Report - www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023

Report Overview

Submitted URL
www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 07:22:39
Access
public
Website Title
Marabout Chéri FRENCH WEBRIP 1080p 2023 - Torrent9.zone
Final URL
www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
constructbrought.com	unknown	unknown	No data	No data	7.5 kB	13 kB	192.243.59.12
cdn.creative-bars1.com	unknown	2022-11-01	2022-11-15	2024-04-24	2.2 kB	184 kB	188.114.96.1
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	942 B	22 kB	142.250.74.106
pitcharduous.com	unknown	2024-04-24	2024-04-25	2024-04-25	484 B	467 B	192.243.59.20
capaciousdrewreligion.com	unknown	2023-11-07	2023-11-27	2024-04-25	416 B	327 B	192.243.61.227
cdn.cloudimagesb.com	23099	2020-10-06	2021-02-12	2024-04-24	440 B	15 kB	45.133.44.10
proftrafficcounter.com	unknown	2023-11-16	2023-11-21	2024-04-25	870 B	848 B	35.158.46.84
growingcastselling.com	unknown	unknown	No data	No data	886 B	48 kB	192.243.61.227
unseenreport.com	unknown	2022-03-30	2022-03-30	2024-04-24	1.5 kB	846 B	192.243.59.20
cdn.barscreative1.com	25648	2021-09-08	2021-09-16	2024-04-25	492 B	9.1 kB	45.133.44.4
downstairsnegotiatebarren.com	unknown	2024-03-04	2024-03-04	2024-04-25	828 B	173 kB	104.21.35.227
www.torrent9.zone	unknown	2024-02-08	2024-02-10	2024-04-18	12 kB	1.2 MB	188.114.96.1
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	3.2 kB	100 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	growingcastselling.com	Sinkholed
2024-04-25	medium	growingcastselling.com	Sinkholed
2024-04-25	medium	pitcharduous.com	Sinkholed
2024-04-26	medium	constructbrought.com	Sinkholed
2024-04-26	medium	constructbrought.com	Sinkholed
2024-04-25	medium	unseenreport.com	Sinkholed
2024-04-25	medium	unseenreport.com	Sinkholed
2024-04-26	medium	constructbrought.com	Sinkholed
2024-04-26	medium	constructbrought.com	Sinkholed
2024-04-26	medium	constructbrought.com	Sinkholed
2024-04-26	medium	constructbrought.com	Sinkholed
2024-04-26	medium	constructbrought.com	Sinkholed
2024-04-26	medium	constructbrought.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023	92 B	2023-03-10	2024-05-05
Pretty URL www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 01:48:06 Last Seen2024-05-05 15:11:17 Times Seen15 Hash d9ff731203bc67e7654057ed47c4c6a1 dee488eb70acb9bc4bd4a3829279b5eb368929ab 753f9fcc61dcd31bcc1a84cb3048f5f922bc694f3c85ba3030dd9466f0ad14b9 Loading...

	growingcastselling.com/0a/28/f8/0a28f8710818e4ad7bd49449271ac86d.js	82 kB	2024-04-26	2024-04-26
Pretty URL growingcastselling.com/0a/28/f8/0a28f8710818e4ad7bd49449271ac86d.js IP 192.243.61.227 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 09:22:46 Last Seen2024-04-26 09:22:47 Times Seen2 Hash 4fb8f9fceccba1f31dd6f671317f5388 5ea2b515e3f36aa2f53651676a1b2a120d780d81 b4006cfbb2ce533ace42f3fbc6790cfe4cbe308c9078c0ef53f92e7cc65dce5a Loading...

	growingcastselling.com/31/97/48/319748c93a446801f4d1c7986a0977aa.js	44 kB	2024-04-26	2024-04-26
Pretty URL growingcastselling.com/31/97/48/319748c93a446801f4d1c7986a0977aa.js IP 192.243.61.227 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 09:22:46 Last Seen2024-04-26 09:22:47 Times Seen2 Hash 1617523e38aa2d0a1f5abb20e7443e98 bde87ab621c156005adf5481ed04ebbb99a59e3d e0d9535ba92b54c37037b59d96f1fe1518c7d2f160e846e1a920beaf46e394db Loading...

	downstairsnegotiatebarren.com/sfp.js	86 kB	2024-03-29	2024-05-06
Pretty URL downstairsnegotiatebarren.com/sfp.js IP 104.21.35.227 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-29 13:13:34 Last Seen2024-05-06 07:46:11 Times Seen2314 Hash f4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716 Loading...

	www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023	428 B	2024-04-26	2024-05-05
Pretty URL www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 09:22:46 Last Seen2024-05-05 15:11:17 Times Seen12 Hash 53fc15ab86040466b07f392520d1c77b 55f12b94175d845239808e137264f17adc26c9ed 3ca349e89ea6d8585a7357d474d0b3b28a31717d90fc6c282c68e628f0fc381f Loading...

	www.torrent9.zone/static/js/jquery.min.js	84 kB	2023-06-16	2024-05-05
Pretty URL www.torrent9.zone/static/js/jquery.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-16 14:30:54 Last Seen2024-05-05 15:11:18 Times Seen28 Hash 17c3a750efea704d11c89af19b55acce f615c64532bd36a6dd88e2a431981056610ef3c5 e6beec2519e679d8fa41d0d426cb9f4e4f95ad85501866a1d1a4611e912c4242 Loading...

	www.torrent9.zone/static/js/bootstrap.min.js	37 kB	2023-03-07	2024-05-06
Pretty URL www.torrent9.zone/static/js/bootstrap.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:25 Last Seen2024-05-06 05:54:21 Times Seen34584 Hash c5b5b2fa19bd66ff23211d9f844e0131 791aa054a026bddc0de92bad6cf7a1c6e73713d5 2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a Loading...

	unknown	564 B	2024-04-26	2024-05-01
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 09:22:46 Last Seen2024-05-01 08:54:44 Times Seen4 Hash d2f9fbc54a59a517197e3c402528f4f0 1e82a08cc35fed63389649ce47483a54fa53899b 7732f6e3bc2e42f7cdddac8736399fbe40a75d6f0fc30dc4fe1f7cae66c2f5e0 Loading...

	capaciousdrewreligion.com/advertisers.js	0 B	2023-03-07	2024-05-06
Pretty URL capaciousdrewreligion.com/advertisers.js IP 192.243.61.227 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-06 13:42:41 Times Seen37377639 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js	90 kB	2023-03-07	2024-05-06
Pretty URL cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:04:00 Last Seen2024-05-06 06:37:04 Times Seen4021 Hash 561acb3e541133bbdd2c0c19f8ee35a1 ffd1353cf3f77d25f801c84d8208613eb0d3d548 9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc Loading...

HTTP Transactions (56)

URL IP Response Size

www.torrent9.zone/Public/images/logo.png

188.114.96.1

200 OK

3.9 kB

URL GET HTTP/3
www.torrent9.zone/Public/images/logo.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
PNG image data, 124 x 42, 8-bit/color RGBA, non-interlaced
Size
3.9 kB (3874 bytes)
Hash
a4f5dc6274c3dba57b929b59ca6ec3b5
104af1e974e9b51e620d511baf938bf65e8d8f60
224bde392ec5178a84be7dc61ca46ed1fa609cf26da77ab7e7fd6ff9d3a49f44

HTTP Headers

GET /Public/images/logo.png HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: image/png
content-length: 3874
last-modified: Thu, 15 Mar 2018 09:16:32 GMT
etag: "5aaa39f0-f22"
expires: Mon, 29 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2295247
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=euHYCUOQQeiWPtx4%2B3jmDkENfKoLy9GVUDCnCzNxDW44dhL4yaAwUxwDx4W7TBVTQgCuMn3fADYGh2lv8ssUjQcxX2UUDQdJtovIXTuYfayaP1Z05QJbkQnJjYamdOUoBeurJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205bd121c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/Public/images/footer-logo.png

188.114.96.1

200 OK

4.7 kB

URL GET HTTP/3
www.torrent9.zone/Public/images/footer-logo.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
PNG image data, 140 x 47, 8-bit/color RGBA, non-interlaced
Size
4.7 kB (4663 bytes)
Hash
3b118ded048efca22409d3ca44985c80
4e7a9a2a43cfaf522df29135e3afd9c3b3be60e6
9a05504b0a48c2eec1ce7c39066e8365a3f4f8f7e3cce0e23f01b1565a428c8c

HTTP Headers

GET /Public/images/footer-logo.png HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: image/png
content-length: 4663
last-modified: Thu, 15 Mar 2018 08:46:34 GMT
etag: "5aaa32ea-1237"
expires: Thu, 16 May 2024 17:21:00 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 828072
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g8GkW0K6EOkLaicKeT176APX2sk2NdGFNLEAUx3NOzc3eH2tG73ZUE%2BGbIY5FE6Qe7edZohr4ZN9X%2BuGOsEfm80YofOXTDIh40mtjLXj%2BVqIy8wdKQsQ6YDELtsf8QddbuEDXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205cd2c1c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023

188.114.96.1

200 OK

37 kB

URL User Request GET HTTP/2
www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (789), with CRLF, LF line terminators
Size
37 kB (37315 bytes)
Hash
7c82e849098b846d2371badd100ee957
8ff5b0e29ab2bd605f66b23db9bed79b2e030593
af4c4b41578af90baf68e9d0194588f62e61ed5f3248787d17a1dcdb690cb15f

HTTP Headers

GET /torrent/113368/marabout-ch-ri-french-webrip-1080p-2023 HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kfmdNBxCtGBqdp949g7jSPRzeXhr9N23HkZOnDKVI9IaD8lFwebdUeYfEVUhO3xvJI2WOPLn%2BylTB7lIbgjNiw8NBaU%2FId%2FOweNezhg0snzxWM6QgkRPV36dlwQ3OWndMpkX5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4d2029d8e569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.torrent9.zone/pictures/le-samaritain-truefrench-webrip-x264-2022.jpg

188.114.96.1

200 OK

76 kB

URL GET HTTP/3
www.torrent9.zone/pictures/le-samaritain-truefrench-webrip-x264-2022.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x333, components 3
Size
76 kB (76158 bytes)
Hash
edc4dedbb60fa707a9065e5fe9e63e05
c5ad026414b6bf5e7d44870102695838771e154a
3ca460ccae13d2aae5ec2eef03edbb8ce5722359a4cdbc8c96c8c4f0a41993ef

HTTP Headers

GET /pictures/le-samaritain-truefrench-webrip-x264-2022.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: image/jpeg
content-length: 76158
last-modified: Tue, 12 Mar 2024 18:02:33 GMT
etag: "65f098b9-1297e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NtgV8el6G7%2B5ErJntqhSVV7x6G8OISkQ6e9khrS2YsBWcx1UYfmg%2FU4fhrfTQzUTxKe5wHq2oswcL46%2F14QDSnVXcE2YBAXViRivFfFcHtjsmfJpYYdsdGXt%2FJYWhtnlipAJrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205bd181c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/pictures/sonic-2-le-film-truefrench-webrip-x264-2022.jpg

188.114.96.1

200 OK

137 kB

URL GET HTTP/3
www.torrent9.zone/pictures/sonic-2-le-film-truefrench-webrip-x264-2022.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3
Size
137 kB (137352 bytes)
Hash
24ef5680c3ba27dc345b71e5d9535e53
63adefef302f706424b2200ac04c2f86d8505a93
874528de3b14d4dbfa4b7481aaf2f95943fdf4980acf80526a06996a6ffe6a04

HTTP Headers

GET /pictures/sonic-2-le-film-truefrench-webrip-x264-2022.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: image/jpeg
content-length: 137352
last-modified: Tue, 12 Mar 2024 17:13:29 GMT
etag: "65f08d39-21888"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9OZIZJwdi923Du6VCYB9u4z3elMWAgm08NvBnsaXad036dfVBXEPbwiguH9KrsLT6qah7PFbVKQcecTXkECofefvJKqbmyogs7UTuHjqg%2BfIwrXfdT7Adkg18tkukj2qYQFz8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205bd1b1c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/pictures/one-shot-french-dvdrip-2022.jpg

188.114.96.1

200 OK

26 kB

URL GET HTTP/3
www.torrent9.zone/pictures/one-shot-french-dvdrip-2022.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 250x371, components 3
Size
26 kB (26386 bytes)
Hash
8b56e8c12950cf785c941f0375b39bf2
f6ea7c390c23b37687604a6505190bdd07bd413f
c9eacae35bc1da8fcd1f750f6483bc3977e736d8e8c9fdbcb01ec9b8bfe7c39f

HTTP Headers

GET /pictures/one-shot-french-dvdrip-2022.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: image/jpeg
content-length: 26386
last-modified: Thu, 06 Jan 2022 21:17:01 GMT
etag: "61d75c4d-6712"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3emKbub6SkUIR93PxzhaAlRfh7W402a%2Fi%2BV23Q%2BheVJ3FH43XhCcM4xrnUzyCU%2BCYJJYEYefPGufJphRAw%2F3jUdU2CxH2lglp8ZbPPV6vObnP6d%2FBLWb65xeN%2BxlXIHq22UC1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205cd1f1c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/pictures/l-adieu-the-farewell-french-dvdrip-2019.jpg

188.114.96.1

200 OK

139 kB

URL GET HTTP/3
www.torrent9.zone/pictures/l-adieu-the-farewell-french-dvdrip-2019.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
PNG image data, 250 x 357, 8-bit/color RGBA, non-interlaced
Size
139 kB (139348 bytes)
Hash
25fe9642cee66f8c41112c7ab2cedcca
ddb66792666c16a9da2b2f190371a686e3496c5d
bfcb81a3371de6992d262f24a3f957f51b4295276f63e52f4a30dd8c767ced6f

HTTP Headers

GET /pictures/l-adieu-the-farewell-french-dvdrip-2019.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: image/jpeg
content-length: 139348
last-modified: Fri, 15 Nov 2019 05:35:12 GMT
etag: "5dce3910-22054"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bOOQW7hTspDJQI5Ok1MvoEXCXidu%2BsInln9%2F7sXFdhRUt1SqQmu3SPVqtMBXx%2BFD81KAnkTHAqP4IMM96YAxZ2nepszH0gKd6iI5DgckEdmxF9rsse7AEhwITDygV%2FhudBv9ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205cd201c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/pictures/fast-and-furious-5-french-hdlight-1080p-2011.jpg

188.114.96.1

200 OK

112 kB

URL GET HTTP/3
www.torrent9.zone/pictures/fast-and-furious-5-french-hdlight-1080p-2011.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 600x800, components 3
Size
112 kB (111594 bytes)
Hash
6122c5bd85545896fa83226d8ba95fc2
6720589638cdff943bd150f11603eb5dd5556a2d
661b56339e2a41fd5fefcfed47f1fffb8e49b87c1f2a1234dd48fcb8518d42ad

HTTP Headers

GET /pictures/fast-and-furious-5-french-hdlight-1080p-2011.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: image/jpeg
content-length: 111594
last-modified: Fri, 15 Nov 2019 04:12:24 GMT
etag: "5dce25a8-1b3ea"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zBD51FF53a2YLpdOGLOQ9lgBqgpCADKiV4Q46qKQFepArDu6o%2FF%2FHyQ1g%2BCGeU%2FO4x8SzoHXxkiPjKxEs2r7FWYP9p4BC0X3HJpvrC3txwNsgDwGucz2uMU2LDDzooyWi4HeQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205cd231c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/pictures/triple-threat-truefrench-webrip-2019.jpg

188.114.96.1

200 OK

31 kB

URL GET HTTP/3
www.torrent9.zone/pictures/triple-threat-truefrench-webrip-2019.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 250x371, components 3
Size
31 kB (31214 bytes)
Hash
93cf961da1c7220b32cec28faaa4f047
6b02ca08d2227eb832999cbcdb0b60a015487d0b
bc722a8e7d33ae22fb859a85d2f6925d3f72616f4ec3beaf8261308537357cb9

HTTP Headers

GET /pictures/triple-threat-truefrench-webrip-2019.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: image/jpeg
content-length: 31214
last-modified: Mon, 11 Nov 2019 05:34:43 GMT
etag: "5dc8f2f3-79ee"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XthW6mWmfXTuG8g%2FNZUpBQRhZTRV7f0x4PNVpIWaT6LTvQGoq0Py3%2B4qipJ%2BHVa4fVNWS9c4VGJJlpkIO82Gi3rLb2KTtaIuW5cGpZwa08NlysUpO7IeYOcUUoGmJx2QaTBjBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205cd261c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/pictures/catwoman-french-dvdrip-2004-1.jpg

188.114.96.1

200 OK

11 kB

URL GET HTTP/3
www.torrent9.zone/pictures/catwoman-french-dvdrip-2004-1.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 160x213, components 3
Size
11 kB (11080 bytes)
Hash
a77f9d0377250c291b4d331be4393a5c
82a7dad6c6dc74dc825653f892c51a8133dd4993
e976cccef7c792b7c5c13335fc3c3448fcfbb44425f6d97947b46aab41352b3d

HTTP Headers

GET /pictures/catwoman-french-dvdrip-2004-1.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: image/jpeg
content-length: 11080
last-modified: Mon, 17 Dec 2018 03:10:55 GMT
etag: "5c1713bf-2b48"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yWuG0q0%2B7PHkJf0ANa7w7ssWs%2BxA0%2BN00An0IzOc%2FMOc2TWa4RV%2FV2CEp8j9Y09kVnCvEHA3Fg%2BA7eFBLP0wVkMN4TwvrjMFQYl0N%2BehR9ZHWcafl12hLOa7CjY8A5Y47mYTGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205cd291c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/pictures/agents-presque-secrets-french-bluray-1080p-2016.jpg

188.114.96.1

200 OK

24 kB

URL GET HTTP/3
www.torrent9.zone/pictures/agents-presque-secrets-french-bluray-1080p-2016.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 250x336, components 3
Size
24 kB (24154 bytes)
Hash
6af8872deb3f36851b549f00b4dca1e7
e0c5f2d09cbf17867fbf2672ab64efe240017d63
82cb8999f74b994781d5a793cd2d79378a14ceac318c99a4ca10800556233714

HTTP Headers

GET /pictures/agents-presque-secrets-french-bluray-1080p-2016.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:13 GMT
content-type: image/jpeg
content-length: 24154
last-modified: Mon, 11 Nov 2019 05:32:54 GMT
etag: "5dc8f286-5e5a"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eTrsH%2BgTGkmYzpabgb0%2FX8BwBs56QQziue5q3M2GWxhVwNT1GXyVKL825MaDhQS5Js0j2nYKPaw3j01Xr%2FQ2G1P2F%2BX3A5vdxUKIWXHlYmOxpJYxHnRV8QgTl7FGmh5bc03g2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205cd271c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/pictures/expendables-4-truefrench-webrip-x264-2023.jpg

188.114.96.1

200 OK

67 kB

URL GET HTTP/3
www.torrent9.zone/pictures/expendables-4-truefrench-webrip-x264-2023.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 375x500, components 3
Size
67 kB (67401 bytes)
Hash
c48a95268bfe9e922fd3b6916b6dc8bf
00a59dff3d1017725887df9158cf6951e1d45556
316b076ed4cc17d540c7924d3ffa6d5ed4c6808f5f247e9888052452caf790ba

HTTP Headers

GET /pictures/expendables-4-truefrench-webrip-x264-2023.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:13 GMT
content-type: image/jpeg
content-length: 67401
last-modified: Wed, 13 Mar 2024 01:39:00 GMT
etag: "65f103b4-10749"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xw%2F5NAQ9ZZ%2B%2BWEsmhx1VHZIUri8qNmC4icHLMLk8B2HJ3iyxX%2Fad56Yblug9%2BVwOA%2FoXu06W2lKwVgx2mh9aCSjUheabPejETZhK%2B2I0e1OW9%2FdNoVnRV1DfE%2FuE2QXzi6O6Hw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205bd161c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/pictures/marabout-ch-ri-french-webrip-1080p-2023.jpg

188.114.96.1

200 OK

62 kB

URL GET HTTP/3
www.torrent9.zone/pictures/marabout-ch-ri-french-webrip-1080p-2023.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 338x600, Scaling: [none]x[none], YUV color, decoders should clamp
Size
62 kB (62090 bytes)
Hash
1024cfaa5b7bd1238b9845c362be4ebc
44d6756d7ba1a80c8b3803981e74a3c219c90057
c109799950b24d46c30534ab6a0d28d9079dc3443cc32464fd08b191aa62c653

HTTP Headers

GET /pictures/marabout-ch-ri-french-webrip-1080p-2023.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:13 GMT
content-type: image/jpeg
content-length: 62090
last-modified: Wed, 24 Apr 2024 18:21:09 GMT
etag: "66294d95-f28a"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=So6%2BfpBqlZBW%2B9Vd6WBtzKvgRUFFTnlKtj0wQETtzBQPvTxNWlm4uxzyokprefnk8AK5QkGU2yUHVlW51IQ0IV9ZcUX365vORLQUflm94JvH5VvO5bBFjXfuBTqH3VWIPfTPZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205cd2b1c12-OSL
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,900,700italic,900italic

142.250.74.106

200 OK

20 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,900,700italic,900italic
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
20 kB (20026 bytes)
Hash
21f23323378738f517cd12a172f650d7
241ba177c5843f14ab8b4cf1d3d9dcbfc5dabb22
46b68bac331a807084d202f9862a8275d3496cb2ba8e425c0ae32c0e3af5b18f

HTTP Headers

GET /css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,900,700italic,900italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 07:22:13 GMT
date: Fri, 26 Apr 2024 07:22:13 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

growingcastselling.com/0a/28/f8/0a28f8710818e4ad7bd49449271ac86d.js

192.243.61.227

200 OK

31 kB

URL GET HTTP/1.1
growingcastselling.com/0a/28/f8/0a28f8710818e4ad7bd49449271ac86d.js
IP
192.243.61.227:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectgrowingcastselling.com
Fingerprint3E:B6:D3:62:BC:57:AD:19:9E:FA:67:C4:B3:FA:10:7C:98:4A:71:2B
ValidityThu, 18 Apr 2024 13:01:11 GMT - Wed, 17 Jul 2024 13:01:10 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
31 kB (30740 bytes)
Hash
4fb8f9fceccba1f31dd6f671317f5388
5ea2b515e3f36aa2f53651676a1b2a120d780d81
b4006cfbb2ce533ace42f3fbc6790cfe4cbe308c9078c0ef53f92e7cc65dce5a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0a/28/f8/0a28f8710818e4ad7bd49449271ac86d.js HTTP/1.1
Host: growingcastselling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 07:22:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fb34706434b8c9e1482f3bc0a3b5307c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:02:10 GMT
expires: Sat, 26 Apr 2025 06:02:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 4803
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

growingcastselling.com/31/97/48/319748c93a446801f4d1c7986a0977aa.js

192.243.61.227

200 OK

16 kB

URL GET HTTP/1.1
growingcastselling.com/31/97/48/319748c93a446801f4d1c7986a0977aa.js
IP
192.243.61.227:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectgrowingcastselling.com
Fingerprint3E:B6:D3:62:BC:57:AD:19:9E:FA:67:C4:B3:FA:10:7C:98:4A:71:2B
ValidityThu, 18 Apr 2024 13:01:11 GMT - Wed, 17 Jul 2024 13:01:10 GMT

File type
JavaScript source, ASCII text, with very long lines (44042), with no line terminators
Size
16 kB (15811 bytes)
Hash
1617523e38aa2d0a1f5abb20e7443e98
bde87ab621c156005adf5481ed04ebbb99a59e3d
e0d9535ba92b54c37037b59d96f1fe1518c7d2f160e846e1a920beaf46e394db

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /31/97/48/319748c93a446801f4d1c7986a0977aa.js HTTP/1.1
Host: growingcastselling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 07:22:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 57e553856b38f042dd3aa5ac26622271
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Size
16 kB (15920 bytes)
Hash
3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:04:59 GMT
expires: Sat, 26 Apr 2025 06:04:59 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 4634
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15740, version 1.0
Size
16 kB (15740 bytes)
Hash
b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:32:46 GMT
expires: Fri, 25 Apr 2025 02:32:46 GMT
cache-control: public, max-age=31536000
age: 103767
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:55:49 GMT
expires: Sat, 26 Apr 2025 05:55:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 5184
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

proftrafficcounter.com/stats

35.158.46.84

200 OK

40 B

URL GET HTTP/2
proftrafficcounter.com/stats
IP
35.158.46.84:443
ASN
#16509 AMAZON-02

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
366dea35b3e320cd3aab214f5dc748e8
fa525772b71e81d93797c725af0194e71397374e
1c9cf21e83c9de21c3711e42017fe17140cc64cb68b836e6baa11c8331657678

HTTP Headers

GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:13 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.torrent9.zone
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=bd650cf9-4114-4064-bc6a-847d1c1ab5b4:3:1; expires=Mon, 24 Apr 2034 07:22:13 GMT; secure; SameSite=None
X-Firefox-Spdy: h2

proftrafficcounter.com/stats

35.158.46.84

200 OK

40 B

URL GET HTTP/2
proftrafficcounter.com/stats
IP
35.158.46.84:443
ASN
#16509 AMAZON-02

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
d7bae7d03d2b90bbafcb0613d777af45
2a9a8eca1f5c3c4e95f99b411f801049e79b8be3
8dadd92383fc233ab8d469e59fcc3419f135d543134c6bf8cea17b469d8e8c35

HTTP Headers

GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:13 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.torrent9.zone
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=4d6c2035-42dc-42df-894d-23be2a0fad12:3:1; expires=Mon, 24 Apr 2034 07:22:13 GMT; secure; SameSite=None
X-Firefox-Spdy: h2

www.torrent9.zone/static/fonts/fontawesome-webfont.woff2?v=4.4.0

188.114.96.1

200 OK

64 kB

URL GET HTTP/3
www.torrent9.zone/static/fonts/fontawesome-webfont.woff2?v=4.4.0
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 64464, version 4.262
Size
64 kB (64464 bytes)
Hash
4b5a84aaf1c9485e060c503a0ff8cadb
574ea2698c03ae9477db2ea3baf460ee32f1a7ea
3c4a1bb7ce3234407184f0d80cc4dec075e4ad616b44dcc5778e1cfb1bc24019

HTTP Headers

GET /static/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/static/css/font.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:13 GMT
content-type: font/woff2
content-length: 64464
last-modified: Thu, 04 Nov 2021 11:36:44 GMT
etag: "6183c5cc-fbd0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sm7PKQBxWxZoDi0ghD2R0gdcMQwqzhl%2FrwdFyQH7HnvyTRXRQ6ub8uBor69MdJpnIUYEPdKDxrVASh3%2Fsltc%2BcWu2nkNtZr3XPHth1wMmgLET%2FM9jGDOEpl1uv%2BAJhYYHc2siA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d2095f471c12-OSL
alt-svc: h3=":443"; ma=86400

pitcharduous.com/pixel/purst?dl=0&th=0&sc=0&rs=1168&rd=1168&fd=687&bv=24.4.3467&tmpl=70

192.243.59.20

200 OK

0 B

URL GET HTTP/1.1
pitcharduous.com/pixel/purst?dl=0&th=0&sc=0&rs=1168&rd=1168&fd=687&bv=24.4.3467&tmpl=70
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectpitcharduous.com
FingerprintB7:A9:03:D9:BE:DA:FD:83:BE:22:88:EA:97:99:53:DF:79:CE:AB:84
ValidityWed, 24 Apr 2024 14:52:37 GMT - Tue, 23 Jul 2024 14:52:36 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/purst?dl=0&th=0&sc=0&rs=1168&rd=1168&fd=687&bv=24.4.3467&tmpl=70 HTTP/1.1
Host: pitcharduous.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 07:22:14 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

capaciousdrewreligion.com/advertisers.js

192.243.61.227

200 OK

0 B

URL GET HTTP/1.1
capaciousdrewreligion.com/advertisers.js
IP
192.243.61.227:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectcapaciousdrewreligion.com
Fingerprint53:B6:ED:C6:B5:B6:60:3E:6D:02:5A:92:2E:C3:12:74:64:A1:23:DC
ValidityWed, 06 Mar 2024 11:57:32 GMT - Tue, 04 Jun 2024 11:57:31 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 07:22:14 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4815b86bbe06003fbf3935fe2e1e5f6f
Strict-Transport-Security: max-age=0; includeSubdomains

constructbrought.com/sbar.json?key=319748c93a446801f4d1c7986a0977aa&uuid=4d6c2035-42dc-42df-894d-23be2a0fad12%3A3%3A1

192.243.59.12

200 OK

8.2 kB

URL GET HTTP/1.1
constructbrought.com/sbar.json?key=319748c93a446801f4d1c7986a0977aa&uuid=4d6c2035-42dc-42df-894d-23be2a0fad12%3A3%3A1
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectconstructbrought.com
Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C
ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT

File type
JSON text data
Size
8.2 kB (8228 bytes)
Hash
9878e904143d09e0622672a42c976d89
3b6ff240f5b9202fc951884273dc99504f2b2873
e0ced6c74e62a5df61161a0987461bf8e9177ffd644c4adfc079fdc71b9152f3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /sbar.json?key=319748c93a446801f4d1c7986a0977aa&uuid=4d6c2035-42dc-42df-894d-23be2a0fad12%3A3%3A1 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 07:22:14 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.torrent9.zone
Access-Control-Allow-Origin: https://www.torrent9.zone
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17908187; expires=Sat, 27 Apr 2024 07:22:14 GMT; secure; SameSite=None
uid_id2=4d6c2035-42dc-42df-894d-23be2a0fad12:3:1; expires=Fri, 03 May 2024 07:22:14 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 27 Apr 2024 07:22:14 GMT; secure; SameSite=None
uncs=1; expires=Sat, 27 Apr 2024 07:22:14 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sat, 27 Apr 2024 07:22:14 GMT; secure; SameSite=None
uncs29=1; expires=Sat, 27 Apr 2024 07:22:14 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e73a1edec01133ed508a76a0dd59f03a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

constructbrought.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2scVRx%2Fk8aTIDT0VoU9iFQ0m5nZyeyuPdTGGAnGprT1x03evDezeebNvOG9eTubnIIF6XHpxZMw%2BWzSoC3SXgsW2RQ8BISspyDm4n%2Bg0KPIrour38P3x3w%2BA5%2F3%2BX6%2F2rfnxIelZ6sfqV0hJV1arru1K5953tXahshsr9ZrhZ%2BHwdWa7r7TDuvum7UPYratlnzXc13P9WprQseJ6i2NQYj8Udurt9164Ne95QA9%2Ff%2FZWAeGOuDdc7IAwUfzz51LEGyILH28GpvtQuVvv59aSQul0eVHH2fbmSozpLM20Q6S7GjKhjKna8%2BgssOJXKjuv8RIjIjz0zNE2dFUJKLuwURnJBFniPjLKLtDxHIIQYdg6i4EPyUA47ixiSx9cEPpku78g9IxOiLzL%2F6EKEdk%2FrdLyNLvV6To1W4raQuhMoNeUkH0hhCdIXJ7jGJ3DqI8Biu%2BhOA%2Fk6UXG8jSg00jFQQ%2Fez3gIfPdxvJi4HM2Tsliqx3wRb8RxT51E8o9f2KQEEOIZAgZ90HNBVjjwAoHNnFgcwcpP6sxz%2FOaLmfUbbUZa%2FBmHIXc9Wgz8ajnhi1YNn5DH0XeB5N9ML2HXO9hW9w%2FXV44Dd6Ftj%2FCbFUw3IEpCLq8QhkTlIagpASlICgLgrJbHXJpfFM94NLYyJtWf1ob1UAVnX16qIpOnBFQ3Yfm1X5%2BTi6ObXQuXv8V2%2FFZreG1m0GLtRs0CMKW6yUB91iz3Qqp2242KYURFYSZAzUOdsWIvPr0G%2BRiRF76%2Bi9E9BhGHoOJBVD7GmhZgW5V2M0eFkrrOCvadZqCqwp5MY9ix9mX5%2BTyZI%2Frm48Rs5NrvzcmAaYr5LrCF%2BI5QUfeG9xSJTm4pUpDnmzmhUjFLh3v%2BHZBi%2FjCdx%2FGO6XSfH3V9L%2B9zsbAuH10JzbFBs24yDqGPFwRnMd6TWkWkx%2FWzadxdNOarRWrM5tv3HxvbT3NdWyMUNkQdHyuf2gwMSKvXL4zOd8rTzch9BDaVkjtCZkGhBqC5Xsw%2BUy%2FUQRazjhR7qC01UD70eyjFAQyns00qmD%2BM0ezfqDp%2BG8qqn1zDx09B1rcRZZW6OoKXVmByj6MvTAocn1y7ZepjEjODSKp5w4iqeX9ic3j9ARGnNWajYZLw%2Fay12zSuBkFfisJPU6pH4R%2BGNIGCjNK3vrkjb8BAAD%2F%2FwEAAP%2F%2F6KvmHJgEAAA%3D

192.243.59.12

200 OK

7 B

URL GET HTTP/1.1
constructbrought.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2scVRx%2Fk8aTIDT0VoU9iFQ0m5nZyeyuPdTGGAnGprT1x03evDezeebNvOG9eTubnIIF6XHpxZMw%2BWzSoC3SXgsW2RQ8BISspyDm4n%2Bg0KPIrour38P3x3w%2BA5%2F3%2BX6%2F2rfnxIelZ6sfqV0hJV1arru1K5953tXahshsr9ZrhZ%2BHwdWa7r7TDuvum7UPYratlnzXc13P9WprQseJ6i2NQYj8Udurt9164Ne95QA9%2Ff%2FZWAeGOuDdc7IAwUfzz51LEGyILH28GpvtQuVvv59aSQul0eVHH2fbmSozpLM20Q6S7GjKhjKna8%2BgssOJXKjuv8RIjIjz0zNE2dFUJKLuwURnJBFniPjLKLtDxHIIQYdg6i4EPyUA47ixiSx9cEPpku78g9IxOiLzL%2F6EKEdk%2FrdLyNLvV6To1W4raQuhMoNeUkH0hhCdIXJ7jGJ3DqI8Biu%2BhOA%2Fk6UXG8jSg00jFQQ%2Fez3gIfPdxvJi4HM2Tsliqx3wRb8RxT51E8o9f2KQEEOIZAgZ90HNBVjjwAoHNnFgcwcpP6sxz%2FOaLmfUbbUZa%2FBmHIXc9Wgz8ajnhi1YNn5DH0XeB5N9ML2HXO9hW9w%2FXV44Dd6Ftj%2FCbFUw3IEpCLq8QhkTlIagpASlICgLgrJbHXJpfFM94NLYyJtWf1ob1UAVnX16qIpOnBFQ3Yfm1X5%2BTi6ObXQuXv8V2%2FFZreG1m0GLtRs0CMKW6yUB91iz3Qqp2242KYURFYSZAzUOdsWIvPr0G%2BRiRF76%2Bi9E9BhGHoOJBVD7GmhZgW5V2M0eFkrrOCvadZqCqwp5MY9ix9mX5%2BTyZI%2Frm48Rs5NrvzcmAaYr5LrCF%2BI5QUfeG9xSJTm4pUpDnmzmhUjFLh3v%2BHZBi%2FjCdx%2FGO6XSfH3V9L%2B9zsbAuH10JzbFBs24yDqGPFwRnMd6TWkWkx%2FWzadxdNOarRWrM5tv3HxvbT3NdWyMUNkQdHyuf2gwMSKvXL4zOd8rTzch9BDaVkjtCZkGhBqC5Xsw%2BUy%2FUQRazjhR7qC01UD70eyjFAQyns00qmD%2BM0ezfqDp%2BG8qqn1zDx09B1rcRZZW6OoKXVmByj6MvTAocn1y7ZepjEjODSKp5w4iqeX9ic3j9ARGnNWajYZLw%2Fay12zSuBkFfisJPU6pH4R%2BGNIGCjNK3vrkjb8BAAD%2F%2FwEAAP%2F%2F6KvmHJgEAAA%3D
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectconstructbrought.com
Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C
ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2scVRx%2Fk8aTIDT0VoU9iFQ0m5nZyeyuPdTGGAnGprT1x03evDezeebNvOG9eTubnIIF6XHpxZMw%2BWzSoC3SXgsW2RQ8BISspyDm4n%2Bg0KPIrour38P3x3w%2BA5%2F3%2BX6%2F2rfnxIelZ6sfqV0hJV1arru1K5953tXahshsr9ZrhZ%2BHwdWa7r7TDuvum7UPYratlnzXc13P9WprQseJ6i2NQYj8Udurt9164Ne95QA9%2Ff%2FZWAeGOuDdc7IAwUfzz51LEGyILH28GpvtQuVvv59aSQul0eVHH2fbmSozpLM20Q6S7GjKhjKna8%2BgssOJXKjuv8RIjIjz0zNE2dFUJKLuwURnJBFniPjLKLtDxHIIQYdg6i4EPyUA47ixiSx9cEPpku78g9IxOiLzL%2F6EKEdk%2FrdLyNLvV6To1W4raQuhMoNeUkH0hhCdIXJ7jGJ3DqI8Biu%2BhOA%2Fk6UXG8jSg00jFQQ%2Fez3gIfPdxvJi4HM2Tsliqx3wRb8RxT51E8o9f2KQEEOIZAgZ90HNBVjjwAoHNnFgcwcpP6sxz%2FOaLmfUbbUZa%2FBmHIXc9Wgz8ajnhi1YNn5DH0XeB5N9ML2HXO9hW9w%2FXV44Dd6Ftj%2FCbFUw3IEpCLq8QhkTlIagpASlICgLgrJbHXJpfFM94NLYyJtWf1ob1UAVnX16qIpOnBFQ3Yfm1X5%2BTi6ObXQuXv8V2%2FFZreG1m0GLtRs0CMKW6yUB91iz3Qqp2242KYURFYSZAzUOdsWIvPr0G%2BRiRF76%2Bi9E9BhGHoOJBVD7GmhZgW5V2M0eFkrrOCvadZqCqwp5MY9ix9mX5%2BTyZI%2Frm48Rs5NrvzcmAaYr5LrCF%2BI5QUfeG9xSJTm4pUpDnmzmhUjFLh3v%2BHZBi%2FjCdx%2FGO6XSfH3V9L%2B9zsbAuH10JzbFBs24yDqGPFwRnMd6TWkWkx%2FWzadxdNOarRWrM5tv3HxvbT3NdWyMUNkQdHyuf2gwMSKvXL4zOd8rTzch9BDaVkjtCZkGhBqC5Xsw%2BUy%2FUQRazjhR7qC01UD70eyjFAQyns00qmD%2BM0ezfqDp%2BG8qqn1zDx09B1rcRZZW6OoKXVmByj6MvTAocn1y7ZepjEjODSKp5w4iqeX9ic3j9ARGnNWajYZLw%2Fay12zSuBkFfisJPU6pH4R%2BGNIGCjNK3vrkjb8BAAD%2F%2FwEAAP%2F%2F6KvmHJgEAAA%3D HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Cookie: u_pl=17908187; uid_id2=4d6c2035-42dc-42df-894d-23be2a0fad12:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 07:22:14 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4997f9300249860bb7c094afe7e35302
Strict-Transport-Security: max-age=0; includeSubdomains

unseenreport.com/pxf.gif?uuid=4d6c2035-42dc-42df-894d-23be2a0fad12&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a28f8710818e4ad7bd49449271ac86d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=7

192.243.59.20

200 OK

1 B

URL GET HTTP/1.1
unseenreport.com/pxf.gif?uuid=4d6c2035-42dc-42df-894d-23be2a0fad12&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a28f8710818e4ad7bd49449271ac86d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=7
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13
ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pxf.gif?uuid=4d6c2035-42dc-42df-894d-23be2a0fad12&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=0a28f8710818e4ad7bd49449271ac86d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=7 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 07:22:14 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d755848f4937b0c2e9c7968ad966a5a6
Strict-Transport-Security: max-age=0; includeSubdomains

unseenreport.com/pxf.gif?uuid=4d6c2035-42dc-42df-894d-23be2a0fad12&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=319748c93a446801f4d1c7986a0977aa&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=7

192.243.59.20

200 OK

1 B

URL GET HTTP/1.1
unseenreport.com/pxf.gif?uuid=4d6c2035-42dc-42df-894d-23be2a0fad12&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=319748c93a446801f4d1c7986a0977aa&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=7
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13
ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pxf.gif?uuid=4d6c2035-42dc-42df-894d-23be2a0fad12&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=319748c93a446801f4d1c7986a0977aa&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=7 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 07:22:14 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 39b811ba309c61f46c2019e48625190f
Strict-Transport-Security: max-age=0; includeSubdomains

constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=129

192.243.59.12

200 OK

0 B

URL GET HTTP/1.1
constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=129
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectconstructbrought.com
Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C
ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=129 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Cookie: u_pl=17908187; uid_id2=4d6c2035-42dc-42df-894d-23be2a0fad12:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 07:22:14 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

cdn.creative-bars1.com/sb/chat/mob/ssp/1/img/close.png

188.114.96.1

200 OK

6.0 kB

URL GET HTTP/2
cdn.creative-bars1.com/sb/chat/mob/ssp/1/img/close.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced
Size
6.0 kB (5982 bytes)
Hash
c489ce2c491a22ee37a55e26a92dfd73
2fa588ab09e94dd902e5bd24b48f98ad1949c9d6
1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd

HTTP Headers

GET /sb/chat/mob/ssp/1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:15 GMT
content-type: image/png
content-length: 5982
last-modified: Mon, 21 Feb 2022 08:25:06 GMT
etag: "62134c62-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 6196139
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JnmplvsmEOR6OylMA9f3xxvS6kE5JtlH9CCm8f%2FpTyQXsDc1yKL4%2F6BYKttBUyyKVTK3PxKg3TOPEyI3IxqqXI4v04teRcNJhZ6y374l3Fc8cBd8QigijQN4G2ODiKjauQEgxVTUp6iW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d2142f0f1c02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.cloudimagesb.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png

45.133.44.10

200 OK

14 kB

URL GET HTTP/2
cdn.cloudimagesb.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png
IP
45.133.44.10:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0
ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
14 kB (14496 bytes)
Hash
962ac416cce3fad636d4904386c8d3d4
811166fceb971353dc6a9ea3a153367f20b47592
ec6c8e1c030499a846897265d0c1f66dedc6ece17c1ea6006b700faf37e73555

HTTP Headers

GET /si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:15 GMT
content-type: image/png
content-length: 14496
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:05:10 GMT
etag: "656d25c6-38a0"
expires: Sun, 28 Apr 2024 07:22:15 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=346

192.243.59.12

200 OK

0 B

URL GET HTTP/1.1
constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=346
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectconstructbrought.com
Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C
ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=346 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Cookie: u_pl=17908187; uid_id2=4d6c2035-42dc-42df-894d-23be2a0fad12:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 07:22:15 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=351

192.243.59.12

200 OK

0 B

URL GET HTTP/1.1
constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=351
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectconstructbrought.com
Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C
ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=351 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Cookie: u_pl=17908187; uid_id2=4d6c2035-42dc-42df-894d-23be2a0fad12:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 07:22:15 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/script.js

188.114.96.1

200 OK

183 B

URL GET HTTP/2
cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/script.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
ASCII text
Size
183 B (183 bytes)
Hash
4f5f05ab032dd8fc0db448fcf51a35e2
78f94f93fdb792d95ea3ac293ac1b8e3bc13d609
7fd8e9c0e5ca0c7123954a109fa8b7e8368c7e1262880925e2ac7b8c877a9e38

HTTP Headers

GET /sb/chat/mob/ssp/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:15 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 08:25:08 GMT
etag: W/"62134c64-17e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DmbPQiT90U6tWnbmQXOWL%2F79F2RQ33LjrCqNd7f7fMGYxHLmqLlWJOKRYqzq2OkNlYmULzFRFwo3kfVXNeKRzDPilx3Dn1Um2Hdesn%2Bf6I4oz40ddCQXyttiI5sPgeKL9LWSQSuA9btO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d214bf441c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:02:10 GMT
expires: Sat, 26 Apr 2025 06:02:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 4805
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:55:49 GMT
expires: Sat, 26 Apr 2025 05:55:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 5186
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap

142.250.74.106

200 OK

724 B

URL GET HTTP/3
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
724 B (724 bytes)
Hash
e949f107146f80ef61a5f3d3a8ba72c3
135706ca8eceb5af199775e7827468377051e1c6
e211d6a233a3d6a04d6f4b079c172917eca909259edd7399eeebfb1098059640

HTTP Headers

GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 07:22:15 GMT
date: Fri, 26 Apr 2024 07:22:15 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

constructbrought.com/pixel/sbs?c=1

192.243.59.20

200 OK

0 B

URL GET HTTP/1.1
constructbrought.com/pixel/sbs?c=1
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectconstructbrought.com
Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C
ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/sbs?c=1 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Cookie: u_pl=17908187; uid_id2=4d6c2035-42dc-42df-894d-23be2a0fad12:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 07:22:16 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

cdn.barscreative1.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html

45.133.44.4

200 OK

8.7 kB

URL GET HTTP/2
cdn.barscreative1.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html
IP
45.133.44.4:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectcdn.barscreative1.com
FingerprintF6:54:F4:B9:EB:AD:1E:FA:8F:76:B9:75:20:9B:41:57:32:37:94:E3
ValiditySun, 10 Mar 2024 03:01:32 GMT - Sat, 08 Jun 2024 03:01:31 GMT

File type
gzip compressed data, from Unix
Size
8.7 kB (8672 bytes)
Hash
ed86d8ae3422a3f60897eafb9787dfe6
f643a1d33cc56bf2f4fb373e3cad19803ca4a014
d296a80e5e67f83a0447a84f148ba1cdcc6e0582cd4c52aaa3e35380c63eebfd

HTTP Headers

GET /sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:14 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Tue, 29 Mar 2022 08:27:42 GMT
etag: W/"6242c2fe-ba1"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Fri, 26 Apr 2024 08:22:14 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2

www.torrent9.zone/static/css/style.css

188.114.96.1

200 OK

14 kB

URL GET HTTP/3
www.torrent9.zone/static/css/style.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type

Size
14 kB (14415 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/css/style.css HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: text/css
last-modified: Thu, 04 Nov 2021 11:36:44 GMT
vary: Accept-Encoding
etag: W/"6183c5cc-384f"
expires: Fri, 26 Apr 2024 19:22:12 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sepiNAIN76PIBNfoQ7sToPvrnEMyEKhGivXx%2FoizFB7C4DIjauMgaNe%2BJsI4HHSUZCGAa8xiu3eOKAVFJ8ACytFO0%2FbA4Yqhy7CNWRAg4uHxXQDQPt7VS20T5vaU1VE4Nhd8vg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4d205bd101c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/static/js/jquery.min.js

188.114.96.1

200 OK

84 kB

URL GET HTTP/3
www.torrent9.zone/static/js/jquery.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JavaScript source, ASCII text, with very long lines (32025)
Size
84 kB (84342 bytes)
Hash
17c3a750efea704d11c89af19b55acce
f615c64532bd36a6dd88e2a431981056610ef3c5
e6beec2519e679d8fa41d0d426cb9f4e4f95ad85501866a1d1a4611e912c4242

HTTP Headers

GET /static/js/jquery.min.js HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: application/javascript
last-modified: Thu, 04 Nov 2021 11:36:44 GMT
vary: Accept-Encoding
etag: W/"6183c5cc-14976"
expires: Fri, 26 Apr 2024 08:29:04 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 39188
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4GtxV3zaytvD%2FsgkSQ7HKMtgZ5emWKSk2DWsr37OB%2B5EYuhjmL2Ks8Ha0h1UU%2FbFZusf7%2FA%2B8EFcJrRTfudV%2FfgakNtWRyLAWTeciuVP2JTatL447LbMq%2FgyscmVWiH8N1TOBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4d205cd2d1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/favicon.ico

188.114.96.1

200 OK

5.4 kB

URL GET HTTP/3
www.torrent9.zone/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
5.4 kB (5430 bytes)
Hash
0a272e030eabb4ea50a336f6511238a3
a6c3a4142b725bae4dc92c9d977a92a33a33fa27
4a1a08e0691c3407efab0b54a76cadcb0b22de5a969df800eff895745c0d2657

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=4d6c2035-42dc-42df-894d-23be2a0fad12%3A3%3A1; pp_main_0a28f8710818e4ad7bd49449271ac86d=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:14 GMT
content-type: image/x-icon
last-modified: Wed, 29 Aug 2018 09:35:51 GMT
etag: W/"5b8668f7-1536"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=glZlA6D%2F2wET2KaykUic8yFy%2FA4H8nW07PXl2MDIT1oAX8UScFe%2BKD34KRhWyPiPxVZSWr25wXthrRZSK4irA2pYc42G7AL8nnM5bTnOkJ4i7WwBk0Om6oxvfoP2PP3mPGIPog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d20d79ba1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

constructbrought.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRit3qwnQUjILQpzEIloZrtnen6ZQ8y6riyu2ZDEHzeprqqeLbe6q6nqmp7d02JAchxy8ST0vtnNogmSXAMGmQ14WBB2PC3iXvwPFHIUmXFw9Dt8P%2Fq9hlfv%2B77ac2ekBkdPVz7SO1IputSo%2BpXLnwXB1cq6TF2%2F0m83P2%2BGVyum906nWfXfrHwg2JZeqvmB7wd%2BUFmVRsS6vzQBIbNHnaDa8athrRo0QvTN%2F2frPFjqgffOyAVIPl587l2EZCOkyeMVYbdynb39fuIUzbVBjx9%2BnG6lukiRzNvYeIjTwxkb2p6sPoNOD6ZyoXv%2FEiM5Jt5PzxClhzORiHr7U52RgkgR8ZdR9EYQagRJR2D6LiQ%2FIQDjuLGBNHlwQ5uCbv%2BD0gk6Josv%2FoQsxmTxt4tIk%2B%2BXlexXbmvlcqlTi35cQvZHkN0RMneEfGcBsjgCy7%2BE5D%2BTpRfrSJP9Das0JD99PeRNVvPrjSthjbNJiq%2B0OyG%2FUqtHokb9mPKgNjVIyhFkPIISA1B7Ds56cNKDiz24zEPCTyssCIKWzxn12x3G6rwloib3A9qKAxr4zTYcm7xhgDwbgKkBmNlFZnaxJe%2BfNC6chO%2FCuB9hN0tY7sHmBD1eohAEhSUoKEEhCYqcoOiVB1zZmi0fcGVdFMxqbVbr5VDn3T16oPOuSAmoGcDwci87I%2BcnNnrnr%2F%2BKLXFaqQedVthmnToNw2bbD%2BKQB6zVaTep32m1KIWVJaRdALUeduSYvPr0G2RyTF76%2Bi9E9AhWHYHJC6DuNdCiBN0ssZM%2BzLUxIs07VZqA6xJZvoh829tTZ%2BTSdI9rG48h2PG13%2BvTADMlMlPiC%2FmcoKvuDW%2Fpguzf0oUlTzayXCZyh052fDunuTj33Ydiu9CGr63YwbfX2QSYtI%2FuCJuv05TLtGvJw2XJuTCr2jBBflizn4roprOby86kLlu%2F%2Bd7qWpIZYa3U6Qh0cq5%2FGDA5Jq9cujM938tPNyDNCMaVSNwxmQWkHoFlu7DZXL%2FVBEbNOVHmoXDl0NSi%2BUclCZSYzzQqYf8zR%2FN%2BaOjkbyrLPXsPXbMAmt9FmpTomRI9VYKqAaw7N8wzc3ztl5mMSC0MI2UW9iNl1P2pzZP0BFaeVuo%2Bb0UiFq1IhI0wFoxHjUbks5hFdd5uM%2BR2HL%2F1yRt%2FAwAA%2F%2F8BAAD%2F%2F2h%2FM%2FSYBAAA

192.243.59.12

200 OK

0 B

URL GET HTTP/1.1
constructbrought.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRit3qwnQUjILQpzEIloZrtnen6ZQ8y6riyu2ZDEHzeprqqeLbe6q6nqmp7d02JAchxy8ST0vtnNogmSXAMGmQ14WBB2PC3iXvwPFHIUmXFw9Dt8P%2Fq9hlfv%2B77ac2ekBkdPVz7SO1IputSo%2BpXLnwXB1cq6TF2%2F0m83P2%2BGVyum906nWfXfrHwg2JZeqvmB7wd%2BUFmVRsS6vzQBIbNHnaDa8athrRo0QvTN%2F2frPFjqgffOyAVIPl587l2EZCOkyeMVYbdynb39fuIUzbVBjx9%2BnG6lukiRzNvYeIjTwxkb2p6sPoNOD6ZyoXv%2FEiM5Jt5PzxClhzORiHr7U52RgkgR8ZdR9EYQagRJR2D6LiQ%2FIQDjuLGBNHlwQ5uCbv%2BD0gk6Josv%2FoQsxmTxt4tIk%2B%2BXlexXbmvlcqlTi35cQvZHkN0RMneEfGcBsjgCy7%2BE5D%2BTpRfrSJP9Das0JD99PeRNVvPrjSthjbNJiq%2B0OyG%2FUqtHokb9mPKgNjVIyhFkPIISA1B7Ds56cNKDiz24zEPCTyssCIKWzxn12x3G6rwloib3A9qKAxr4zTYcm7xhgDwbgKkBmNlFZnaxJe%2BfNC6chO%2FCuB9hN0tY7sHmBD1eohAEhSUoKEEhCYqcoOiVB1zZmi0fcGVdFMxqbVbr5VDn3T16oPOuSAmoGcDwci87I%2BcnNnrnr%2F%2BKLXFaqQedVthmnToNw2bbD%2BKQB6zVaTep32m1KIWVJaRdALUeduSYvPr0G2RyTF76%2Bi9E9AhWHYHJC6DuNdCiBN0ssZM%2BzLUxIs07VZqA6xJZvoh829tTZ%2BTSdI9rG48h2PG13%2BvTADMlMlPiC%2FmcoKvuDW%2Fpguzf0oUlTzayXCZyh052fDunuTj33Ydiu9CGr63YwbfX2QSYtI%2FuCJuv05TLtGvJw2XJuTCr2jBBflizn4roprOby86kLlu%2F%2Bd7qWpIZYa3U6Qh0cq5%2FGDA5Jq9cujM938tPNyDNCMaVSNwxmQWkHoFlu7DZXL%2FVBEbNOVHmoXDl0NSi%2BUclCZSYzzQqYf8zR%2FN%2BaOjkbyrLPXsPXbMAmt9FmpTomRI9VYKqAaw7N8wzc3ztl5mMSC0MI2UW9iNl1P2pzZP0BFaeVuo%2Bb0UiFq1IhI0wFoxHjUbks5hFdd5uM%2BR2HL%2F1yRt%2FAwAA%2F%2F8BAAD%2F%2F2h%2FM%2FSYBAAA
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectconstructbrought.com
Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C
ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRit3qwnQUjILQpzEIloZrtnen6ZQ8y6riyu2ZDEHzeprqqeLbe6q6nqmp7d02JAchxy8ST0vtnNogmSXAMGmQ14WBB2PC3iXvwPFHIUmXFw9Dt8P%2Fq9hlfv%2B77ac2ekBkdPVz7SO1IputSo%2BpXLnwXB1cq6TF2%2F0m83P2%2BGVyum906nWfXfrHwg2JZeqvmB7wd%2BUFmVRsS6vzQBIbNHnaDa8athrRo0QvTN%2F2frPFjqgffOyAVIPl587l2EZCOkyeMVYbdynb39fuIUzbVBjx9%2BnG6lukiRzNvYeIjTwxkb2p6sPoNOD6ZyoXv%2FEiM5Jt5PzxClhzORiHr7U52RgkgR8ZdR9EYQagRJR2D6LiQ%2FIQDjuLGBNHlwQ5uCbv%2BD0gk6Josv%2FoQsxmTxt4tIk%2B%2BXlexXbmvlcqlTi35cQvZHkN0RMneEfGcBsjgCy7%2BE5D%2BTpRfrSJP9Das0JD99PeRNVvPrjSthjbNJiq%2B0OyG%2FUqtHokb9mPKgNjVIyhFkPIISA1B7Ds56cNKDiz24zEPCTyssCIKWzxn12x3G6rwloib3A9qKAxr4zTYcm7xhgDwbgKkBmNlFZnaxJe%2BfNC6chO%2FCuB9hN0tY7sHmBD1eohAEhSUoKEEhCYqcoOiVB1zZmi0fcGVdFMxqbVbr5VDn3T16oPOuSAmoGcDwci87I%2BcnNnrnr%2F%2BKLXFaqQedVthmnToNw2bbD%2BKQB6zVaTep32m1KIWVJaRdALUeduSYvPr0G2RyTF76%2Bi9E9AhWHYHJC6DuNdCiBN0ssZM%2BzLUxIs07VZqA6xJZvoh829tTZ%2BTSdI9rG48h2PG13%2BvTADMlMlPiC%2FmcoKvuDW%2Fpguzf0oUlTzayXCZyh052fDunuTj33Ydiu9CGr63YwbfX2QSYtI%2FuCJuv05TLtGvJw2XJuTCr2jBBflizn4roprOby86kLlu%2F%2Bd7qWpIZYa3U6Qh0cq5%2FGDA5Jq9cujM938tPNyDNCMaVSNwxmQWkHoFlu7DZXL%2FVBEbNOVHmoXDl0NSi%2BUclCZSYzzQqYf8zR%2FN%2BaOjkbyrLPXsPXbMAmt9FmpTomRI9VYKqAaw7N8wzc3ztl5mMSC0MI2UW9iNl1P2pzZP0BFaeVuo%2Bb0UiFq1IhI0wFoxHjUbks5hFdd5uM%2BR2HL%2F1yRt%2FAwAA%2F%2F8BAAD%2F%2F2h%2FM%2FSYBAAA HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Cookie: u_pl=17908187; uid_id2=4d6c2035-42dc-42df-894d-23be2a0fad12:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 07:22:16 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bde83770af053014b72fc89e875c3717
Strict-Transport-Security: max-age=0; includeSubdomains

www.torrent9.zone/static/css/bootstrap.min.css

188.114.96.1

200 OK

122 kB

URL GET HTTP/3
www.torrent9.zone/static/css/bootstrap.min.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
ASCII text, with very long lines (65371)
Size
122 kB (122540 bytes)
Hash
5d5357cb3704e1f43a1f5bfed2aebf42
08df9a96752852f2cbd310c30facd934e348c2c5
31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87

HTTP Headers

GET /static/css/bootstrap.min.css HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:13 GMT
content-type: text/css
last-modified: Thu, 04 Nov 2021 11:36:44 GMT
vary: Accept-Encoding
etag: W/"6183c5cc-1deac"
expires: Fri, 26 Apr 2024 19:22:12 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WfZv3ognv47SpR1QYpks%2BkaJE8tK8JGPME9Zg60iD6K9yFAYAsZSm%2F2TmnrrzB%2Fz%2F1QPP5feNRr2sq8BSU9w0Xfvpj1WOS3ybB6lGvRVSnAFf%2BkPAzQjtYfwNf6duc7mOY3U%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4d205bd0e1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downstairsnegotiatebarren.com/sfp.js

104.21.35.227

200 OK

86 kB

URL GET HTTP/2
downstairsnegotiatebarren.com/sfp.js
IP
104.21.35.227:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectdownstairsnegotiatebarren.com
Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44
ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT

File type

Size
86 kB (85611 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:13 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 677183b00a892b3fb117647b863fd63a
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: STALE
age: 1
last-modified: Fri, 26 Apr 2024 07:22:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xrpBJkCLAPRnvQDMQYt7I7HFBk3e6YiIJI3AYrOfEdmq368eDQByHSC2IE7sI4VJ6hFS2ceuRdgdVzPm3uQDlbcHuc%2Fc9AYULhn1%2FnXvi6XVt59BygZtLxeBcSgubNVIA8weEtntDm6pzArj7QLjgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d20af8f0b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=305

192.243.59.12

200 OK

0 B

URL GET HTTP/1.1
constructbrought.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=305
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectconstructbrought.com
Fingerprint53:AF:08:11:E0:E0:18:FA:8A:82:83:16:B7:C2:3D:C1:13:AC:4B:5C
ValidityWed, 24 Apr 2024 15:05:23 GMT - Tue, 23 Jul 2024 15:05:22 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=305 HTTP/1.1
Host: constructbrought.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Cookie: u_pl=17908187; uid_id2=4d6c2035-42dc-42df-894d-23be2a0fad12:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 07:22:15 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

www.torrent9.zone/static/css/css_style.css

188.114.96.1

200 OK

6.7 kB

URL GET HTTP/3
www.torrent9.zone/static/css/css_style.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
ASCII text, with very long lines (7006), with no line terminators
Size
6.7 kB (6670 bytes)
Hash
fe78aa50bdcf544acca70ab5d08dd152
b92dcf2a49de4682cadb9ce84d357870b5ed3951
c6d18d26d8228a13609db0ef0ab6e47a923ce7c00967a633932e08b672c42765

HTTP Headers

GET /static/css/css_style.css HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: text/css
last-modified: Thu, 04 Nov 2021 11:36:44 GMT
vary: Accept-Encoding
etag: W/"6183c5cc-1a0e"
expires: Fri, 26 Apr 2024 19:22:12 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yCP1s02czofoip8K7YFC%2BnwJZVSYccGvmkYxfukwR8OEFzbzb4dSc8NnBapTooJ%2BsfUiNdJBrBAfDAh1mmhUWLeDQOWSHXh4JhQhGlalggWE4vqOGGDB59ZUJOUMC0mXlqkMiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4d205bd0c1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/style.css

188.114.96.1

200 OK

4.6 kB

URL GET HTTP/2
cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/style.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
ASCII text, with very long lines (4886), with no line terminators
Size
4.6 kB (4617 bytes)
Hash
1230b98f01a549572edcd2bf3bdcb4ad
ac87a2a752ffb8b5167566183fddd531d7971be9
9a2954fc66ebbb9adf18c2ea4403d2a0a5dedf2928f9905e1fc656f5dc1b208d

HTTP Headers

GET /sb/chat/mob/ssp/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:15 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 08:25:04 GMT
etag: W/"62134c60-1209"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wptLcOoRwqVrTXkNbRLVoUakX2Owxv5Fjm7oQC%2FF3b0KfmIVx633rZ9KOhFftAuPRhELeFWtzzNzEZgjyt1bWIT2nsGAF0txOl5T8aBN%2BXUWQXkejKiWHgpHZpWvefEachnEmW%2BbOI4m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d213bedc1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js

188.114.96.1

200 OK

90 kB

URL GET HTTP/2
cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
90 kB (89492 bytes)
Hash
561acb3e541133bbdd2c0c19f8ee35a1
ffd1353cf3f77d25f801c84d8208613eb0d3d548
9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc

HTTP Headers

GET /sb/chat/mob/ssp/1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:15 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 08:25:09 GMT
etag: W/"62134c65-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4926791
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wU%2F9UuyBnJ%2BAcpuqvla%2BWKTEfjjh7%2BDm1IPKWa5S6MNL%2BOzIjKxNmq7EMSSzhVjqrclOHQQNG5CK9ECFbrf9Y3Hab4PaSilL0ppygl4BrX4%2B0gVkPHW6U0YDo16ZwqjVbWJqnCnHiV23"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d2142f141c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/animate.css

188.114.96.1

200 OK

79 kB

URL GET HTTP/2
cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/animate.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13
ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT

File type
ASCII text
Size
79 kB (79313 bytes)
Hash
fc638645a938f69e69360c75335ffd1a
143132fb8361c3ad0acf88cb70bf0b07c0ecc2d4
7ef76aab275d0221c68602d18f81b4285b280756f0f71d535ed8b5b889bc2f90

HTTP Headers

GET /sb/chat/mob/ssp/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrent9.zone
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:15 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 08:25:04 GMT
etag: W/"62134c60-135d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BVB%2BMkWjMk3W98pycnsv5Lu2FBwovspKk1FVv8p45qCrucs1SVBM0TYggOsprrcoMFIBn%2BGU2Ff42tR8Nqe1uqk%2F6wR7EiF62uWAcqI0gTlfYpMlPNDEQoJCymCczVZfA6XznVQzQ%2B8u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d213bee61c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.torrent9.zone/static/css/font.min.css

188.114.96.1

200 OK

27 kB

URL GET HTTP/3
www.torrent9.zone/static/css/font.min.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
ASCII text, with very long lines (26548)
Size
27 kB (26711 bytes)
Hash
0831cba6a670e405168b84aa20798347
05ea25bc9b3ac48993e1fee322d3bc94b49a6e22
936ffccdc35bc55221e669d0e76034af76ba8c080c1b1149144dbbd3b5311829

HTTP Headers

GET /static/css/font.min.css HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: text/css
last-modified: Thu, 04 Nov 2021 11:36:44 GMT
vary: Accept-Encoding
etag: W/"6183c5cc-6857"
expires: Fri, 26 Apr 2024 19:22:12 GMT
cache-control: max-age=43200
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FVkTcbTqOUrWeuNAu6gY2ve%2BlZYvZW0e05pNpeshxZaKCtkcOSLp3iiBWpE2CxztBUt%2BNoN2OgD6H1PTWbaeOhy54ulq%2F3NWItDOf5g96RoinuEfgzr957EFT1S1w4WJVOY9yQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4d205bd0f1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/static/images/header-bg.jpg

188.114.96.1

200 OK

19 kB

URL GET HTTP/3
www.torrent9.zone/static/images/header-bg.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x200, components 3
Size
19 kB (18824 bytes)
Hash
ab8d7b150402556507a5b24c7a01a0c4
c47ef0132fb7b72419489a0b84f994df1f23caeb
df399242c6925169e4d42fcf740168bdb341f34b35d9f182680f5514e33944cd

HTTP Headers

GET /static/images/header-bg.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/static/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:13 GMT
content-type: image/jpeg
content-length: 18824
last-modified: Thu, 04 Nov 2021 11:36:44 GMT
etag: "6183c5cc-4988"
expires: Sat, 25 May 2024 20:29:04 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 39189
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VMpBNGec3RKqcPJ2%2Fwp1bTwhwwuR9K3fTtOlB%2FT%2B1%2FCyaCBYSAAPlRy4grwwlWZofH6QTHfKW4BBnRoW9nmtwHUquZIEO7pCDP2aPWxaCBQNCLwuCWem%2BvyFdEnNHga7zVqBlA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d2095f391c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/pictures/spider-man-no-way-home-french-dvdrip-2021.jpg

188.114.96.1

200 OK

33 kB

URL GET HTTP/3
www.torrent9.zone/pictures/spider-man-no-way-home-french-dvdrip-2021.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 250x375, components 3
Size
33 kB (32726 bytes)
Hash
7a16a5ccf56becf81da262b89c9a3b1c
5f8447547fed90ca2f1079e85bd2f0438c0f2865
dc7fe02f9105ec236e5a65c35c757922b0de771408c864cbad13a8e5204536cf

HTTP Headers

GET /pictures/spider-man-no-way-home-french-dvdrip-2021.jpg HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: image/jpeg
content-length: 32726
last-modified: Sun, 13 Mar 2022 21:17:04 GMT
etag: "622e5f50-7fd6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aZY9leNBb67%2FV7wU5rjme2ZrXK44T%2FcU19qookBlW8%2FrCl4%2FLAehf6CS%2FOGHARkjzR%2BQQt4L6MqwCB93dFV4%2F4q6XXvDkfn3q5Hyb3Y9bcaNAwxJIUpff3F%2Bos29myTDHpUJPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d205bd1c1c12-OSL
alt-svc: h3=":443"; ma=86400

www.torrent9.zone/static/js/bootstrap.min.js

188.114.96.1

200 OK

37 kB

URL GET HTTP/3
www.torrent9.zone/static/js/bootstrap.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjecttorrent9.zone
Fingerprint16:87:B3:04:2D:21:F9:F1:98:A0:D4:14:09:44:79:50:CB:0F:12:40
ValiditySun, 07 Apr 2024 08:19:39 GMT - Sat, 06 Jul 2024 08:19:38 GMT

File type
JavaScript source, ASCII text, with very long lines (32003)
Size
37 kB (36868 bytes)
Hash
c5b5b2fa19bd66ff23211d9f844e0131
791aa054a026bddc0de92bad6cf7a1c6e73713d5
2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a

HTTP Headers

GET /static/js/bootstrap.min.js HTTP/1.1
Host: www.torrent9.zone
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:22:12 GMT
content-type: application/javascript
last-modified: Thu, 04 Nov 2021 11:36:44 GMT
vary: Accept-Encoding
etag: W/"6183c5cc-9004"
expires: Fri, 26 Apr 2024 08:29:04 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 39188
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cw8zbNLRmOkRvcmUeVxOSQqzsl%2F8oufovjbw9Oc0RGW%2FEfGckbYuo7MCb59bvF2HpU6dYF1HX%2BzAJN94gRJUHG05oXHUbk8l4%2FvVYHWDdp6b8G0LA6BbzCS7Au6rTulCV526JA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4d205dd2f1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downstairsnegotiatebarren.com/sfp.js

104.21.35.227

200 OK

86 kB

URL GET HTTP/2
downstairsnegotiatebarren.com/sfp.js
IP
104.21.35.227:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.torrent9.zone/torrent/113368/marabout-ch-ri-french-webrip-1080p-2023
Certificate
IssuerLet's Encrypt
Subjectdownstairsnegotiatebarren.com
Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44
ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT

File type

Size
86 kB (85611 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.torrent9.zone/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:22:13 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 677183b00a892b3fb117647b863fd63a
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: STALE
age: 1
last-modified: Fri, 26 Apr 2024 07:22:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iU3l03mcRJ5k3qjD9vDwbxppd8PBW6sTN1ndE9d3%2F9A8liI1GMXE6%2Fn091UZCevoLl1OSJoOfDerzDY3e8cILo2yqPAkzAiqlNSZDA2RhlTsSo9c28FfbD2ab%2Ff4oc4eSX0wdenkG23f4nccGgy9gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4d20af8ebb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL