Report - limetorrents.skin/download-torrent-44645248

Report Overview

Visited public
2024-06-21 20:40:18
Tags
Submit Tags
URL
limetorrents.skin/download-torrent-44645248
Finishing URL
limetorrents.skin/download-torrent-44645248
IP / ASN
172.67.178.170
#13335 CLOUDFLARENET
Title
Download MariskaX 20 12 12 Olga Love Wants 2 Cocks To Fill Her Tight Holes XXX 480p MP4-XXX [XC] Torrent - LimeTorrents

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
capaciousdrewreligion.com	unknown	2023-11-07	2023-11-27 13:27:45	2024-06-20 18:20:31	416 B	375 B	192.243.59.20
cooperateboneco.com	unknown	2024-02-22	2024-02-22 11:24:22	2024-04-18 11:17:32	442 B	85 kB	192.243.61.227
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-06-20 18:12:07	1.6 kB	4.4 kB	23.36.77.32
imgtraffic.com	unknown	2023-11-30	2023-11-30 17:43:01	2024-04-18 08:50:41	458 B	5.4 kB	104.21.60.233
limetorrents.skin	unknown	unknown	No data	No data	2.9 kB	108 kB	104.21.17.235
proftrafficcounter.com	unknown	2023-11-16	2023-11-21 09:55:14	2024-06-20 22:47:17	435 B	424 B	18.192.184.0
unseenreport.com	unknown	2022-03-30	2022-03-30 16:33:17	2024-06-20 18:20:37	739 B	472 B	192.243.59.20
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2024-06-20 18:36:47	1.0 kB	85 kB	104.17.24.14
cdn.jsdelivr.net	439	2012-05-16	2012-09-30 02:15:09	2024-06-20 18:12:29	419 B	7.5 kB	151.101.65.229
baldappetizingun.com	unknown	2024-06-04	2024-06-04 17:25:05	2024-06-20 20:55:38	488 B	467 B	172.240.108.76
recordedthereby.com	unknown	2024-05-08	2024-05-14 07:24:53	2024-06-20 18:20:29	402 B	28 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-06-21	medium	baldappetizingun.com	Sinkholed
2024-06-21	medium	capaciousdrewreligion.com	Sinkholed
2024-06-21	medium	unseenreport.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	limetorrents.skin/download-torrent-44645248	ScriptElement	429 B	2023-11-17	2025-06-07
Pretty URL limetorrents.skin/download-torrent-44645248 IP 104.21.17.235 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-17 15:41 Last Seen2025-06-07 22:14 Times Seen36 Hash 1e5a6ae3a9483381440e9df0a500d98e 8f5013e29bdb4ad261f7336828e69727ee2edc95 5b109a253ff77101ace27632d34cfe5c6962c2de07b95391a09613824ecb884d Loading...

	cooperateboneco.com/06/44/43/06444360220cd3121ea71b73847bab58.js	ScriptElement	84 kB	2024-08-19	2024-08-19
Pretty URL cooperateboneco.com/06/44/43/06444360220cd3121ea71b73847bab58.js IP 192.243.61.227 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-19 19:15 Last Seen2024-08-19 19:15 Times Seen1 Hash 39f7bdb2b5bdedf84f22c66237fe6a28 ce624fba0f238ca70bd22fe1d403e606bac48ca3 1b1b20154d9341e5112d64cc8a3c560cc0af21023ee49fe8c89f17f7762f2773 Loading...

	capaciousdrewreligion.com/advertisers.js	ScriptElement	0 B	0001-01-01	2025-07-13
Pretty URL capaciousdrewreligion.com/advertisers.js IP 192.243.59.20 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen0001-01-01 00:00 Last Seen2025-07-13 05:47 Times Seen5412323 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	recordedthereby.com/sfp.js	ScriptElement	85 kB	2024-05-17	2025-01-21
Pretty URL recordedthereby.com/sfp.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-17 16:43 Last Seen2025-01-21 11:22 Times Seen13574 Hash 7e3e44049654b6e244c1777e68ffb8e7 8f2a8298666d607afd92a0baa362ef4dc9ccd039 4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b Loading...

	cdn.jsdelivr.net/npm/disable-devtool@latest	ScriptElement	17 kB	2023-12-22	2025-07-09
Pretty URL cdn.jsdelivr.net/npm/disable-devtool@latest IP 151.101.65.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-22 04:40 Last Seen2025-07-09 19:54 Times Seen1113 Hash f71da0117b47fe056c382d44f7c1af53 c384c695d7a74e1e4272b13f9d5942d0f24d099d 2a741550c18b132b0ef573f818fc79d6c09169be71d538b968ceac551c178ad3 Loading...

HTTP Transactions (21)

URL IP Response Size

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
c0fde0756f59aaa5fa85a62f5f528e74
3c2d990e14054ee3b407cc37d77e255533d91ed6
ca44d6619deb0e020993a84c6bfbf1993bf096b13863b706dc8a826499348276

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CA44D6619DEB0E020993A84C6BFBF1993BF096B13863B706DC8A826499348276"
Last-Modified: Wed, 19 Jun 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13458
Expires: Sat, 22 Jun 2024 00:24:10 GMT
Date: Fri, 21 Jun 2024 20:39:52 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
5a3268763aa8247d09e7b12f8a157bb5
fbddec6e9fb707501596ca331266c50e77e23f5b
6095004cca6c22ee09c33dc58574519973f162bb1ee183856ed65675281d551c

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6095004CCA6C22EE09C33DC58574519973F162BB1EE183856ED65675281D551C"
Last-Modified: Wed, 19 Jun 2024 16:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4000
Expires: Fri, 21 Jun 2024 21:46:33 GMT
Date: Fri, 21 Jun 2024 20:39:53 GMT
Connection: keep-alive

GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css

104.17.24.14

200 OK

5.6 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT

File type
ASCII text, with very long lines (30837)
Size
5.6 kB (5631 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 21 Jun 2024 20:39:53 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 80243
expires: Wed, 11 Jun 2025 20:39:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xsxqM5UO7E77J9Ry8JvqC1B1%2FdQ9fDbAvbGdscZ3xKQuouU6QlQHQNo17%2FtO6hsxR7sjuyOblRZQXRUJkGUvmN4tjsgzBksl91pw2EeDNzFImS7%2FWzuxYQDFjxj5ORmGRADtwdIe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8976cf7fcb5eb4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET cdn.jsdelivr.net/npm/disable-devtool@latest

151.101.65.229

200 OK

6.7 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/disable-devtool@latest
IP
151.101.65.229:443
ASN
#54113 FASTLY

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (17245)
Size
6.7 kB (6741 bytes)
Hash
f71da0117b47fe056c382d44f7c1af53
c384c695d7a74e1e4272b13f9d5942d0f24d099d
2a741550c18b132b0ef573f818fc79d6c09169be71d538b968ceac551c178ad3

HTTP Headers

GET /npm/disable-devtool@latest HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.3.7
x-jsd-version-type: version
etag: W/"4372-w4TGldenTh5CcrE/nVlC0PJNCZ0"
content-encoding: br
accept-ranges: bytes
date: Fri, 21 Jun 2024 20:39:53 GMT
age: 12788
x-served-by: cache-fra-eddf8230055-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6741
X-Firefox-Spdy: h2

GET imgtraffic.com/1s/2024/06/21/6675b2193d452.jpeg

104.21.60.233

200 OK

4.7 kB

URL GET HTTP/2
imgtraffic.com/1s/2024/06/21/6675b2193d452.jpeg
IP
104.21.60.233:443
ASN
#13335 CLOUDFLARENET

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subjectimgtraffic.com
Fingerprint5F:E2:7D:F9:E0:03:91:F7:49:25:47:AB:DB:AE:5D:52:BE:4A:77:06
ValiditySat, 25 May 2024 16:09:20 GMT - Fri, 23 Aug 2024 16:09:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 160x90, components 3
Size
4.7 kB (4690 bytes)
Hash
3e3692193e5763df8b11abcb80519017
beb06ae64801d9de492d006803901206aee045b6
f3ec427ccd6e4da3f1ef0e012f4fe5e2320cd87b6176468dd02bae3e92b07260

HTTP Headers

GET /1s/2024/06/21/6675b2193d452.jpeg HTTP/1.1
Host: imgtraffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Jun 2024 20:39:53 GMT
content-type: image/jpeg
content-length: 4690
last-modified: Fri, 21 Jun 2024 17:02:17 GMT
etag: "6675b219-1252"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mG7iFEYfWwPjSpEhxRQOAwTUbUjpSLTIJG2ANr7P7%2Fiz%2FquEvpwZrHj58du6K%2BaUnViygVR547SSmpPKbB2qhc0%2F83wYi023V7KeuNnXOOEaapw68kfQm%2BPH%2B1zSyhwO6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8976cf801bab56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET limetorrents.skin/images/headerbg.png

104.21.17.235

200 OK

139 B

URL GET HTTP/3
limetorrents.skin/images/headerbg.png
IP
104.21.17.235:443
ASN
#13335 CLOUDFLARENET

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subjectlimetorrents.skin
FingerprintC9:DA:27:7E:DD:0F:37:53:B0:1E:C2:62:1B:C2:37:41:C8:B0:5C:3A
ValidityTue, 07 May 2024 16:37:23 GMT - Mon, 05 Aug 2024 16:37:22 GMT

File type
PNG image data, 1 x 170, 8-bit/color RGB, non-interlaced
Size
139 B (139 bytes)
Hash
95514704d6394c909af2bef0cba292ed
6b30ad015121fbf2b08d4b0d0ad7436ae60d0dc4
5c53f22ebcb55d4f778b344ffe4dd48c138d3e189b827385d4d0544cd49ebab7

HTTP Headers

GET /images/headerbg.png HTTP/1.1
Host: limetorrents.skin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 21 Jun 2024 20:39:53 GMT
content-type: image/png
content-length: 139
last-modified: Mon, 03 Jun 2024 21:08:43 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5801
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5aBaAAEH11hH%2FDOlt5423i2btPhaEMYg3mvvYe%2B1xvQ7qVy1trqbf%2B1jkkxFiaLC7pAuOOoIgD2TwTFDhmIAGT%2Fk7LpamWvl6BpcHakIDBiehIRUnCGixeFAODO9M1gSr10Fsw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8976cf818ca50b41-OSL
alt-svc: h3=":443"; ma=86400

GET limetorrents.skin/images/healthbars2.png

104.21.17.235

200 OK

37 kB

URL GET HTTP/3
limetorrents.skin/images/healthbars2.png
IP
104.21.17.235:443
ASN
#13335 CLOUDFLARENET

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subjectlimetorrents.skin
FingerprintC9:DA:27:7E:DD:0F:37:53:B0:1E:C2:62:1B:C2:37:41:C8:B0:5C:3A
ValidityTue, 07 May 2024 16:37:23 GMT - Mon, 05 Aug 2024 16:37:22 GMT

File type
PNG image data, 798 x 330, 8-bit colormap, non-interlaced
Size
37 kB (37126 bytes)
Hash
ab150393bcecce0f43a9220ca7baefd2
7d69a7e303c466034c9d5f50d6585bacd7d48eae
d2ea0647db1dfe187b274b805287b4ead2bad8748577119f5a8f3c1384e20876

HTTP Headers

GET /images/healthbars2.png HTTP/1.1
Host: limetorrents.skin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 21 Jun 2024 20:39:53 GMT
content-type: image/png
content-length: 37126
last-modified: Mon, 03 Jun 2024 21:08:44 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5801
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jJ6dxRMxj8rZNmT6DD5OnoJBKcKvty2g2mZEcgt%2BoKJdfHfv6HU4sEC2QGQiViic4gtjsgxJ9LHR%2B9bv1vxG1njUvKnb9ER4kCgS3AiRVoD8A7Sixz9%2FSRrXCe0MvLk8VKn3oQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8976cf819caf0b41-OSL
alt-svc: h3=":443"; ma=86400

GET limetorrents.skin/images/logo.png

104.21.17.235

200 OK

20 kB

URL GET HTTP/3
limetorrents.skin/images/logo.png
IP
104.21.17.235:443
ASN
#13335 CLOUDFLARENET

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subjectlimetorrents.skin
FingerprintC9:DA:27:7E:DD:0F:37:53:B0:1E:C2:62:1B:C2:37:41:C8:B0:5C:3A
ValidityTue, 07 May 2024 16:37:23 GMT - Mon, 05 Aug 2024 16:37:22 GMT

File type
PNG image data, 353 x 55, 8-bit/color RGBA, non-interlaced
Size
20 kB (19929 bytes)
Hash
939867a1ce2e47bd0d40cf06c4064c1b
8005e50ba6cb78cd9d8506a7755bbefde6e5cf8d
aea30bb7960772b2315c12cb33db6d335608b834f07f5f5aaa42acb3d6292fc7

HTTP Headers

GET /images/logo.png HTTP/1.1
Host: limetorrents.skin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 21 Jun 2024 20:39:53 GMT
content-type: image/png
content-length: 19929
last-modified: Mon, 03 Jun 2024 21:08:52 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5801
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IClPUuP4Gdk9AJSCux8AFtRCK3AAwGb6vgoQSJQEhq2C6W0bKjq4o4%2BbxAJLe8uMWqR9Za1an0UwAhUnCVFe1e3AnGyCut1CxNwk23m1iE%2F6tRwXNHdjJUXw5AzJZYAoQeRzBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8976cf819cb10b41-OSL
alt-svc: h3=":443"; ma=86400

GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0

104.17.24.14

200 OK

77 kB

URL GET HTTP/3
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://limetorrents.skin
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 21 Jun 2024 20:39:53 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 165323
expires: Wed, 11 Jun 2025 20:39:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NPP6VzCKfB2K68peV1zABEBdmDD70VlztzoK5nur9H0W%2BVi0Swjtwz7HxHtsS1tE8vrdRkfZAmNWRK8Qh0tQmNMrdRinamKcM76K0R1PbGB3%2FcKCyHKa3D1WzbMO0SQfE13G9OrQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8976cf81ce7856a9-OSL
alt-svc: h3=":443"; ma=86400

GET limetorrents.skin/css/style.css

104.21.17.235

200 OK

34 kB

URL GET HTTP/3
limetorrents.skin/css/style.css
IP
104.21.17.235:443
ASN
#13335 CLOUDFLARENET

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subjectlimetorrents.skin
FingerprintC9:DA:27:7E:DD:0F:37:53:B0:1E:C2:62:1B:C2:37:41:C8:B0:5C:3A
ValidityTue, 07 May 2024 16:37:23 GMT - Mon, 05 Aug 2024 16:37:22 GMT

File type
ASCII text
Size
34 kB (33657 bytes)
Hash
d4748a05b81874af374d1b89df83e885
1bec747c7cfc503ba662220976326c3342429eb4
2dbcbf512e0ddfb50f317085f3a04bab5ebaad0de5b75e5cf54299c3232a45ab

HTTP Headers

GET /css/style.css HTTP/1.1
Host: limetorrents.skin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/download-torrent-44645248
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 21 Jun 2024 20:39:53 GMT
content-type: text/css
last-modified: Mon, 03 Jun 2024 21:08:36 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5802
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lRwypyUL8X1hCGwX6PznL5uZaQ6SgTx5dXf4mgZww2WM3qd%2FKGceeBUa%2Fnmw4V11pdOPkPrzh45a6YKPJjRDfDPlRMmS1QIb9UIaBlXRLgiVeNiJdtMJ9Cd6SfbJcDn%2BRNIxtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8976cf7f9ada0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET proftrafficcounter.com/stats

18.192.184.0

200 OK

40 B

URL GET HTTP/2
proftrafficcounter.com/stats
IP
18.192.184.0:443
ASN
#16509 AMAZON-02

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
436071bbd3f396ce36e1867c012fa258
f8db6a4833737c1d0afe8c122ece53a8f90fa5ae
7728fffc8e01ea4dc6ee55e2bc02481802d98692b3bd54c6c6c03e21f12030f0

HTTP Headers

GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://limetorrents.skin
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 21 Jun 2024 20:39:54 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://limetorrents.skin
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=58e1fcce-6691-4439-9090-032b621b426f:1:1; expires=Mon, 19 Jun 2034 20:39:54 GMT; secure; SameSite=None
X-Firefox-Spdy: h2

GET baldappetizingun.com/pixel/purst?dl=0&th=0&sc=0&rs=1290&rd=1290&fd=602&bv=24.5.8230&tmpl=70

172.240.108.76

200 OK

0 B

URL GET HTTP/1.1
baldappetizingun.com/pixel/purst?dl=0&th=0&sc=0&rs=1290&rd=1290&fd=602&bv=24.5.8230&tmpl=70
IP
172.240.108.76:443
ASN
#7979 SERVERS-COM

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subjectbaldappetizingun.com
FingerprintF9:C7:4B:67:6E:10:17:A6:AE:8C:B0:88:A1:1F:8A:AE:12:57:96:75
ValidityTue, 04 Jun 2024 00:03:51 GMT - Mon, 02 Sep 2024 00:03:50 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/purst?dl=0&th=0&sc=0&rs=1290&rd=1290&fd=602&bv=24.5.8230&tmpl=70 HTTP/1.1
Host: baldappetizingun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 21 Jun 2024 20:39:54 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
6720792332fb717894b4e5221fdc3d86
f79b1d3611fb53cea950acb15000473ae7174149
67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965"
Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11559
Expires: Fri, 21 Jun 2024 23:52:33 GMT
Date: Fri, 21 Jun 2024 20:39:54 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
6720792332fb717894b4e5221fdc3d86
f79b1d3611fb53cea950acb15000473ae7174149
67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965"
Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11559
Expires: Fri, 21 Jun 2024 23:52:33 GMT
Date: Fri, 21 Jun 2024 20:39:54 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
6720792332fb717894b4e5221fdc3d86
f79b1d3611fb53cea950acb15000473ae7174149
67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965"
Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11640
Expires: Fri, 21 Jun 2024 23:53:54 GMT
Date: Fri, 21 Jun 2024 20:39:54 GMT
Connection: keep-alive

GET capaciousdrewreligion.com/advertisers.js

192.243.59.20

200 OK

0 B

URL GET HTTP/1.1
capaciousdrewreligion.com/advertisers.js
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subjectcapaciousdrewreligion.com
FingerprintBB:9C:12:88:24:43:D4:47:71:3F:F0:A4:BB:E1:85:65:CE:E7:92:E4
ValidityMon, 06 May 2024 02:35:23 GMT - Sun, 04 Aug 2024 02:35:22 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 21 Jun 2024 20:39:54 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 250a4d56d69406f4fcc865a09ad28925
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

GET recordedthereby.com/sfp.js

188.114.96.1

200 OK

28 kB

URL GET HTTP/2
recordedthereby.com/sfp.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerGoogle Trust Services LLC
Subjectrecordedthereby.com
FingerprintA3:3F:9B:AE:CF:C6:1B:C3:8B:FC:65:01:2F:06:6A:22:60:3C:8E:AF
ValidityWed, 08 May 2024 14:16:18 GMT - Tue, 06 Aug 2024 14:16:17 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size
28 kB (27487 bytes)
Hash
7e3e44049654b6e244c1777e68ffb8e7
8f2a8298666d607afd92a0baa362ef4dc9ccd039
4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b

HTTP Headers

GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 21 Jun 2024 20:39:54 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, max-age=0, private, no-cache
x-request-id: dfa404a44514d3cadf8238de178f4f62
pragma: no-cache
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gpTgJTkUhKLuYTXu0x2O4RIDnMo859K0pT4dvHeIXy9QlSYXMGVStjtcXKTEZj2RGrUrzL9fdkUvWAaD36V86WpJeRI%2By7s%2F8nfqjaW%2BTwzYCS%2Fo3Kig6fEqXofMOPprpC3R9han"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8976cf849e0c1c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET cooperateboneco.com/06/44/43/06444360220cd3121ea71b73847bab58.js

192.243.61.227

200 OK

84 kB

URL GET HTTP/1.1
cooperateboneco.com/06/44/43/06444360220cd3121ea71b73847bab58.js
IP
192.243.61.227:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subjectcooperateboneco.com
FingerprintC0:CD:4D:96:7E:BC:F5:E1:4A:C7:D5:79:1F:EA:95:97:5C:93:28:68
ValidityTue, 23 Apr 2024 06:44:37 GMT - Mon, 22 Jul 2024 06:44:36 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
84 kB (84194 bytes)
Hash
39f7bdb2b5bdedf84f22c66237fe6a28
ce624fba0f238ca70bd22fe1d403e606bac48ca3
1b1b20154d9341e5112d64cc8a3c560cc0af21023ee49fe8c89f17f7762f2773

HTTP Headers

GET /06/44/43/06444360220cd3121ea71b73847bab58.js HTTP/1.1
Host: cooperateboneco.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 21 Jun 2024 20:39:54 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: f4f76d627519029ef67caab4f544e89b
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

GET unseenreport.com/pxf.gif?uuid=58e1fcce-6691-4439-9090-032b621b426f&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=06444360220cd3121ea71b73847bab58&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20

192.243.59.20

200 OK

0 B

URL GET HTTP/1.1
unseenreport.com/pxf.gif?uuid=58e1fcce-6691-4439-9090-032b621b426f&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=06444360220cd3121ea71b73847bab58&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subject*.unseenreport.com
FingerprintF5:95:0F:2B:01:D6:36:49:AB:2E:61:76:F7:EC:A5:45:3D:F1:0E:59
ValidityTue, 21 May 2024 07:36:27 GMT - Mon, 19 Aug 2024 07:36:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pxf.gif?uuid=58e1fcce-6691-4439-9090-032b621b426f&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=06444360220cd3121ea71b73847bab58&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 21 Jun 2024 20:39:55 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c1762f5d29922d3df87e390d06602095
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

GET limetorrents.skin/download-torrent-44645248

104.21.17.235

200 OK

12 kB

URL User Request GET HTTP/2
limetorrents.skin/download-torrent-44645248
IP
104.21.17.235:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectlimetorrents.skin
FingerprintC9:DA:27:7E:DD:0F:37:53:B0:1E:C2:62:1B:C2:37:41:C8:B0:5C:3A
ValidityTue, 07 May 2024 16:37:23 GMT - Mon, 05 Aug 2024 16:37:22 GMT

File type
HTML document, ASCII text, with very long lines (1871)
Size
12 kB (12360 bytes)
Hash
38f99ba8b139ece59fba315edf32c9e5
617262f4372c99228515df8d54376f0a03b5f966
2aa813b4def5befa458e9769480948e760e49001e46d1324cc12e67110323bda

HTTP Headers

GET /download-torrent-44645248 HTTP/1.1
Host: limetorrents.skin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 21 Jun 2024 20:39:53 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x5S%2BuPPZWcQfvIWiX7CwZ9jU8bqZ5fHOhoZSgGuE%2FLfAR3i6bTdrvXDdmU%2BEkhRi3weGu8N%2FDwW1Jkd5nZ1zEVfHY%2FFYZpWa%2F4m5VO4f7RSNfXyj9IHddVL%2BNQLoz5b8rBmCkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8976cf7c8a0c56ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET limetorrents.skin/favicon.ico

104.21.17.235

200 OK

1.4 kB

URL GET HTTP/3
limetorrents.skin/favicon.ico
IP
104.21.17.235:443
ASN
#13335 CLOUDFLARENET

Requested by
https://limetorrents.skin/download-torrent-44645248
Certificate
IssuerLet's Encrypt
Subjectlimetorrents.skin
FingerprintC9:DA:27:7E:DD:0F:37:53:B0:1E:C2:62:1B:C2:37:41:C8:B0:5C:3A
ValidityTue, 07 May 2024 16:37:23 GMT - Mon, 05 Aug 2024 16:37:22 GMT

File type
MS Windows icon resource - 1 icon, 16x16
Size
1.4 kB (1406 bytes)
Hash
9281405a6f4d7092b97ad4323337b7d6
15a2ab2c67faf1c4e394628c012a54672fc28ae9
26d9aadcad897367e6ac9e5d9f3b68444c77863bcdb86ec6bef2c289bf1714e7

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: limetorrents.skin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://limetorrents.skin/download-torrent-44645248
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=58e1fcce-6691-4439-9090-032b621b426f%3A1%3A1; pp_main_06444360220cd3121ea71b73847bab58=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 21 Jun 2024 20:39:54 GMT
content-type: image/x-icon
last-modified: Mon, 03 Jun 2024 21:08:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6246
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kzAl25PoB1BXAY4sG7k0XOjmTCNQTOc37VcWIj7anqr1MttdBIug0DtbrHMVKdtk6NF2Yg%2FjvVnGvHWhSpJx19c%2FxCK%2FRRC%2FvL2tiXOVWhWiQLJsVwikqmZroQWU4dFAbLyArw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8976cf883aa10b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (21)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash