urlquery.net
WEBSITE ANALYSIS REPORT

https://yts.gg/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET301document0 B4215 ms1 alerts
GET200document696.3 KB2926 ms2 alerts
GET200stylesheet10.2 KB58 ms1 alerts
GET200stylesheet132.0 KB567 ms1 alerts
GET200img37.1 KB1073 ms1 alerts
GET200img30.7 KB1693 ms1 alerts
GET200font17.9 KB1500 ms1 alerts
GET200font17.9 KB1109 ms1 alerts
GET200font22.8 KB1532 ms1 alerts
GET200font19.7 KB1628 ms1 alerts
GET200script12.0 KB305 ms2 alerts
GET200script159.7 KB1055 ms1 alerts
GET302script0 B39 ms2 alerts
GET200script21.6 KB382 ms2 alerts
GET200img4.7 KB276 ms1 alerts
GET200img492 B207 ms1 alerts
POST200xhr0 B143 ms2 alerts
GET302script0 B39 ms2 alerts
GET200xhr694.8 KB2770 ms2 alerts

Transaction #18

Request / response

URL

GET HTTPS
https://web.yts.gg/

IP / ASN

Country unknown 172.67.72.74

AS13335 · CLOUDFLARENET

Requested by
https://web.yts.gg/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DigiCert UltraDNS SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: web.yts.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://web.yts.gg/
X-Requested-With: XMLHttpRequest
Sec-GPC: 1
Connection: keep-alive
Cookie: PHPSESSID=31j877pdpf4gueii18dvhfm3bb; cf_clearance=IGnDZi7bvyKUT8daNPJDNjRktLzdSq28GcGPSxUpSiI-1790580192-1.2.1.1-2xbpl7cwHkYiCIy8LPDN2WGGLowXkPMAENBzLLFPbq7OoqsOQPaB3t2fa0AFiR7H4iaKQi42iIAYYFXHsX10obAE_rwpgfui9piHi2tLJ2eGCC8milwAeETXZuiOU3tkxxIvh6PYlciM6zgAE35o5XwDcxlQVNPj9Po1enWXjTGKpcj5PJZWG2GNlgXC00Ns1MoQ4WmJFQqdkNCOAfMAjFDbCVT0sRMbIdCaQA3gEdkcP8JiiiZiyuPVPaxeLUeIsXiIkvcLe2OWKFHFrZvihSeZXt81bZAXHRQZEBoQjOlBeO4d9pmW7FaOWQA104c.CulfSlzMM5hzgKYPeOHeeOrjFmL8.62E6eq.KfvFRoMT1Ga_Z7ej9GjHE6Pap6PcGCKzp8ChFmvDnrffNjVAqIgqZpzPAutN7f4oFrXG2KU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Mon, 28 Sep 2026 07:23:13 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
expect-ct: max-age=86400, enforce
age: 0
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; preload
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
referrer-policy: same-origin
priority: u=3,i=?0
speculation-rules: "/cdn-cgi/speculation"
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=362UXNqb4Sgg4h1xgVpfbd88NHcu%2FMMb%2F9JKO0VaCBQhYJz3wEzEgaBLfkB0uO%2F9ZDMecc9rc%2BxwVJC9lTJ8mZH9XrsRPO9lUQ9ycf2hGO8snIp%2BTWGzsys7IzY%3D"}]}
cf-ray: a421005d4b14b4eb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET200script21.2 KB268 ms2 alerts
POST204beacon0 B264 ms3 alerts
GET200fetch983 B423 ms3 alerts
POST200xhr0 B394 ms2 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot