987a b0d567d6b4d40959e1bd44032f6bc2331057b319 71148160c085a70d1af7708c1d52cfcf39f8ef6e4ce13f0f20c080b2e19195db
GET /static/yts/image/favicon-16x16.png HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:16 GMT
content-type: image/png
content-length: 619
last-modified: Mon, 19 Feb 2024 10:45:38 GMT
etag: "65d33152-26b"
expires: Thu, 30 May 2024 22:27:04 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 232452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1qqOg%2BdLeC8hxDRxMgQniTkUFHZDjJwdta9Pbdo7A76a6qA%2FCYFxWdrPEOmltaD%2BxCW3aV3anQGPicn8hPkQvT7lpbtuIuB5xf7PHvKJiPOZA3oHbcH34V6N%2FBYd7QGF0UKpWAY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e120198829b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| capaciousdrewreligion.com/advertisers.js | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com Fingerprint53:B6:ED:C6:B5:B6:60:3E:6D:02:5A:92:2E:C3:12:74:64:A1:23:DC ValidityWed, 06 Mar 2024 11:57:32 GMT - Tue, 04 Jun 2024 11:57:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 03 May 2024 15:01:16 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fb8fb442b48a6fe8c735b8f37d159564
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| dudleynutmeg.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&psid=CF-3448_1 | 172.240.108.68 | 200 OK | 7.3 kB |
URL GET HTTP/1.1dudleynutmeg.com/sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&psid=CF-3448_1 IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hash3e18c3f68e5a587d69d37ecc01eb4a13 a316d417ad10a030549e22b4d448c03dd8290c4f 79105df2bb3b061e3bc21318cafc80b5f26e09f011e8d5d35dfb7bed40af540f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=0a2f9bfefa2d59b6782f748beec9f30e&psid=CF-3448_1 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 03 May 2024 15:01:16 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://en.yts-official.mx
Access-Control-Allow-Origin: https://en.yts-official.mx
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16587847; expires=Sat, 04 May 2024 15:01:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 04 May 2024 15:01:16 GMT; secure; SameSite=None
uncs=1; expires=Sat, 04 May 2024 15:01:16 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sat, 04 May 2024 15:01:16 GMT; secure; SameSite=None
uncs29=1; expires=Sat, 04 May 2024 15:01:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b43beb6c94d4468d4c53cca8f74e7759
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| dudleynutmeg.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz4scRRTHqzfrSRCUHJQozDGCznb3zM4PIwSTdcPqmo1JRG%2Bhuqt6ttzqqqaqa3p2T4sByXH04rX3O7tZokGSq2CQ3oCHBWHH0x7ci%2F%2BBQk4qMuPg6IPu9159X8HnvXqf77kzEsLR05UP9I6Qki4t1%2F3axU%2BC4FJtXSg3qA06rTut5qWa6b%2FVbdX912vXeLyll0I%2F8P3AD2qrwvBED5YmIkT2sBvUu369GdaD5SYG5v%2B5dR4s9cD6Z%2BQlCDZefOqdh4grqPTRCrdbuc7eeDd1kubaoM8OP1JbShcK6TxMjIdEHc6qoe3J6hNodTDFhe7%2FWxiJMfF%2BfIJIHc4gEfX3p5yRBFeI2PMo%2BhW4rCBohVjfhWAnBIgZrm9Apfeva1PQ7X9UOlHHZPHZ7xDFmCz%2Bch4q%2FfaKFIPaLS1dLrSyGCQlxKCC6FXI3BHynQWI4ghx%2FhkE%2B4ksPVuHSvc3rNQQrJz2LkQFkVSQfAhqPbjJJzy4xIPLPKTstBYHQdD2WUz9TjeOG6zNoxbzA9pOAhr4rQ5cPMEbIs%2BGiOUQsdlFZnaxJb44WX4Pxv0Au1nCMg82HxPvw130WYmCExSWoKAEhSAocoKiXx4waUNb3mfSuiiY%2BXDmG%2BVI5709eqDzHlcE1AxhWLmXnZEXpyP689Vr2OKnNZ%2BGSTdKeEJDttyNWu1OmLSbnYjzuJs0fA4rHlxdfbPRbHbuBBB2Ydr%2BjhiTV9ZeRibG5Lmv%2FkJEj2DlEWLhgbrXQIsSdLPEjjrczm1dKw6mS2T5IvJtb0%2BekQtTirWNR%2BDx8eVfG1NDbEpkpsSn4ilBT94b3dQF2b%2BpC0seb2S5SMUOnTzirZzm%2FNzX7%2FPtQhu2tmKHD96JJ8IkfHib23ydKiZUz5JvrgjGuFnVJubk%2BzX7MY9uOLt5xRnlsvUbV1fX0sxwa4VWFehkH38ziMWYvHDh9nQ%2FL363AWEqGFcidcdkZhC6QpztwmZzfqsJjJzXRJmHwpUjE0bzQykIJJ%2FnNCph%2F5NH83hk6OQ2FeWevYeeWQDN70KlJfqmRF%2BWoHII686N8swcX%2F55hhHJhVEkzcJ%2BJI38cjrmye8xrDittRsNn7a6y0G7TXk7aoadpBUwSsNmK2y1aAO5HSfNP97%2BGwAA%2F%2F8BAAD%2F%2F7BeSc15BAAA | 172.240.108.68 | 200 OK | 7 B |
URL GET HTTP/1.1dudleynutmeg.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz4scRRTHqzfrSRCUHJQozDGCznb3zM4PIwSTdcPqmo1JRG%2Bhuqt6ttzqqqaqa3p2T4sByXH04rX3O7tZokGSq2CQ3oCHBWHH0x7ci%2F%2BBQk4qMuPg6IPu9159X8HnvXqf77kzEsLR05UP9I6Qki4t1%2F3axU%2BC4FJtXSg3qA06rTut5qWa6b%2FVbdX912vXeLyll0I%2F8P3AD2qrwvBED5YmIkT2sBvUu369GdaD5SYG5v%2B5dR4s9cD6Z%2BQlCDZefOqdh4grqPTRCrdbuc7eeDd1kubaoM8OP1JbShcK6TxMjIdEHc6qoe3J6hNodTDFhe7%2FWxiJMfF%2BfIJIHc4gEfX3p5yRBFeI2PMo%2BhW4rCBohVjfhWAnBIgZrm9Apfeva1PQ7X9UOlHHZPHZ7xDFmCz%2Bch4q%2FfaKFIPaLS1dLrSyGCQlxKCC6FXI3BHynQWI4ghx%2FhkE%2B4ksPVuHSvc3rNQQrJz2LkQFkVSQfAhqPbjJJzy4xIPLPKTstBYHQdD2WUz9TjeOG6zNoxbzA9pOAhr4rQ5cPMEbIs%2BGiOUQsdlFZnaxJb44WX4Pxv0Au1nCMg82HxPvw130WYmCExSWoKAEhSAocoKiXx4waUNb3mfSuiiY%2BXDmG%2BVI5709eqDzHlcE1AxhWLmXnZEXpyP689Vr2OKnNZ%2BGSTdKeEJDttyNWu1OmLSbnYjzuJs0fA4rHlxdfbPRbHbuBBB2Ydr%2BjhiTV9ZeRibG5Lmv%2FkJEj2DlEWLhgbrXQIsSdLPEjjrczm1dKw6mS2T5IvJtb0%2BekQtTirWNR%2BDx8eVfG1NDbEpkpsSn4ilBT94b3dQF2b%2BpC0seb2S5SMUOnTzirZzm%2FNzX7%2FPtQhu2tmKHD96JJ8IkfHib23ydKiZUz5JvrgjGuFnVJubk%2BzX7MY9uOLt5xRnlsvUbV1fX0sxwa4VWFehkH38ziMWYvHDh9nQ%2FL363AWEqGFcidcdkZhC6QpztwmZzfqsJjJzXRJmHwpUjE0bzQykIJJ%2FnNCph%2F5NH83hk6OQ2FeWevYeeWQDN70KlJfqmRF%2BWoHII686N8swcX%2F55hhHJhVEkzcJ%2BJI38cjrmye8xrDittRsNn7a6y0G7TXk7aoadpBUwSsNmK2y1aAO5HSfNP97%2BGwAA%2F%2F8BAAD%2F%2F7BeSc15BAAA IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSz4scRRTHqzfrSRCUHJQozDGCznb3zM4PIwSTdcPqmo1JRG%2Bhuqt6ttzqqqaqa3p2T4sByXH04rX3O7tZokGSq2CQ3oCHBWHH0x7ci%2F%2BBQk4qMuPg6IPu9159X8HnvXqf77kzEsLR05UP9I6Qki4t1%2F3axU%2BC4FJtXSg3qA06rTut5qWa6b%2FVbdX912vXeLyll0I%2F8P3AD2qrwvBED5YmIkT2sBvUu369GdaD5SYG5v%2B5dR4s9cD6Z%2BQlCDZefOqdh4grqPTRCrdbuc7eeDd1kubaoM8OP1JbShcK6TxMjIdEHc6qoe3J6hNodTDFhe7%2FWxiJMfF%2BfIJIHc4gEfX3p5yRBFeI2PMo%2BhW4rCBohVjfhWAnBIgZrm9Apfeva1PQ7X9UOlHHZPHZ7xDFmCz%2Bch4q%2FfaKFIPaLS1dLrSyGCQlxKCC6FXI3BHynQWI4ghx%2FhkE%2B4ksPVuHSvc3rNQQrJz2LkQFkVSQfAhqPbjJJzy4xIPLPKTstBYHQdD2WUz9TjeOG6zNoxbzA9pOAhr4rQ5cPMEbIs%2BGiOUQsdlFZnaxJb44WX4Pxv0Au1nCMg82HxPvw130WYmCExSWoKAEhSAocoKiXx4waUNb3mfSuiiY%2BXDmG%2BVI5709eqDzHlcE1AxhWLmXnZEXpyP689Vr2OKnNZ%2BGSTdKeEJDttyNWu1OmLSbnYjzuJs0fA4rHlxdfbPRbHbuBBB2Ydr%2BjhiTV9ZeRibG5Lmv%2FkJEj2DlEWLhgbrXQIsSdLPEjjrczm1dKw6mS2T5IvJtb0%2BekQtTirWNR%2BDx8eVfG1NDbEpkpsSn4ilBT94b3dQF2b%2BpC0seb2S5SMUOnTzirZzm%2FNzX7%2FPtQhu2tmKHD96JJ8IkfHib23ydKiZUz5JvrgjGuFnVJubk%2BzX7MY9uOLt5xRnlsvUbV1fX0sxwa4VWFehkH38ziMWYvHDh9nQ%2FL363AWEqGFcidcdkZhC6QpztwmZzfqsJjJzXRJmHwpUjE0bzQykIJJ%2FnNCph%2F5NH83hk6OQ2FeWevYeeWQDN70KlJfqmRF%2BWoHII686N8swcX%2F55hhHJhVEkzcJ%2BJI38cjrmye8xrDittRsNn7a6y0G7TXk7aoadpBUwSsNmK2y1aAO5HSfNP97%2BGwAA%2F%2F8BAAD%2F%2F7BeSc15BAAA HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 03 May 2024 15:01:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0aa4ff48f7537b08f008c0fdb4a2ba08
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.barscreative1.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html | 45.133.44.3 | 200 OK | 1.2 kB |
URL GET HTTP/2cdn.barscreative1.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html IP45.133.44.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectcdn.barscreative1.com FingerprintF6:54:F4:B9:EB:AD:1E:FA:8F:76:B9:75:20:9B:41:57:32:37:94:E3 ValiditySun, 10 Mar 2024 03:01:32 GMT - Sat, 08 Jun 2024 03:01:31 GMT
File typegzip compressed data, from Unix Hashb8d647fe4ada235f1f0e9f18f450fd87 d2c85d042a75df49c58de726c1ef25472ba6b428 e3ff3e06bc3da3a7b27bf49464f7f1baff4b18c2181d2864f04589fd54e3b291
GET /sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 15:01:17 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Tue, 29 Mar 2022 08:27:42 GMT
etag: W/"6242c2fe-ba1"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Fri, 03 May 2024 16:01:17 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=86 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=86 IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=86 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 03 May 2024 15:01:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/img/close.png |  104.21.70.253 | 200 OK | 6.0 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/chat/mob/ssp/1/img/close.png IP104.21.70.253:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced Hashc489ce2c491a22ee37a55e26a92dfd73 2fa588ab09e94dd902e5bd24b48f98ad1949c9d6 1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/chat/mob/ssp/1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:17 GMT
content-type: image/png
content-length: 5982
last-modified: Mon, 21 Feb 2022 08:25:06 GMT
etag: "62134c62-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 246173
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k9Ei8vGCjwQfnEvh%2BCRclRdngJKPMzEIzuMhjxPXhTOnZCm6mUF52sXg%2BjwXzajNZIKbBkajUvgXScBbY72v5FzxbEa71YdYjL5fTWw2VxlsDvcFSlvxuPuPxes8eUmNmfrVkliaUFKk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e1201e6c4c5685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=43 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=43 IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=43 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 03 May 2024 15:01:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| unseenreport.com/pxf.gif?uuid=66677fb0-fbf4-4824-8b60-61d02ef10bdb&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15 | 192.243.59.12 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=66677fb0-fbf4-4824-8b60-61d02ef10bdb&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=66677fb0-fbf4-4824-8b60-61d02ef10bdb&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a2f9bfefa2d59b6782f748beec9f30e&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 03 May 2024 15:01:17 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 58b6d99921c2a36647e480f4d810a150
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unseenreport.com/pxf.gif?uuid=66677fb0-fbf4-4824-8b60-61d02ef10bdb&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15 | 192.243.59.12 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=66677fb0-fbf4-4824-8b60-61d02ef10bdb&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=66677fb0-fbf4-4824-8b60-61d02ef10bdb&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=b1270e96b85c3dd200807d09a940c676&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 03 May 2024 15:01:17 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e28f2714f3162ee6763b22967c8dc722
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.cloudimagesb.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png | 45.133.44.10 | 200 OK | 14 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png IP45.133.44.10:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash962ac416cce3fad636d4904386c8d3d4 811166fceb971353dc6a9ea3a153367f20b47592 ec6c8e1c030499a846897265d0c1f66dedc6ece17c1ea6006b700faf37e73555
GET /si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 15:01:17 GMT
content-type: image/png
content-length: 14496
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:05:10 GMT
etag: "656d25c6-38a0"
expires: Sun, 05 May 2024 15:01:17 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js | 104.21.70.253 | 200 OK | 32 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js IP104.21.70.253:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash561acb3e541133bbdd2c0c19f8ee35a1 ffd1353cf3f77d25f801c84d8208613eb0d3d548 9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc
GET /sb/chat/mob/ssp/1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:17 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 08:25:09 GMT
etag: W/"62134c65-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 254621
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tt2nlcuKzGpNuk54wRwVy7LSQ5hZ3FmS8sQDW9x7yKI2C1TEIbVsiWXUvdhIWNyjKx2158iS9A6RE3p1frPbsfrNPID93BT%2FDcBq7UMo0vm1MbWE43jtx6QlpkaVYWMEOBcPgBtazkbI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e1201e6c655685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=346 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=346 IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=346 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 03 May 2024 15:01:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 22:40:35 GMT
expires: Fri, 02 May 2025 22:40:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 58842
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:55:00 GMT
expires: Fri, 02 May 2025 01:55:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 133577
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dudleynutmeg.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSz4scRRTHqzfrSRCUHJQozDGCznbP7zFCMFk3rK7ZmET0FupXz5Zb3dVUdU%2FP7mkxIDmOXrz2fGc3SzRIchUM0hvwsCDseNqDe%2FE%2FUMhJRWYcHH3Q%2Fd6r7yv4vFfv81F2RmrI6OnqB2ZXaU1XmlW%2FcvGTILhU2VBxNqgMOq07rcaliu2%2F1W1V%2Fdcr1yTfNis1P%2FD9wA8qa8rK0AxWpiJU8rAbVLt%2BtVGrBs0GBvb%2Fucs8OOpB9M%2FIS1BisvzUOw%2FFS8TRo1XptlOTvPFulGmaGou%2BOPwo3o5NHiNahKH1EMaH82oYd7L2BCY%2BmOHC9P8tZGpCvB%2BfgMWHc0iw%2Fv6Mk2nIGEw8j7xfQuoSipbg5i6UOCEAF7i%2BiTi6f93YnO78o9KpOiHLz36Hyidk%2BZfziKNvr2g1qNwyOkuViR0GYQE1KKF6JZLsCOnuElR%2BBJ5%2BBiV%2BIivPNhBH%2B5tOGyhRzHpXqoQKS2g5BHUesumnPGShhyzxEInTCg%2BCoO0LTv1Ol%2FO6aEvWEn5A22FAA7%2FVQcaneEOkyRBcD8HtHhK7h231xUnzPdjsB7itAk54cOmEeB%2FuoS8K5JIgdwQ5JcgVQZ4S5P3iQGhXc8V9oV3GgrmvzX29GJu0N6IHJu3JmIDaIawoRskZeXE2oj9fvYZteVrxaS3sslCGtCaaXdZqd2phu9FhUvJuWPclnHpwde3NeqPRuRNAuaVZ%2B7tqQl5ZfxmJmpDnvvoLjB7B6SNw5YFmr4HmBehWgd34cCd1VRNLCFMgSZeR7ngjfUYuzCjWNx9B8uPLv9ZnBm4LJLbAp%2BopQU%2FfG980Odm%2FaXJHHm8mqYrULp0%2B4q2UpvLc1%2B%2FLndxYsb7qhg%2Fe4VNhGj68LV26QWOh4p4j31xRQki7ZiyX5Pt197FkNzK3dSWzcZZs3Li6th4lVjqnTFyCTvfxNwuuJuSFC7dn%2B3nxu00oW8JmBaLsmMwNypTgyR5csuB3hsDqRQ1LPORZMbY1tjjUikDLRU5ZAfefnC3isaXT21QVI3cPPbsEmt5FHBXo2wJ9XYDqIVx2bpwm9vjyz3MMppfGTNulfaat%2FnI25unvMZw6rdR90WYylG0mG81GKLlgzSbzechZXXQ6HKmbhI0%2F3v4bAAD%2F%2FwEAAP%2F%2FMIqcJXkEAAA%3D | 172.240.108.68 | 200 OK | 7 B |
URL GET HTTP/1.1dudleynutmeg.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSz4scRRTHqzfrSRCUHJQozDGCznbP7zFCMFk3rK7ZmET0FupXz5Zb3dVUdU%2FP7mkxIDmOXrz2fGc3SzRIchUM0hvwsCDseNqDe%2FE%2FUMhJRWYcHH3Q%2Fd6r7yv4vFfv81F2RmrI6OnqB2ZXaU1XmlW%2FcvGTILhU2VBxNqgMOq07rcaliu2%2F1W1V%2Fdcr1yTfNis1P%2FD9wA8qa8rK0AxWpiJU8rAbVLt%2BtVGrBs0GBvb%2Fucs8OOpB9M%2FIS1BisvzUOw%2FFS8TRo1XptlOTvPFulGmaGou%2BOPwo3o5NHiNahKH1EMaH82oYd7L2BCY%2BmOHC9P8tZGpCvB%2BfgMWHc0iw%2Fv6Mk2nIGEw8j7xfQuoSipbg5i6UOCEAF7i%2BiTi6f93YnO78o9KpOiHLz36Hyidk%2BZfziKNvr2g1qNwyOkuViR0GYQE1KKF6JZLsCOnuElR%2BBJ5%2BBiV%2BIivPNhBH%2B5tOGyhRzHpXqoQKS2g5BHUesumnPGShhyzxEInTCg%2BCoO0LTv1Ol%2FO6aEvWEn5A22FAA7%2FVQcaneEOkyRBcD8HtHhK7h231xUnzPdjsB7itAk54cOmEeB%2FuoS8K5JIgdwQ5JcgVQZ4S5P3iQGhXc8V9oV3GgrmvzX29GJu0N6IHJu3JmIDaIawoRskZeXE2oj9fvYZteVrxaS3sslCGtCaaXdZqd2phu9FhUvJuWPclnHpwde3NeqPRuRNAuaVZ%2B7tqQl5ZfxmJmpDnvvoLjB7B6SNw5YFmr4HmBehWgd34cCd1VRNLCFMgSZeR7ngjfUYuzCjWNx9B8uPLv9ZnBm4LJLbAp%2BopQU%2FfG980Odm%2FaXJHHm8mqYrULp0%2B4q2UpvLc1%2B%2FLndxYsb7qhg%2Fe4VNhGj68LV26QWOh4p4j31xRQki7ZiyX5Pt197FkNzK3dSWzcZZs3Li6th4lVjqnTFyCTvfxNwuuJuSFC7dn%2B3nxu00oW8JmBaLsmMwNypTgyR5csuB3hsDqRQ1LPORZMbY1tjjUikDLRU5ZAfefnC3isaXT21QVI3cPPbsEmt5FHBXo2wJ9XYDqIVx2bpwm9vjyz3MMppfGTNulfaat%2FnI25unvMZw6rdR90WYylG0mG81GKLlgzSbzechZXXQ6HKmbhI0%2F3v4bAAD%2F%2FwEAAP%2F%2FMIqcJXkEAAA%3D IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1SSz4scRRTHqzfrSRCUHJQozDGCznbP7zFCMFk3rK7ZmET0FupXz5Zb3dVUdU%2FP7mkxIDmOXrz2fGc3SzRIchUM0hvwsCDseNqDe%2FE%2FUMhJRWYcHH3Q%2Fd6r7yv4vFfv81F2RmrI6OnqB2ZXaU1XmlW%2FcvGTILhU2VBxNqgMOq07rcaliu2%2F1W1V%2Fdcr1yTfNis1P%2FD9wA8qa8rK0AxWpiJU8rAbVLt%2BtVGrBs0GBvb%2Fucs8OOpB9M%2FIS1BisvzUOw%2FFS8TRo1XptlOTvPFulGmaGou%2BOPwo3o5NHiNahKH1EMaH82oYd7L2BCY%2BmOHC9P8tZGpCvB%2BfgMWHc0iw%2Fv6Mk2nIGEw8j7xfQuoSipbg5i6UOCEAF7i%2BiTi6f93YnO78o9KpOiHLz36Hyidk%2BZfziKNvr2g1qNwyOkuViR0GYQE1KKF6JZLsCOnuElR%2BBJ5%2BBiV%2BIivPNhBH%2B5tOGyhRzHpXqoQKS2g5BHUesumnPGShhyzxEInTCg%2BCoO0LTv1Ol%2FO6aEvWEn5A22FAA7%2FVQcaneEOkyRBcD8HtHhK7h231xUnzPdjsB7itAk54cOmEeB%2FuoS8K5JIgdwQ5JcgVQZ4S5P3iQGhXc8V9oV3GgrmvzX29GJu0N6IHJu3JmIDaIawoRskZeXE2oj9fvYZteVrxaS3sslCGtCaaXdZqd2phu9FhUvJuWPclnHpwde3NeqPRuRNAuaVZ%2B7tqQl5ZfxmJmpDnvvoLjB7B6SNw5YFmr4HmBehWgd34cCd1VRNLCFMgSZeR7ngjfUYuzCjWNx9B8uPLv9ZnBm4LJLbAp%2BopQU%2FfG980Odm%2FaXJHHm8mqYrULp0%2B4q2UpvLc1%2B%2FLndxYsb7qhg%2Fe4VNhGj68LV26QWOh4p4j31xRQki7ZiyX5Pt197FkNzK3dSWzcZZs3Li6th4lVjqnTFyCTvfxNwuuJuSFC7dn%2B3nxu00oW8JmBaLsmMwNypTgyR5csuB3hsDqRQ1LPORZMbY1tjjUikDLRU5ZAfefnC3isaXT21QVI3cPPbsEmt5FHBXo2wJ9XYDqIVx2bpwm9vjyz3MMppfGTNulfaat%2FnI25unvMZw6rdR90WYylG0mG81GKLlgzSbzechZXXQ6HKmbhI0%2F3v4bAAD%2F%2FwEAAP%2F%2FMIqcJXkEAAA%3D HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 03 May 2024 15:01:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3075c238d0f005c0022cdc4a2f048898
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| dudleynutmeg.com/pixel/sbs?c=1 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1dudleynutmeg.com/pixel/sbs?c=1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 03 May 2024 15:01:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/animate.css | 104.21.70.253 | 200 OK | 79 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/animate.css IP104.21.70.253:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hashfc638645a938f69e69360c75335ffd1a 143132fb8361c3ad0acf88cb70bf0b07c0ecc2d4 7ef76aab275d0221c68602d18f81b4285b280756f0f71d535ed8b5b889bc2f90
GET /sb/chat/mob/ssp/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 15:01:17 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 08:25:04 GMT
etag: W/"62134c60-135d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 224804
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5m7Qj5Fonr%2FBE0ZRB2ahdlno9KkW5ZwzybfnMir43JNdr9Kreq0XnDUZ6F313zCduoT1zJFq%2FbO28UQurUByWjVYBId961r5LJwLeTd4Vq8VC8aYxuWCkAn%2BZQq3B8snI226xy6NIsLM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e1201fca370b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext | 142.250.74.106 | 200 OK | 9.6 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext IP142.250.74.106:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (9902), with no line terminators Hashda660c7ad34dd81e9f9a9032cc68718a 6bc87a2b72cc76f4253e09a1b7d095f29dc12e13 67d1981c897a8c33dd993afbcd2384fbb40a755ae34e3f43e7bbfbd94c0555f6
GET /css?family=Arimo:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 03 May 2024 15:01:15 GMT
date: Fri, 03 May 2024 15:01:15 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 | 172.67.202.34 | 200 OK | 46 kB |
URL User Request GET HTTP/2en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 IP172.67.202.34:443
CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeHTML document, ASCII text, with very long lines (1913), with CRLF line terminators Hash63c139fa6a066af7ca89c16d3359d03e 277322fbdf3a5eee15d4ce8ee3969a27f27a0e5a 95bb1c0d1317017b24d6d1e69b574fa59c764784a2044216796e164b85ea538f
GET /browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1zhDtrwysFephslCRxHgd1SCHkZWw4xgQXJuCRlNbDqvjFYq02f8VRSYD%2FcDtdCkkY7IS6iLsb4j6TroWhxhs3LAxXYWSBURBEmm5QVtAIr2oawSutRdQ%2FEDWwOwb76kOeHZaWg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e120103bc35697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/images/website/icon-search.svg | 172.67.202.34 | 200 OK | 894 B |
URL GET HTTP/3en.yts-official.mx/static/yts/images/website/icon-search.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hash9caad64a555d10c835c1e121b53743b0 5db8cc1d36d939a65725c4869ebec8cc0b5ce9e3 fa70e1614aed8ae3b0463b4d9884de60fd528951a068e6a13a60a329ef93face
GET /static/yts/images/website/icon-search.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/static/yts/style/minified.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Feb 2024 03:18:39 GMT
etag: W/"65d2c88f-37e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2423
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GgWXyDXSxLraxkgLEoIkG%2F8p354OsGCDoPIG%2Fj%2FOBW%2Ft08prf5yBq5BmEeJ%2FaacNMr6NGEl%2FrHQ8%2B%2FZpnl0RiIbhn9x8RD8CVvC1ISdhZIWvOiWFJkCkAxPZXHNg8SFWb0qjyJQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12013eb02b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=15 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1dudleynutmeg.com/pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=15 IP172.240.108.68:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectdudleynutmeg.com Fingerprint62:D3:F0:A3:00:F3:7A:E7:CF:5D:4D:AE:08:F0:E9:8D:45:2E:0D:90 ValidityTue, 30 Apr 2024 15:24:37 GMT - Mon, 29 Jul 2024 15:24:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.18.6785&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=15 HTTP/1.1
Host: dudleynutmeg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Cookie: u_pl=16587847; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 03 May 2024 15:01:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| downstairsnegotiatebarren.com/sfp.js | 104.21.35.227 | 200 OK | 86 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP104.21.35.227:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 15:01:16 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 67f67fa53aa29fae0c7a5d28fb8d17c6
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 03 May 2024 15:01:15 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lDzDizjgZi73Y2JJTHGJ06mgZnlct6cKfmPOm5qJFcb8YLuV%2Bl2Eo3aXVaH8r4iRoIOFfFdr%2FGaAzByEFjLLi6xNFhAV9cAwmXSLghhVXopKyeD1sn3VoOwA3WNYWw9d9aHYZuiPjX3MaGJlsi7tkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e120168c1b56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/style.css | 104.21.70.253 | 200 OK | 4.6 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/style.css IP104.21.70.253:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (4886), with no line terminators Hash1230b98f01a549572edcd2bf3bdcb4ad ac87a2a752ffb8b5167566183fddd531d7971be9 9a2954fc66ebbb9adf18c2ea4403d2a0a5dedf2928f9905e1fc656f5dc1b208d
GET /sb/chat/mob/ssp/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 15:01:17 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 08:25:04 GMT
etag: W/"62134c60-1209"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 247026
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DVz7qUQHGuZ53ZysGEaDTKbQkfjOWpCfEEnw1q97Vn%2B6rT4linSx6%2F81bson0XN2Pmb6a8fmK215KmMa8NjYmOo19ONKZhlZDQg1L1f%2FbRDzHVbZHYleK6NnJD2wflcef8n80Ajet27m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e1201dd8be0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/script.js | 104.21.70.253 | 200 OK | 382 B |
URL GET HTTP/3cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/script.js IP104.21.70.253:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (411), with no line terminators Hash9ffae600059bf4e6adb35ebb274ae385 6130e466c04551baa2a5d650e6bd5a87daba73a7 a7d15e051fb3d3c31494683306bb7752478354894825b110d26d333cbeaaeb39
GET /sb/chat/mob/ssp/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:17 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 08:25:08 GMT
etag: W/"62134c64-17e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 224804
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DLAM48x0gz2bjJnGCYPTk3qoq6nTcTB8b7lSQqqZWQZGbZPt%2FBu524biHYf9BxONs3sw25h36BoQpI231r2S21%2FtiGDONl3rEU5O8r7ndTlqPnBxArGF%2Be4Ny2UJeEc3Pr46AZvCXZXD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e1201eccc15685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 IP216.58.207.227:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20040, version 1.0 Hasha61c670a24d6794a95a9712f0d12b656 c9b3114b27790109ec51508f51f1a033ccfe0812 a4f5230d39a7a21971fe62ccde2443345638d2beaa369b752820390a687b91b6
GET /s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 22:08:55 GMT
expires: Fri, 02 May 2025 22:08:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:51:46 GMT
content-type: font/woff2
age: 60740
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 | 172.67.202.34 | 200 OK | 46 kB |
URL GET HTTP/3en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeHTML document, ASCII text, with very long lines (1913), with CRLF line terminators Hash63c139fa6a066af7ca89c16d3359d03e 277322fbdf3a5eee15d4ce8ee3969a27f27a0e5a 95bb1c0d1317017b24d6d1e69b574fa59c764784a2044216796e164b85ea538f
GET /browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lj2SMMgnuDrmn%2By0IkOfaUJgkba9Z2j3QJB%2Bks8Wt%2FU3%2BTD3uX%2FOxYk9OjjuoBO%2FHh5kFzwoap8ozCVkPUSGfUfdFtrN7EyWa6guRqusM6iQZdRy3hQVdE1RXmbmmpLff42yH9c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e120168d2db511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.106 | 200 OK | 7.0 kB |
URL GET HTTP/3fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.106:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (7193), with no line terminators Hash16b49a99486594c0b42d9bd7821deb2c 2fb46e5e86d6b37d4497cc04bfd89b3cb33a276a 3f3540952441e06ef81189cf63d46bac242804e386779dbb0cdd78ed10025c21
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 03 May 2024 15:01:17 GMT
date: Fri, 03 May 2024 15:01:17 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 IP216.58.207.227:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20040, version 1.0 Hasha61c670a24d6794a95a9712f0d12b656 c9b3114b27790109ec51508f51f1a033ccfe0812 a4f5230d39a7a21971fe62ccde2443345638d2beaa369b752820390a687b91b6
GET /s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.yts-official.mx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 22:08:55 GMT
expires: Fri, 02 May 2025 22:08:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:51:46 GMT
content-type: font/woff2
age: 60740
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| downstairsnegotiatebarren.com/sfp.js | 104.21.35.227 | 200 OK | 86 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP104.21.35.227:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 15:01:16 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: d21ae81ac4cd287c52132af4252ba7e0
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 03 May 2024 15:01:15 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bVmnNtQ5xRkIo5OseiDpXJ763jg6wzqgytanBfPUiam1d9XzX4c0lkicUkR0k2uWt88ntooiAic%2BCDmzNiWXFmStss4HBgzCkh7cvvoTtIUXNBuB5KZJC8KyxnAtsEGwytZnZ1zCBNkpKAH15KBFwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e120168c2056a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| en.yts-official.mx/static/yts/image/logo-YTS.svg | 172.67.202.34 | 200 OK | 23 kB |
URL GET HTTP/3en.yts-official.mx/static/yts/image/logo-YTS.svg IP172.67.202.34:443
Requested byhttps://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0 CertificateIssuerGoogle Trust Services LLC Subjectyts-official.mx FingerprintFB:57:3A:12:D9:30:69:4A:59:BD:83:1C:79:E4:4E:DD:52:0F:73:62 ValidityThu, 18 Apr 2024 00:32:31 GMT - Wed, 17 Jul 2024 00:32:30 GMT
File typeSVG Scalable Vector Graphics image Hashfdd85bfbf80d872ea41b942cf21d1db9 6a2d54565cbffa3af342a63931e412ad8837f92d 2234cb288342eab0edfb65ebda4189cf47b40a4b639a25af62c57c03f7ace459
GET /static/yts/image/logo-YTS.svg HTTP/1.1
Host: en.yts-official.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.yts-official.mx/browse-movies?genre=all&keyword=&order_by=latest&page=42&quality=2160p&rating=7&year=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 15:01:15 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Feb 2024 02:51:28 GMT
etag: W/"65d413b0-5b34"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R1BCFai25ErE%2Bo5Z6pRFMJwYxEn2tzIh8AmZ12CkXYNfFqxSiPIOR%2Ft%2FXYT08MpHJ10Enk1bcFPwsG%2B0abegc8LkoT1gCstPM5ikAL7Ird99UbGe029EO1JCw02HD6P4YeBSz%2Fc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e12012b9d0b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|