| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css |  104.17.24.14 | 200 OK | 5.6 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css IP104.17.24.14:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 204974
expires: Thu, 24 Apr 2025 07:25:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2BaMe%2FF6mnM5G3Uo%2FILTorfpdVjvaYm%2BYRq9t7u7OCujIxS3esiD8zBNRC0AFykizKP8AWSD1ndc70XvO5s4d3XDoHNQKuLweyVkQAxTJzvsfZeJG7pYCA%2F9NC%2B%2B1MnFEGoW4jMi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87e6c153ba24712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/tiny-slider/2.9.2/min/tiny-slider.js | 104.17.24.14 | 200 OK | 11 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/tiny-slider/2.9.2/min/tiny-slider.js IP104.17.24.14:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (31683) Hash3ed83b7fbb9a4a039267b521b742bb11 6dea35181356547514ca65e3f779b5a8a54ab846 080a485f94dee0e757572d6258ffb9faa1bf8876bef1aa5f60e15a81d54c4709
GET /ajax/libs/tiny-slider/2.9.2/min/tiny-slider.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 11404
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ffd-7bfa"
last-modified: Mon, 04 May 2020 16:17:01 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 313633
expires: Thu, 24 Apr 2025 07:25:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9WJvpiK9AMn9M0OE%2FHFRy7vh46ucTebkADpmxbeo4KRw8xD2zl%2BxdWduzntNVvYhQfA2LBF7ua5g4vHvU4dzAqJveYDgsEMgHdqVYz0w7RbHOW%2F761m5a0Mjul79xrDRNuGnne5J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87e6c153da3d712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/@icon/dashicons@0.9.0/dashicons.min.css |  151.101.1.229 | 200 OK | 2.6 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/@icon/dashicons@0.9.0/dashicons.min.css IP151.101.1.229:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (13403) Hashee2f4661f9ad31b08bdd7bc711a6b89a 529581d71a795739ede4485c77e7fa9a161356e1 3f2869dec2b3c8920e4723e1a84ac031e9e0bcbff497789f149047f022ea5a26
GET /npm/@icon/dashicons@0.9.0/dashicons.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 0.9.0
x-jsd-version-type: version
etag: W/"35ae-UpWB1xp5Vznt5Ehcd+f6mhYTVuE"
content-encoding: br
accept-ranges: bytes
date: Sat, 04 May 2024 07:25:09 GMT
age: 2359465
x-served-by: cache-fra-etou8220097-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2583
X-Firefox-Spdy: h2
|
|
| tmdbcdn2.online/flix/imgs/logo3.png | 172.67.220.228 | 200 OK | 1.6 kB |
URL GET HTTP/2tmdbcdn2.online/flix/imgs/logo3.png IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typePNG image data, 184 x 37, 8-bit colormap, non-interlaced Hash9bc696d41c0123eaa2856ff0a1407110 e0244563997698eefed6475c34f51967bfab0c08 4e8bcb711c6f86bc9ce8e49537f93b70098db8e713326fe1e42deecc151e9179
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flix/imgs/logo3.png HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/png
content-length: 1580
last-modified: Wed, 26 Oct 2022 16:47:16 GMT
etag: "63596494-62c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ppE%2Blb4eOfqAsQXqsdCSAP94%2FBrpx68VmEEoRPcrrOtnEh3VkeUtDxV3FLMwr1vYidgr2MaCsqqYe9aR1PHNnOH64HBIjZQ9%2FV2x2EnNseIk1l4S6lFMLMRvvsrIfz6fsgQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c1544aa4b50c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| s.pelisflix2.trade/flix/css/material.css | 172.67.179.8 | 200 OK | 9.3 kB |
URL GET HTTP/3s.pelisflix2.trade/flix/css/material.css IP172.67.179.8:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGoogle Trust Services LLC Subjectpelisflix2.trade FingerprintA1:58:00:73:ED:5F:F0:BF:36:81:BA:2F:28:59:59:07:73:37:7D:47 ValidityWed, 01 May 2024 18:36:15 GMT - Tue, 30 Jul 2024 18:36:14 GMT
File typeASCII text, with very long lines (39809) Hashf0e5aa96da8efed816312ea8dc482e32 cd598b4a7284896aabb59b31dda9375f3285f3be f4878d29e668050a901645d27c668fc15bd18731b935e6436521c5b66c595ed5
GET /flix/css/material.css HTTP/1.1
Host: s.pelisflix2.trade
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
last-modified: Sun, 08 Aug 2021 21:27:26 GMT
etag: W/"61104c3e-9b82"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=duN1UUFxgJ4W%2FBg%2FuuNshKOGTED%2FvM%2BBZ1dZRGeerpDynagPuESr8tCUFfHstHOo2mQyhlQBOqM5AcOP3nqmCDOJ%2FSsFc5EqfjYsC1SNKcOGitVTAMzqy4792d4RD9ZoDgGZyhg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e6c153db1b56bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| tmdbcdn2.online/b/v2/w1/ZUeWkKldTwwwONjYh51FAGXit57TNSCCDHoNi.webp | 172.67.220.228 | 200 OK | 48 kB |
URL GET HTTP/2tmdbcdn2.online/b/v2/w1/ZUeWkKldTwwwONjYh51FAGXit57TNSCCDHoNi.webp IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 780x439, Scaling: [none]x[none], YUV color, decoders should clamp Hash2af3f2a1e44da7700e0bf90c35df48b2 b543819629e58d0987d7ab1cdf5ca04f95cc15ba 5dc691454bb1945189ed3ca8cc2d8c0c43797fb52d2d1065f7fb91787b34daab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /b/v2/w1/ZUeWkKldTwwwONjYh51FAGXit57TNSCCDHoNi.webp HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/webp
content-length: 47944
last-modified: Sat, 12 Aug 2023 10:53:52 GMT
etag: "64d764c0-bb48"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T3oYgQdmOyuU7nIAyNuu7Q2r2VWyxszUqO%2BW3n39MBTE7B7UumsncOy%2BtCCDJhbjhxju0W3vlf%2BsfxtHh%2BF4rrTtHPnuTzgjpXBF3ajZ1tGO8vHwCijRflp3pkO7u4nnDRM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c1544aa6b50c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tmdbcdn2.online/flix/imgs/dc-comics-logo-24x24.png | 172.67.220.228 | 200 OK | 628 B |
URL GET HTTP/3tmdbcdn2.online/flix/imgs/dc-comics-logo-24x24.png IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typePNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced Hashfb56c08d173d1922b23db85ed9305170 53d634733bc095e9e8f0d24b5680a2c44e161244 7f14ce400b0fb0d5a07612df73e1c95b600d4a9f2093d3bc0ed6b329b64f5e4b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flix/imgs/dc-comics-logo-24x24.png HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/png
content-length: 628
last-modified: Wed, 20 Apr 2022 18:58:52 GMT
etag: "626057ec-274"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DfVw1mPLRHTtNtQJ9rYatZUD%2FVUqrLvXLAaJ3KGt0X5RJl7Wdv%2FgkD%2BYqpIWN23iTkg7C%2Bdo5buY5rDSi9uUjNOwznvOMFQAmMl4xj%2B51BEtIFX6QALmsuI7eVcj0rmVJe0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c154ff9db503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tmdbcdn2.online/flix/imgs/marvel-comics-logo-48x20.png | 172.67.220.228 | 200 OK | 1.7 kB |
URL GET HTTP/3tmdbcdn2.online/flix/imgs/marvel-comics-logo-48x20.png IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typePNG image data, 48 x 20, 8-bit/color RGBA, non-interlaced Hash94e5a3c965eab8b0fc3b1b3755122ec0 f16249795deb6c70901ec366d93abeb4cd8edb47 183d3d3d656d35c1f464a7bf4d6d6a145ae274f449f93b3c812842dad5898dbc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flix/imgs/marvel-comics-logo-48x20.png HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/png
content-length: 1652
last-modified: Wed, 20 Apr 2022 18:58:54 GMT
etag: "626057ee-674"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VgIGZ5niefTGAwHXvaCaPj0s8QZi5%2BZd4Zgp7JoWxLurRd7b%2FoQaEWga9nONdMS3e3ILcV0mZnxXq6KkSKpFZYDysrYp9SwLmEL9t5Injy5WZKuQ9eJxzVnIi0aOjwcbUzU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c154ff9eb503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 | 104.17.24.14 | 200 OK | 77 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 IP104.17.24.14:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 209344
expires: Thu, 24 Apr 2025 07:25:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cPFfXAlvEInCI5QGLenuhL6hlbXio4ZPpmRgLnjUlziiglEny4BV9rsM1LIUIZFMLHwBMFWArKypthRaOySCbASw9FiA%2Bu%2FWXOWI6Lnextq2y2y2Qwzn5IcRTndCMBAzWJ0%2BhkxW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87e6c15568e0b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fd.bouvierbang.com/rlX15OYbkLkQccE/nEOVA |  23.109.170.114 | 200 OK | 20 B |
URL GET HTTP/1.1fd.bouvierbang.com/rlX15OYbkLkQccE/nEOVA IP23.109.170.114:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjectfd.bouvierbang.com Fingerprint35:06:49:97:5C:11:D7:34:35:AC:20:CD:19:90:15:F4:61:7E:57:75 ValidityWed, 17 Apr 2024 23:46:46 GMT - Tue, 16 Jul 2024 23:46:45 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /rlX15OYbkLkQccE/nEOVA HTTP/1.1
Host: fd.bouvierbang.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 07:25:09 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pelisflix2.trade
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Sun, 05-May-2024 07:25:09 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sun, 05-May-2024 07:25:09 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| tmdbcdn2.online/p/v2/w0/MbfJvFnihLJuWrXuVFpE.webp | 172.67.220.228 | 200 OK | 10 kB |
URL GET HTTP/3tmdbcdn2.online/p/v2/w0/MbfJvFnihLJuWrXuVFpE.webp IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp Hashf1362c7892a712b817a7f1bdfe022ee4 533ea712073a6040082c0ebba6353b76020b1971 4ee86f57dbb6454b2b874594aa403727cd805405d22f38186f5fff2a50858933
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /p/v2/w0/MbfJvFnihLJuWrXuVFpE.webp HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/webp
content-length: 10034
last-modified: Wed, 01 Jun 2022 16:19:48 GMT
etag: "629791a4-2732"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8aoedVhx%2BxvpD8v9%2BY68rwVCF8QZmBa7Ts7ZguVu50OmoadUoKJEBZhJuX%2BBRhS7cg8h654EicFsXNgZI0PXjdHiBi6xA%2BapvdCqsPzOUdiRWixU3OXuo%2B1mo1xVdenKTHw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c155d841b503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/materialicons/v97/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 | 216.58.207.227 | 200 OK | 109 kB |
URL GET HTTP/2fonts.gstatic.com/s/materialicons/v97/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 IP216.58.207.227:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 109180, version 1.0 Size109 kB (109180 bytes) Hashd581ab0fb70dff2313836d355a06c356 1af5c10593c66a28be1cdbd553ed73038e4112f5 8558519e6f6e4e69807a5574145dcc2b569f65c6e060a080767944435c2ebdef
GET /s/materialicons/v97/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://s.pelisflix2.trade/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 109180
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 03:38:43 GMT
expires: Fri, 02 May 2025 03:38:43 GMT
cache-control: public, max-age=31536000
age: 186386
last-modified: Thu, 05 Aug 2021 15:50:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tmdbcdn2.online/p/v2/w0/U0W0rDbkTgaJC3wvlwvp.webp | 172.67.220.228 | 200 OK | 11 kB |
URL GET HTTP/3tmdbcdn2.online/p/v2/w0/U0W0rDbkTgaJC3wvlwvp.webp IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp Hash6e4477ef595f1fc78eb29dc4053e74d6 6a5c92dec0efe19e96e98d3bcbc48e21b413b3fd 0eb0f7f50e7a7d65b654ecc17fc137716c8f39c165c6536af02b586ab1126a80
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /p/v2/w0/U0W0rDbkTgaJC3wvlwvp.webp HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/webp
content-length: 10934
last-modified: Wed, 01 Jun 2022 16:20:52 GMT
etag: "629791e4-2ab6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DzM8uxD7Vhqh5TsXoDGM40%2FptfY7FINvd4PoKOVmTNJzYCPvbXwrujSOq5Y1XVKnP1mVAiUPsfv0%2BMd1OqkQBUAwbF4TzGjhG7IzjsUNUzRwziyQe3GVmpJ8tz3U%2Bwz%2B7Ys%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c155c833b503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP216.58.207.227:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 10:17:48 GMT
expires: Sat, 03 May 2025 10:17:48 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 76041
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tmdbcdn2.online/p/v2/w0/MlXIKakcFY17PE8Jcyv4.webp | 172.67.220.228 | 200 OK | 15 kB |
URL GET HTTP/3tmdbcdn2.online/p/v2/w0/MlXIKakcFY17PE8Jcyv4.webp IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp Hash21b415daee1f8dc3d28d4392d6db00e2 c7ba112cd499c46b1e2db54591ac6291f5972fbb 61eadeee146f50154db8dd22caf68fa4b2b7bacef6df529fde2debc1a7c7a741
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /p/v2/w0/MlXIKakcFY17PE8Jcyv4.webp HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/webp
content-length: 15294
last-modified: Wed, 01 Jun 2022 16:19:50 GMT
etag: "629791a6-3bbe"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B%2BF1in1pzcjR3GPpkhhzqF%2BhrrK%2BSuTv6rJaturjHJALJq6x1Vjoct%2BwQXzCbISiRxejumsx041QaKTH7AjHQyEQ9MQiRfSu1u5TxKX72QUfvBGcIULaXOK8Bwxm3rWWGAM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c155d844b503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 IP216.58.207.227:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14824, version 1.0 Hash48598bad30f08e1c3eb3d0e69b420bd5 28c2cf160273c2062f909a875c4b4c0541ee2f84 ca57b79a870bbf54700730858603a70d79743779c1b059922ec401bfddc5adc9
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:53:09 GMT
expires: Fri, 02 May 2025 02:53:09 GMT
cache-control: public, max-age=31536000
age: 189120
last-modified: Thu, 01 Jun 2023 22:52:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tmdbcdn2.online/p/v2/w0/9tLlvRfxlQFOkXwacEk3R8hIxcLgTDPT.webp | 172.67.220.228 | 200 OK | 26 kB |
URL GET HTTP/3tmdbcdn2.online/p/v2/w0/9tLlvRfxlQFOkXwacEk3R8hIxcLgTDPT.webp IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp Hash47e005397a6449bfc7c12b2e1981dd5e b321b120fd4bd92b98696f2f811d541a8d3ca3d4 8ea3f66f5e97c6a9dbb01f700d1092008a07d1792fc8a9106dfdec228ef0f543
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /p/v2/w0/9tLlvRfxlQFOkXwacEk3R8hIxcLgTDPT.webp HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/webp
content-length: 25836
last-modified: Wed, 01 Jun 2022 16:18:04 GMT
etag: "6297913c-64ec"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tDWkivkyCNL8C0c0OjKZrtcXFbqGS1M0yURjBLUteSc5Vz1yKyKR3F6oRUvGhUwV%2Fpmy2GT4G8jMF3dySbhoItDsuMUnDauOYUDA0a3H0h3qrYLIzYoL86LyPqhuOyGIQuM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c155d849b503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tmdbcdn2.online/p/v2/w0/NhxcFF5QxTKQQdi5pH1S.webp | 172.67.220.228 | 200 OK | 7.6 kB |
URL GET HTTP/3tmdbcdn2.online/p/v2/w0/NhxcFF5QxTKQQdi5pH1S.webp IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp Hashdaaf365961d09c217bd412600a9fad23 057c64f078e72ef7cadb9c55a50df17ba5655ed5 1bf1196a788064d2ec724ab7d76946bf10ef794ab1db73a797a0c50509d95eb7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /p/v2/w0/NhxcFF5QxTKQQdi5pH1S.webp HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/webp
content-length: 7572
last-modified: Wed, 01 Jun 2022 16:19:58 GMT
etag: "629791ae-1d94"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Y%2FTAA63NNnnXckYZ7XVvHjpufXGfKN30SAiIy%2FzIsLGZ7tpz5ffKy5xb%2BhiWxqT%2FC04FVqI80GZ2tlrGidNWkV7f%2Fd9sGJ2wpySnSXVkRbZ9wsPe%2B6%2F55MtwUP3Xjclhys%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c155d848b503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tmdbcdn2.online/p/v2/w0/jkSNYNSClCeKEbUhjgdd.webp | 172.67.220.228 | 200 OK | 16 kB |
URL GET HTTP/3tmdbcdn2.online/p/v2/w0/jkSNYNSClCeKEbUhjgdd.webp IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 185x278, Scaling: [none]x[none], YUV color, decoders should clamp Hash458a5727cf89f955fc9b495fb1e70d72 c8da2a0062afa2efdb91d4173eac25cda2aa2b9f 77f0dc478cbd05a9efabd650e88d9f1a6c5a81a5592c88f5cdffed08dd929317
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /p/v2/w0/jkSNYNSClCeKEbUhjgdd.webp HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/webp
content-length: 15826
last-modified: Wed, 01 Jun 2022 16:19:26 GMT
etag: "6297918e-3dd2"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9GAqumdJUUB9xvdWkZMTwuXOlzihSuzY0pfnSAcupdY%2Bg33Glf9avUxHJ0zJ0KLduqwfpZPuAKKhvgx0gCdAbfI3oBTlvjMyRizBV4q42Ki2Z5yRAqlFDuiFbsnKcMxCwP8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c155d843b503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tmdbcdn2.online/p/v2/w0/GQWhNwXcKmypMTXBqmGq.webp | 172.67.220.228 | 200 OK | 8.4 kB |
URL GET HTTP/3tmdbcdn2.online/p/v2/w0/GQWhNwXcKmypMTXBqmGq.webp IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp Hashcf8e5e79ca2e2f095cb8b27b6ab88952 9e43d92eb92c98d3978edf905bec51726222c4b3 561f0d3bd3841bff3d9dbb90184fd69f97717ff8b428d5fe1388b893f7504708
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /p/v2/w0/GQWhNwXcKmypMTXBqmGq.webp HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/webp
content-length: 8424
last-modified: Wed, 01 Jun 2022 16:19:02 GMT
etag: "62979176-20e8"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XSeelISelQWzMOL5aY9APvwudmbFOMWcmDI%2F%2B76LlEzb7geujHw9kiQhNzYRKF4AmDmnUuN5y9tWheMih3feUhmgjxmIVjZzhGJXfPfhJiWp2WxyYh4pDRcz6jarIBj3cJ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c155d84bb503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tmdbcdn2.online/p/v2/w0/VyI8zkxpcZmDcG8mIP8y.webp | 172.67.220.228 | 200 OK | 7.4 kB |
URL GET HTTP/3tmdbcdn2.online/p/v2/w0/VyI8zkxpcZmDcG8mIP8y.webp IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp Hashe96b0e28ea2db960a040654afc49a219 55a85100424c30f225d28bf37e1de68720ed39b8 49f471e61230d9776f6b559859a017115e411d5d996189374e489eafb70832e5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /p/v2/w0/VyI8zkxpcZmDcG8mIP8y.webp HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/webp
content-length: 7438
last-modified: Wed, 01 Jun 2022 16:21:08 GMT
etag: "629791f4-1d0e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2BbSbGgt%2Bfft2A2MdkY9fl6FkotoNxHgoPSqe0rdzPDbHyW69gwbryQ06VePunT%2FS6emP%2BM9SoXxVxDONY9HNLTX%2FNTdw%2BQvehJktbLRUemRaukz3eOQ0m5Rq7NagyWDu3k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c155d84db503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tmdbcdn2.online/p/v2/w0/pQYxYheSzWraZcWS.webp | 172.67.220.228 | 200 OK | 23 kB |
URL GET HTTP/3tmdbcdn2.online/p/v2/w0/pQYxYheSzWraZcWS.webp IP172.67.220.228:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjecttmdbcdn2.online Fingerprint88:3E:8A:F5:D8:2A:04:4F:FC:F9:3F:12:37:3F:DD:FA:CE:94:D0:DB ValiditySat, 04 May 2024 00:19:20 GMT - Fri, 02 Aug 2024 00:19:19 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp Hashc0a104ee64a058c56573b78154c1da15 f8f098fbe4d40e665f55437203b68c4370e765ea 148b146bb5262e6f12b32d33819c1c7a72293552ae015f69ba1be7f24bd304ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /p/v2/w0/pQYxYheSzWraZcWS.webp HTTP/1.1
Host: tmdbcdn2.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/webp
content-length: 22818
last-modified: Wed, 01 Jun 2022 16:20:18 GMT
etag: "629791c2-5922"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hd4e32C9kYdG1YWf3pYqwVAHpRmpVnJ5iUsCD0yfw7NyR2GJWrI0gAUYcqMFoRRMZYUES%2FWARIUM5C9LNjrc6Mf%2FsiiICr2uSbZ7GRLxv5vfvpZWgnmZOcpXvJ%2F9jfd%2FUtw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c155d846b503-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 IP216.58.207.227:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14712, version 1.0 Hash3afeae0d768769f5e5f30ac9805c5b70 3ada17c2b462db3e7a1fd85c3f4670dfe7704f4d 0d0a6262c545e8bbc895116e5afb22579c468d7abb77e378f377d6fed57c1dce
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14712
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 18:02:35 GMT
expires: Fri, 02 May 2025 18:02:35 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:57 GMT
content-type: font/woff2
age: 134554
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.xadsmart.com/skurento-client.min.css |  185.76.9.23 | 200 OK | 29 kB |
URL GET HTTP/2www.xadsmart.com/skurento-client.min.css IP185.76.9.23:443 ASN#60068 Datacamp Limited
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subject1376341044.rsc.cdn77.org Fingerprint68:8B:ED:E2:67:C5:82:02:7F:17:31:6A:4A:5F:F4:34:D3:AB:57:CF ValidityTue, 30 Apr 2024 06:35:29 GMT - Mon, 29 Jul 2024 06:35:28 GMT
File typegzip compressed data, from Unix Hashff602cce16fda9f65368bffc1da7d279 4ed25f1ead377efa28685c7139913f82bff0667d 6555737d3c8a28feebaf23651226d2a2e0ec716090ba198e23ae551bd832a84b
GET /skurento-client.min.css HTTP/1.1
Host: www.xadsmart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: application/x-javascript
vary: Accept-Encoding, Origin
popads-node: wb12
expires: Wed, 08 May 2024 21:07:56 GMT
access-control-allow-origin: https://pelisflix2.trade
link: <https://xadsmart.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwwBuUwJFAHXEIwCAAwBuUwKCQH3macAAAwBnJIhJwH3AAAAAA
x-77-nzt-ray: af58563048473c67d5e23566984d7e19
x-accel-expires: @1715202476
x-accel-date: 1714640581
x-77-cache: HIT
x-77-age: 166928
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 166928
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| s.pelisflix2.trade/flix/imgs/cropped-1F17F-p-button-128-32x32.png | 172.67.179.8 | 200 OK | 1.6 kB |
URL GET HTTP/3s.pelisflix2.trade/flix/imgs/cropped-1F17F-p-button-128-32x32.png IP172.67.179.8:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGoogle Trust Services LLC Subjectpelisflix2.trade FingerprintA1:58:00:73:ED:5F:F0:BF:36:81:BA:2F:28:59:59:07:73:37:7D:47 ValidityWed, 01 May 2024 18:36:15 GMT - Tue, 30 Jul 2024 18:36:14 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hash94a09fc458a3037d60f7015927b7425b c726b820a64b888328e531c0e9de49021f723047 2a9d20e8e090964a3bb92314aad62df9c01b0322580817001c3cdf6dd5630f92
GET /flix/imgs/cropped-1F17F-p-button-128-32x32.png HTTP/1.1
Host: s.pelisflix2.trade
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/png
content-length: 1568
last-modified: Wed, 11 Aug 2021 22:34:34 GMT
etag: "6114507a-620"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e0to8UXZ40q0tD4JTFG82JGqazFbaSPkCOBNHo2mHIeCvZVZCFZqEUBgU3MPerWrlN21ohNoWzqDQTSnwvfcDDcr3813Sxthuc%2BmWQuTpYVgv%2BaQBfFvelyg91pezRxbEy5%2BUlE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c1583f6556bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/materialicons/v97/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 | 216.58.207.227 | 200 OK | 109 kB |
URL GET HTTP/2fonts.gstatic.com/s/materialicons/v97/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 IP216.58.207.227:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 109180, version 1.0 Size109 kB (109180 bytes) Hashd581ab0fb70dff2313836d355a06c356 1af5c10593c66a28be1cdbd553ed73038e4112f5 8558519e6f6e4e69807a5574145dcc2b569f65c6e060a080767944435c2ebdef
GET /s/materialicons/v97/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://s.pelisflix2.trade/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 109180
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 03:38:43 GMT
expires: Fri, 02 May 2025 03:38:43 GMT
cache-control: public, max-age=31536000
age: 186387
last-modified: Thu, 05 Aug 2021 15:50:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| api.pelisflix2.plus/ | 188.114.97.1 | 200 OK | 42 B |
IP188.114.97.1:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subjectpelisflix2.plus FingerprintEB:15:EC:BE:F7:20:03:56:D2:CE:5C:D1:47:26:4F:7E:0B:71:73:A3 ValiditySun, 14 Apr 2024 00:18:32 GMT - Sat, 13 Jul 2024 00:18:31 GMT
Hash8133406b6efd8aa37c8b0cadf2fb822a 98795baaa68ab3aa823740ae9e576933a9017588 c248eb37865a8d6aa304166d63332a2f78533c7988c4e01b63f8ebcfcf6be559
POST / HTTP/1.1
Host: api.pelisflix2.plus
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 28
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:10 GMT
content-type: application/json;charset=utf-8
content-length: 42
apacheserver: true
access-control-allow-origin: https://pelisflix2.trade
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pM3YmuWa0CXf2uCqoSgSXyOPwFkLfE2yf6ZS0EcNthbpczz%2FX1c8HQoNudAsALpAbzHwSuZrbMOXLEADIK7ysYWWdx%2FwAROwMrsmYJjwaqNh85LSL2B8vyk10UTnwm%2F9kBWOenlU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e6c15cde74b527-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ixi6lr6afpp4.l4.adsco.re/ |  185.200.118.51 | 200 OK | 0 B |
URL POST HTTP/2ixi6lr6afpp4.l4.adsco.re/ IP185.200.118.51:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subject*.l4.adsco.re FingerprintB2:51:02:63:F4:E6:E7:3A:98:79:B7:C5:F8:81:EC:E8:79:B9:BC:22 ValidityFri, 19 Apr 2024 09:12:52 GMT - Thu, 18 Jul 2024 09:12:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ixi6lr6afpp4.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:11 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| adsco.re/p | 162.252.214.5 | 200 OK | 810 B |
IP162.252.214.5:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File typeASCII text, with very long lines (1020), with no line terminators Hash14c4e804dda0e7e0690b24b9d1ec3b85 82c03ef913291cd715938c7bd7ded04399ffd55f 7b14df80b7af9fb79012eeda382295396a52204b88bdbf197ecb994439408dd2
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1591
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 07:25:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: https://pelisflix2.trade
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
|
|
| 6.adsco.re/ | 104.17.166.186 | | 0 B |
IP104.17.166.186:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:11 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c1615fc056c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ixi6lr6afpp4.n4.adsco.re/ | 38.132.109.115 | 200 OK | 0 B |
URL POST HTTP/2ixi6lr6afpp4.n4.adsco.re/ IP38.132.109.115:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subject*.n4.adsco.re Fingerprint45:6E:69:F7:75:1D:65:9E:20:3D:CF:CE:8B:F5:36:72:85:BD:76:EC ValidityFri, 19 Apr 2024 09:12:46 GMT - Thu, 18 Jul 2024 09:12:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ixi6lr6afpp4.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:11 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| xadsmart.com/ylsqjlhwykzvwb?HbfcXFzs=BQLyAAAAAAAACZUAAqXlGTbq1PeiUVhjE2n1hPhcYq7twjD3R0XjqcbDS0rxl_hz8wwh9B-IHdIsHaYYgkMZ173NuyvQAh1125vOd_Njaw038hrnty2MbUSz0MPOyKFH91B6DIXl5IcN5OzVng__wa5DTbAQpp-A0MRevcX6DkwIl-DCEHhgBcw-bpSI2dsq7OFIpguVyxovu6CKq96bxEv5wQWAg9DH2aMBQQ0Qvf6CBTUCClGpvK81uBpa0qQfFJ7wawvZJFYSyoJgcaFltKxEbXmrVREAyo_gd6erCuj8J_ILLZEhAKPIVItM94f1POQmjRPyVSZAZZ7vi8I7K7KmvqV8ZjrDX6DbKXwkvYFLpNHxkEg0pQUSUl2tnRA-8uWNk405d_Dz_IGoFN3g6QRXW89mAD_nDT9InsUrGvFGUj1l-bU7fWmMfOBCpwY-j3ty_lWoqfZBraY-lFVD8aN1PcQeitHqN5OWD4ufhcEBsQYHw_RaSUFU52EFeaDEts7-VJDYgsTFhaPi7eJ5HkbHSPk-TYB0vFM-j01JSa6pqRwUZNqlkcGn279MhJAxEbZGtKXJNKFscRZGOHikLSbdOY3Xczys1_FVSUGTK22XMezqWMHLfp9liuiPJclHLrv0_fUucgtF0sazAVr7R3KHujq1oFTsJjxGTJffjhfTdTfGL2DggXFdjQh-XRKYfGcf4XnvoI5rajMsC6rzVODHymRko3bzKlfOLHgRVEvYXIIpaYmmdJnM88OaHphJXn6NagVXyJegos9HmLfNyr63D1m0Rt2DEAMv7BjyvOLz2fwteqmVW6M2u6kY83edvbjuGalUgFw4hLoHARERVf1LNdsRcYrcO2WR-1Q0p5DXs5kFuwYQQIe5Mf7iKD7RyOtinKiGaSwVynL-W1kUMB2pjz5gsRG5DzE3skupObwqM86hcsqYOgvnjgodGpKJ-gOvTjKvmGlcTR3b-CsqqcNZegdxtoWiWiIYPMd6se-VJ7OOxya3AlCPENSZ&vWsrAalC=4&HemVAtUy=5096736&iyYquGsU=&fPNhAvex=0,0&JwvqUDXp=&WSsVbLld=&s=1280,1024,1,1280,1024,0 | 104.153.197.251 | 200 OK | 1.1 kB |
URL GET HTTP/2xadsmart.com/ylsqjlhwykzvwb?HbfcXFzs=BQLyAAAAAAAACZUAAqXlGTbq1PeiUVhjE2n1hPhcYq7twjD3R0XjqcbDS0rxl_hz8wwh9B-IHdIsHaYYgkMZ173NuyvQAh1125vOd_Njaw038hrnty2MbUSz0MPOyKFH91B6DIXl5IcN5OzVng__wa5DTbAQpp-A0MRevcX6DkwIl-DCEHhgBcw-bpSI2dsq7OFIpguVyxovu6CKq96bxEv5wQWAg9DH2aMBQQ0Qvf6CBTUCClGpvK81uBpa0qQfFJ7wawvZJFYSyoJgcaFltKxEbXmrVREAyo_gd6erCuj8J_ILLZEhAKPIVItM94f1POQmjRPyVSZAZZ7vi8I7K7KmvqV8ZjrDX6DbKXwkvYFLpNHxkEg0pQUSUl2tnRA-8uWNk405d_Dz_IGoFN3g6QRXW89mAD_nDT9InsUrGvFGUj1l-bU7fWmMfOBCpwY-j3ty_lWoqfZBraY-lFVD8aN1PcQeitHqN5OWD4ufhcEBsQYHw_RaSUFU52EFeaDEts7-VJDYgsTFhaPi7eJ5HkbHSPk-TYB0vFM-j01JSa6pqRwUZNqlkcGn279MhJAxEbZGtKXJNKFscRZGOHikLSbdOY3Xczys1_FVSUGTK22XMezqWMHLfp9liuiPJclHLrv0_fUucgtF0sazAVr7R3KHujq1oFTsJjxGTJffjhfTdTfGL2DggXFdjQh-XRKYfGcf4XnvoI5rajMsC6rzVODHymRko3bzKlfOLHgRVEvYXIIpaYmmdJnM88OaHphJXn6NagVXyJegos9HmLfNyr63D1m0Rt2DEAMv7BjyvOLz2fwteqmVW6M2u6kY83edvbjuGalUgFw4hLoHARERVf1LNdsRcYrcO2WR-1Q0p5DXs5kFuwYQQIe5Mf7iKD7RyOtinKiGaSwVynL-W1kUMB2pjz5gsRG5DzE3skupObwqM86hcsqYOgvnjgodGpKJ-gOvTjKvmGlcTR3b-CsqqcNZegdxtoWiWiIYPMd6se-VJ7OOxya3AlCPENSZ&vWsrAalC=4&HemVAtUy=5096736&iyYquGsU=&fPNhAvex=0,0&JwvqUDXp=&WSsVbLld=&s=1280,1024,1,1280,1024,0 IP104.153.197.251:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerSectigo Limited Subjectxadsmart.com FingerprintFC:E8:BA:57:31:46:6D:51:70:B5:42:35:6E:CF:97:6F:AF:38:C5:58 ValidityMon, 14 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1518), with no line terminators Hash40c1f14e347c35d4102020f0627e53e9 e522cccb0a01f2b5624b0dc649a11beb204ab015 80ce3166c49b158120f0d67bdff3e48ade196637e51d810ad947fdd59ad612e8
GET /ylsqjlhwykzvwb?HbfcXFzs=BQLyAAAAAAAACZUAAqXlGTbq1PeiUVhjE2n1hPhcYq7twjD3R0XjqcbDS0rxl_hz8wwh9B-IHdIsHaYYgkMZ173NuyvQAh1125vOd_Njaw038hrnty2MbUSz0MPOyKFH91B6DIXl5IcN5OzVng__wa5DTbAQpp-A0MRevcX6DkwIl-DCEHhgBcw-bpSI2dsq7OFIpguVyxovu6CKq96bxEv5wQWAg9DH2aMBQQ0Qvf6CBTUCClGpvK81uBpa0qQfFJ7wawvZJFYSyoJgcaFltKxEbXmrVREAyo_gd6erCuj8J_ILLZEhAKPIVItM94f1POQmjRPyVSZAZZ7vi8I7K7KmvqV8ZjrDX6DbKXwkvYFLpNHxkEg0pQUSUl2tnRA-8uWNk405d_Dz_IGoFN3g6QRXW89mAD_nDT9InsUrGvFGUj1l-bU7fWmMfOBCpwY-j3ty_lWoqfZBraY-lFVD8aN1PcQeitHqN5OWD4ufhcEBsQYHw_RaSUFU52EFeaDEts7-VJDYgsTFhaPi7eJ5HkbHSPk-TYB0vFM-j01JSa6pqRwUZNqlkcGn279MhJAxEbZGtKXJNKFscRZGOHikLSbdOY3Xczys1_FVSUGTK22XMezqWMHLfp9liuiPJclHLrv0_fUucgtF0sazAVr7R3KHujq1oFTsJjxGTJffjhfTdTfGL2DggXFdjQh-XRKYfGcf4XnvoI5rajMsC6rzVODHymRko3bzKlfOLHgRVEvYXIIpaYmmdJnM88OaHphJXn6NagVXyJegos9HmLfNyr63D1m0Rt2DEAMv7BjyvOLz2fwteqmVW6M2u6kY83edvbjuGalUgFw4hLoHARERVf1LNdsRcYrcO2WR-1Q0p5DXs5kFuwYQQIe5Mf7iKD7RyOtinKiGaSwVynL-W1kUMB2pjz5gsRG5DzE3skupObwqM86hcsqYOgvnjgodGpKJ-gOvTjKvmGlcTR3b-CsqqcNZegdxtoWiWiIYPMd6se-VJ7OOxya3AlCPENSZ&vWsrAalC=4&HemVAtUy=5096736&iyYquGsU=&fPNhAvex=0,0&JwvqUDXp=&WSsVbLld=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: xadsmart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
popads-node: wb9
access-control-allow-origin: *
asf: 6
cache-control: private, no-store, no-cache, must-revalidate, no-transform, max-age=0
pragma: no-cache
content-type: application/javascript; charset=utf-8
set-cookie: PP_CV=yes; expires=Sat, 04 May 2024 08:25:11 GMT; Max-Age=3600
fraudcheck=07c6f4aaff980bc435c8c86b22a54a03; expires=Mon, 03 Jun 2024 07:25:11 GMT; Max-Age=2592000; path=/; domain=.popads.net
PopAds_CF_Pass=1; expires=Sat, 04 May 2024 13:25:11 GMT; Max-Age=21600
link: <https://go.bbrdbr.com>;rel=preconnect
content-length: 1106
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 07:25:11 GMT
X-Firefox-Spdy: h2
|
|
| go.bbrdbr.com/favicon.ico | 104.18.40.50 | 404 Not Found | 19 B |
URL GET HTTP/2go.bbrdbr.com/favicon.ico IP104.18.40.50:443
Requested bymoz-nullprincipal:{8d52d3b8-f1b3-4a39-81d1-0e8362708b22}?https://pelisflix2.trade CertificateIssuerCloudflare, Inc. Subjectbbrdbr.com Fingerprint54:D2:62:A8:E8:91:19:F3:B4:1C:47:61:81:1B:D4:97:94:1B:26:9E ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash595e88012a6521aae3e12cbebe76eb9e da3968197e7bf67aa45a77515b52ba2710c5fc34 b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793
GET /favicon.ico HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 04 May 2024 07:25:12 GMT
content-type: text/plain; charset=utf-8
content-length: 19
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtrsn3TfoaR3cJpttTucJN9J2FVpG; SameSite=None; Secure; path=/; expires=Sun, 05-May-24 07:25:12 GMT; HttpOnly
server: cloudflare
cf-ray: 87e6c1666d1cb4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ixi6lr6afpp4.s4.adsco.re/ |  185.200.116.51 | 200 OK | 0 B |
URL POST HTTP/2ixi6lr6afpp4.s4.adsco.re/ IP185.200.116.51:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerLet's Encrypt Subject*.s4.adsco.re Fingerprint6C:EA:F6:8F:57:34:25:F9:39:76:98:E0:61:B8:C8:86:AD:CC:68:0A ValidityFri, 19 Apr 2024 09:12:40 GMT - Thu, 18 Jul 2024 09:12:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ixi6lr6afpp4.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://pelisflix2.trade
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:12 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| c.adsco.re/ | 104.17.166.186 | 200 OK | 82 kB |
IP104.17.166.186:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (689) Hasha0b475c65fed312aba8d7c43a0cbc928 3fdd052b41c37318e44084be4f92d42fba4ded61 2dfb2101b24f80be00b1baecce7eec815e61a13381f6983051b6261b8035468a
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:10 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 04 Jun 2024 07:25:10 GMT
etag: W/"oLR1xl/tMSq6jXxDoMvJKA=="
cf-cache-status: HIT
age: 313651
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c15efdc756c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| s.pelisflix2.trade/flix/js/scriptmin.js?6789 | 172.67.179.8 | 200 OK | 8.6 kB |
URL GET HTTP/3s.pelisflix2.trade/flix/js/scriptmin.js?6789 IP172.67.179.8:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGoogle Trust Services LLC Subjectpelisflix2.trade FingerprintA1:58:00:73:ED:5F:F0:BF:36:81:BA:2F:28:59:59:07:73:37:7D:47 ValidityWed, 01 May 2024 18:36:15 GMT - Tue, 30 Jul 2024 18:36:14 GMT
File typeJavaScript source, ASCII text, with very long lines (8954), with no line terminators Hashb98c936638e7e3074db2368dad22273d 5fec3e1e821be32abd3cb38c99e9b98c924b7fb1 1161f59e7620caa496d5c75b45fbd4518af5d5b63d353a48a138b07402b61112
GET /flix/js/scriptmin.js?6789 HTTP/1.1
Host: s.pelisflix2.trade
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: application/javascript
last-modified: Wed, 31 Jan 2024 02:35:26 GMT
etag: W/"65b9b1ee-21c4"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6jobZqaB2nnf4tRCDTSj0tb0gTRwdRAHSzUei33MtPc98MuCBIRlHK5y7nzrnD25vzzWxfKcXoUrHAcxvgdTG5tJtB2yz1Oy1dY8LCRYqjsYka4aHXWVH%2BFSO1iFxkWm9SJmnHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c153db1a56bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ | 172.67.179.8 | 200 OK | 83 kB |
URL User Request GET HTTP/2pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ IP172.67.179.8:443
CertificateIssuerGoogle Trust Services LLC Subjectpelisflix2.trade FingerprintA1:58:00:73:ED:5F:F0:BF:36:81:BA:2F:28:59:59:07:73:37:7D:47 ValidityWed, 01 May 2024 18:36:15 GMT - Tue, 30 Jul 2024 18:36:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ HTTP/1.1
Host: pelisflix2.trade
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
ab: D=3786 t=1714807508673703
content-language: es
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5PO8VUpRTvzb51p5pPwZo337Qnc9eraXrXaE%2Bb0MMvhNZ1PG9TW%2Bm150TaSi%2FJq73BOvYgf1OOruSirUF4j5hnAqGnR0o8QE3GaZrjvUvRdCRf77b85A8d9v3NwXLZie%2Beyj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e6c150da0eb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.kindor.io/apis/player.php | 172.67.144.152 | 200 OK | 2.6 kB |
URL GET HTTP/2api.kindor.io/apis/player.php IP172.67.144.152:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGoogle Trust Services LLC Subjectkindor.io FingerprintC9:34:79:82:2F:DC:FA:D9:12:AC:90:93:A3:18:DA:30:64:32:4E:B9 ValiditySun, 07 Apr 2024 20:12:31 GMT - Sat, 06 Jul 2024 20:12:30 GMT
File typeJavaScript source, ASCII text, with very long lines (2594), with no line terminators Hash1beef62c4dd2e208943177dd5c1fe2d5 493328cade3d9a73f0e22b3d54aee6e8354b0faa dba9aa103eb1bfda2bed8434c3f024258bbc5ca896810a16117cb9d26d55497d
GET /apis/player.php HTTP/1.1
Host: api.kindor.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:10 GMT
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: *
vary: Accept-Encoding
apacheserver: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bzEp%2B7Fo1jl4J8E9Oex5ziIcryExADXn96wsuvuT4LsiWTzItyJNkX4hO85SGvvL3li5Ts7hXY%2BVRQXKeLb%2BOp5pncCerMXBu%2Fxvwy818B1Yz%2FChb5665ni1TRhdYgO4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e6c15cfe2b7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro%3A300%2C400%2C600%2C700&ver=1.53 | 142.250.74.106 | 200 OK | 9.5 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Source+Sans+Pro%3A300%2C400%2C600%2C700&ver=1.53 IP142.250.74.106:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (9740), with no line terminators Hash70436d9f39b0910dd16bab076ea8943d 55ecc25f846d152e6314fd062a054c86bbcb2562 fdebc360647412ab40e32e406c577bcc44fda07b897625a2e822575d59217236
GET /css?family=Source+Sans+Pro%3A300%2C400%2C600%2C700&ver=1.53 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 07:25:09 GMT
date: Sat, 04 May 2024 07:25:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| s.pelisflix2.trade/flix/imgs/cropped-1F17F-p-button-128-192x192.png | 172.67.179.8 | 200 OK | 18 kB |
URL GET HTTP/3s.pelisflix2.trade/flix/imgs/cropped-1F17F-p-button-128-192x192.png IP172.67.179.8:443
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerGoogle Trust Services LLC Subjectpelisflix2.trade FingerprintA1:58:00:73:ED:5F:F0:BF:36:81:BA:2F:28:59:59:07:73:37:7D:47 ValidityWed, 01 May 2024 18:36:15 GMT - Tue, 30 Jul 2024 18:36:14 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash1d9386e3cddcf8716882cbd9fd37a83b 5594ab699e5a34677ef111503ce41622dfd7047d 821fa71e6fa8404239947be3d7a339b12dfc10b15000cc5067b1ec498ea28d65
GET /flix/imgs/cropped-1F17F-p-button-128-192x192.png HTTP/1.1
Host: s.pelisflix2.trade
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: image/png
content-length: 18049
last-modified: Wed, 11 Aug 2021 22:34:34 GMT
etag: "6114507a-4681"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e%2FFf2zq6xbN3mryK%2BpSYmGFqoAuZUaNj%2Boj9lR7WLpilFcZZXiBL0Ar47XnZBll8HLllAzSQUai%2FDS1wLHgV%2Bildp7C8wgC0svWdbX%2BDXkeOTjUKxN1Z7MP47kQxa0rpWn8%2FV%2BQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c1582f6456bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pelisflix2.giving/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ | 104.21.34.74 | 301 Moved Permanently | 83 kB |
URL User Request GET HTTP/2pelisflix2.giving/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ IP104.21.34.74:443
CertificateIssuerGoogle Trust Services LLC Subjectpelisflix2.giving Fingerprint71:19:B4:54:D2:2B:B0:77:FF:92:C7:BD:EF:95:14:55:B3:62:17:37 ValidityFri, 26 Apr 2024 21:40:19 GMT - Thu, 25 Jul 2024 21:40:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ HTTP/1.1
Host: pelisflix2.giving
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 04 May 2024 07:25:08 GMT
content-type: text/html
location: https://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/
content-language: es
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NusSfWNB3GH%2F3%2BM5pdCtMP64GUhCHVH4PWZ9jvkpK3%2FPEFLNyQcQis49Xnxp6NN2LCvXyYZe3tK5DwnnOJa1sOE1s7j0m3FNXMxmBFJy1sQmDlVUhMdPG577oi5kOw1M%2B0Z7TQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e6c14f9e4c1c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| c.adsco.re/ | 0.0.0.0 | | 0 B |
IP0.0.0.0:0
Requested byhttps://pelisflix2.trade/pelicula/the-first-slam-dunk-zprf/pelicula/the-first-slam-dunk-zxpz/ CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pelisflix2.trade/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 07:25:09 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 04 Jun 2024 07:25:09 GMT
etag: W/"oLR1xl/tMSq6jXxDoMvJKA=="
cf-cache-status: HIT
age: 313650
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6c157da5b7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|