urlquery.net
WEBSITE ANALYSIS REPORT

https://yts.gg/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET301document0 B4215 ms1 alerts
GET200document696.3 KB2926 ms2 alerts
GET200stylesheet10.2 KB58 ms1 alerts
GET200stylesheet132.0 KB567 ms1 alerts
GET200img37.1 KB1073 ms1 alerts
GET200img30.7 KB1693 ms1 alerts
GET200font17.9 KB1500 ms1 alerts
GET200font17.9 KB1109 ms1 alerts

Transaction #02

Request / response

URL

GET HTTPS
https://yts.gg/assets/fonts/P5sMzZCDf9_T_10ZxCE.woff2

IP / ASN

Country unknown 172.67.72.74

AS13335 · CLOUDFLARENET

Requested by
https://web.yts.gg/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DigiCert UltraDNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /assets/fonts/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: yts.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: identity
Referer: https://yts.gg/assets/fonts/fonts.css
Origin: https://web.yts.gg
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Mon, 28 Sep 2026 07:23:09 GMT
content-type: application/octet-stream
server-timing: cfExtPri
last-modified: Thu, 17 Feb 2022 10:11:15 GMT
etag: "620e1f43-47bc"
age: 4177
accept-ranges: bytes
strict-transport-security: max-age=63072000; preload
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
referrer-policy: same-origin
x-xss-protection: 1; mode=block
priority: u=3,i=?0
speculation-rules: "/cdn-cgi/speculation"
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rFa7paJAQlyMMiND7kMudSNIbC8Wm2GrrEoMqjgBeCxNQFkzx%2FSNQBSrhgX3negVo2MqFidOCEyFVGGvqreWXWUwiIfr2er555BaW6O8IEg2nt%2BSfnpvww%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expect-ct: max-age=86400, enforce
cf-ray: a4210049099db4eb-OSL
alt-svc: h3=":443"; ma=86400
content-length: 18364

GET200font22.8 KB1532 ms1 alerts
GET200font19.7 KB1628 ms1 alerts
GET200script12.0 KB305 ms2 alerts
GET200script159.7 KB1055 ms1 alerts
GET302script0 B39 ms2 alerts
GET200script21.6 KB382 ms2 alerts
GET200img4.7 KB276 ms1 alerts
GET200img492 B207 ms1 alerts
POST200xhr0 B143 ms2 alerts
GET302script0 B39 ms2 alerts
GET200xhr694.8 KB2770 ms2 alerts
GET200script21.2 KB268 ms2 alerts
POST204beacon0 B264 ms3 alerts
GET200fetch983 B423 ms3 alerts
POST200xhr0 B394 ms2 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot